Authentication & Authorization System Skill

JWT-based authentication secures login by issuing signed tokens after credential verification. Configure a JWT secret in your backend, hash passwords with bcrypt, issue tokens on successful login, and validate tokens on protected routes. This Skill provides a production-ready implementation with refresh token lifecycle, token expiry enforcement, and session management for Node.js apps.

OAuth 2 integration streamlines sign-in by delegating authentication to external providers. This Skill implements Google and GitHub OAuth flows, handling token exchange, user profile retrieval, and account linking. Configure provider credentials in your backend config, then users can sign in without managing passwords directly.

RBAC controls resource access by assigning roles (student, instructor, admin, moderator) with granular permissions to users. This Skill defines enhanced User and Permission entities, maps permissions to roles, and enforces checks on protected endpoints. Result: fine-grained access control matching your organizational hierarchy.

Yes. This Skill includes optional two-factor authentication and account lockout after failed login attempts to harden security. It also covers email verification, password reset flows, and session management to prevent unauthorized access and meet compliance requirements.

Authentication requires typeorm for database modeling, bcrypt for password hashing, and jsonwebtoken for token generation and validation. This Skill implements these dependencies in a full-stack Angular + Node.js environment, handling user registration, email verification, and session lifecycle management out of the box.

Yes. This Skill implements remember-me functionality, session tracking, and IP-based device controls for enhanced security and user convenience. Sessions are persisted and validated to ensure only authorized access, with configurable expiry and logout handling across devices.