auth-security-expert

To implement JWT authentication and password hashing in Node.js, use this Skill to create custom JWT and HMAC-SHA256 tokens for login workflows, paired with scrypt for secure password hashing.

The best way to set up rate limiting with Redis is to enforce request thresholds using Redis as the primary store, with an in-memory fallback to maintain protection if the connection drops.

SSRF protection and CORS header configuration work by enforcing security measures that block unauthorized server-side requests and applying CORS, COOP, and COEP headers alongside secure cookie handling for web applications.

You do not strictly need Redis to handle role-based access control, but it is required for rate limiting, while secure user sessions are managed through custom JWT tokens and secure cookie handling.

Yes, you can use scrypt password hashing alongside custom JWT tokens, as this approach integrates scrypt for hashing credentials and generates HMAC-SHA256 JWTs to manage secure login and logout operations.