skills.rest
ftnilsson
ftnilssonCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

Authentication & Authorisation

Implement token-based authentication and RBAC access control for backend systems.

Updated Feb 15, 2026
Search Tags:#authorization#security#authentication#oauth#jwt#backend#rbac
One-click install
npx skills add https://github.com/ftnilsson/agent-cli --skill authentication-authorisation
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Authentication & Authorisation
Source: https://github.com/ftnilsson/agent-cli/tree/main/backend/skills/03-authentication-and-authorization
Command: npx skills add https://github.com/ftnilsson/agent-cli --skill authentication-authorisation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need to implement secure identity verification and access control in backend systems, ensuring only authorized users can perform specific actions.

Core Features & Use Cases

  • Authentication: Verifies user identity using strategies like OAuth 2.0, OIDC, session cookies, or API keys.
  • Authorization: Controls access to resources based on roles or attributes (RBAC/ABAC).
  • Use Case: Implementing a secure login system for a web application and protecting API endpoints to ensure only authenticated and authorized users can access sensitive data.

Quick Start

Implement token-based authentication for your API using JWT validation and RBAC for access control.

Frequently Asked Questions about Authentication & Authorisation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement secure JWT authentication for my backend API?▼

Secure JWT authentication for a backend API is implemented using token validation to verify user identity. This approach ensures only authenticated users can access sensitive data by validating tokens issued during the login process.

What is the best way to set up role-based access control for protected endpoints?▼

Role-based access control (RBAC) is implemented by assigning roles to users and checking permissions against protected resources. This controls access to API endpoints, ensuring only authorized users perform specific actions on sensitive data.

How does OAuth 2.0 and OIDC work for backend identity verification?▼

OAuth 2.0 and OIDC provide backend identity verification by delegating authentication to an external provider. This mechanism allows your application to securely verify user identity and manage sessions without handling raw credentials directly.

Can I use this approach to secure API keys and session cookies for web applications?▼

Yes, you can secure web applications using API keys and session cookies for authentication. These strategies verify user identity and manage sessions, protecting backend endpoints from common authentication vulnerabilities.

When should I use ABAC instead of RBAC for access control?▼

You should use Attribute-Based Access Control (ABAC) instead of Role-Based Access Control (RBAC) when authorization requires evaluating user attributes, resource properties, or environmental conditions rather than simple static role assignments.

Related Skills

Explore More Software Engineering Skills→
cute-baobaocute-baobao

add-setting-env

Merge server-side environment variables into user settings at runtime.

Community
Intermediate
HyperscapeAIHyperscapeAI
91

api-gateway-configurator

Configure API gateways with rate limiting and JWT authentication.

Official
Advanced
ItsKumailHereItsKumailHere

better-auth-jwt

Implement JWT authentication across Next.js 16 and FastAPI with Bearer tokens.

Community
Advanced
neverinfamousneverinfamous
19

auth-identity

Configure OAuth2, JWT, sessions, and RBAC for web and API services.

Community
Advanced