auth-skill

JWT refresh token rotation and replay detection can be implemented by generating secure backend user authentication modules that enforce strict token revocation controls and rotate refresh tokens automatically upon each access token renewal cycle.

Yes, you can generate SMS login and WeChat mini-program authentication workflows for existing FastAPI projects by creating modules that apply CSPRNG verification codes, Redis-based rate limiting, and anti-enumeration safeguards while preserving project API conventions.

The best way to add bcrypt password hashing and anti-enumeration safeguards to Node.js or Go backends is by generating a complete user authentication module that enforces secure password hashing and uniform error responses to prevent user enumeration attacks.

The generated user authentication system supports password recovery, phone rebinding, and account deactivation by producing complete user lifecycle management workflows alongside API contracts and database schema definitions for Java, Go, Python, and Node.js backends.

To manage environment-managed secrets and Redis-based rate limiting when building a user authentication module, generate backend configuration files that securely load environment variables and implement Redis-driven request throttling for login and recovery endpoints.

Limitations of generating a complete user authentication system include the requirement to adapt the generated domain model and database schema to your existing backend architecture, ensuring the implementation guidance for Java, Go, Python, or Node.js aligns with your current project conventions.