authentication-patterns

To implement OAuth2 with PKCE in an Express application, use this Skill to securely handle the authorization code flow. It provides the necessary logic to integrate Proof Key for Code Exchange directly into your web application structure.

The best way to manage JWT access and refresh tokens is by using structured generation and verification logic. This Skill provides JWT handling patterns that securely issue and validate JSON Web Tokens using the jsonwebtoken library.

You can set up Role-Based Access Control (RBAC) permissions by implementing predefined permission sets within your application. This Skill provides the structural logic to enforce RBAC alongside your existing user authentication workflows.

Yes, you need the jsonwebtoken and crypto libraries to use these authentication patterns. The Skill relies on these dependencies, along with Express, to execute secure token generation, verification, and cryptographic operations.

You should use OAuth2 with PKCE instead of standard JWT authentication when you need to secure the authorization code flow against interception attacks. This Skill provides both patterns, allowing you to implement PKCE for external authorization and JWT for internal stateless sessions.