Authentication & Authorization System Skill

What problem does it solve?

This Skill provides a secure, scalable authentication and authorization backbone for an LMS, reducing risk from weak passwords, improper access controls, and fragmented login flows.

Core Features & Use Cases

• User management & RBAC: Roles (student, instructor, admin, moderator) with granular permissions to control access to resources.
• JWT-based auth & OAuth: Secure login using tokens and external providers (Google, GitHub) to streamline sign-in.
• Security hardening: Password hashing, account lockout after failed attempts, password reset, email verification, and optional 2FA.
• Session & device management: Track sessions, remember-me, and IP-based controls for improved security.
• Account lifecycle: Email verification, profile management, and session management to keep accounts up-to-date.

Quick Start

1. Configure your JWT secret and OAuth providers in backend/config.
2. Run the backend server and create an admin user.
3. Test login with credentials, then verify email verification and password reset flows.