Authentication & Authorization System

JWT-based authentication secures LMS login by issuing signed tokens after credential verification. This Skill provides user registration with email verification, secure JWT token generation, refresh token handling, and session management for Angular + Node.js projects, enabling stateless authentication across courses and enrollments.

RBAC grants permissions based on user roles—student, instructor, admin, moderator—allowing granular control over course and enrollment access. This Skill defines role hierarchies, maps permissions to actions, and enforces access rules during request handling, supporting scalable permission assignment across LMS workflows.

Yes. OAuth 2.0 integration streamlines user onboarding by delegating authentication to third-party providers. This Skill handles OAuth token exchange, user account linking, profile data mapping, and storage of OAuth IDs, reducing sign-up friction while maintaining security.

Email verification and password reset workflows confirm user identity and recover account access securely. This Skill generates verification tokens, manages email delivery, validates reset requests, and updates password hashes, protecting accounts from unauthorized access while maintaining user experience.

Yes. Optional 2FA adds a verification step using time-based codes, and account lockout blocks repeated failed login attempts. This Skill stores 2FA secrets, enforces lockout policies with configurable thresholds, and integrates session management to prevent credential compromise.

This Skill targets Angular + Node.js LMS projects and requires a database to store user entities with roles, statuses, hashed passwords, OAuth IDs, and 2FA secrets. It satisfies production-ready requirements for user management, token persistence, and permission mapping without external dependencies.