Authentication & Authorization

JWT authentication in NestJS involves configuring a JWT secret and implementing a login flow that issues access and refresh tokens. This skill provides concrete code patterns for token issuance, rotation, and route protection using Passport.js.

Setting up RBAC for protected routes requires defining user roles and applying route guards to enforce access control across backend endpoints. This skill outlines RBAC strategies with concrete configuration examples to secure admin panels and user endpoints.

Google OAuth integration for third-party sign-in handles user provisioning through external authentication. This skill guides the OAuth integration process, enabling single sign-on for enterprise teams by connecting Google authentication with your backend user system.

Yes, Prisma works with Passport.js for secure user authentication by managing user data and validating credentials. This skill provides configuration examples for NestJS, Prisma, and Passport.js to meet deployment-time security requirements.

Password hashing best practices for secure authentication require implementing proper password validation rules and secure hashing algorithms. This skill covers password security patterns to reduce risks from insecure passwords in your authentication system.

Token rotation for JWT-based authentication is needed when implementing access and refresh tokens for API security. This skill guides token issuance and rotation strategies to maintain secure sessions and protect backend endpoints from unauthorized access.