skills.rest
ikeniborn
ikenibornCOMMUNITY
Explore all skills by this author →
GitHub

Authentication & Security

Implement JWT-based authentication, Telegram OAuth, and security middleware for REST APIs.

6|1|Updated Dec 12, 2019
Search Tags:#authorization#security#authentication#jwt#middleware#telegram-oauth
One-click install
npx skills add https://github.com/ikeniborn/familyBudget --skill authentication-security-ikeniborn
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Authentication & Security
Source: https://github.com/ikeniborn/familyBudget/tree/main/.claude/skills/authentication-security
Command: npx skills add https://github.com/ikeniborn/familyBudget --skill authentication-security-ikeniborn

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates and hardens authentication workflows by providing JWT-based security, Telegram OAuth integration, and reusable security middleware for web services.

Core Features & Use Cases

  • JWT in httpOnly cookies for secure session management
  • Telegram OAuth flow for seamless sign-in
  • Admin-only endpoint protection to enforce access control
  • Security middleware for CORS, CSP, and HSTS hardening

Quick Start

Configure your API to use the provided JWT endpoint templates and Telegram OAuth flow to enable secure authentication and authorization.

Frequently Asked Questions about Authentication & Security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement JWT authentication using httpOnly cookies for a REST API?▼

You implement JWT authentication by configuring your REST API to issue JWT tokens stored in httpOnly cookies. This approach ensures secure session management by preventing client-side scripts from accessing the session tokens.

How does Telegram OAuth login integration work for web services?▼

Telegram OAuth integration works by redirecting users to Telegram for authentication and validating the returned credentials on your server. This flow provides a seamless sign-in experience for web services without requiring users to manually enter passwords.

What is the best way to enforce admin-only access control on specific endpoints?▼

The best way to enforce admin-only access control is by applying middleware that validates user roles before reaching the endpoint. This approach protects specific routes by ensuring only authorized administrators can access restricted functionality.

Can I use security middleware to configure CORS, CSP, and HSTS hardening across endpoints?▼

Yes, you can use security middleware to configure CORS, CSP, and HSTS hardening across endpoints. This middleware applies security headers and policies uniformly to protect web services from common vulnerabilities and cross-origin threats.

Do I need to configure any dependencies to set up JWT-based security and Telegram OAuth?▼

No specific dependencies are required to set up JWT-based security and Telegram OAuth. The provided templates offer reusable security middleware and validation guidance that can be integrated directly into your existing web service environment.

Related Skills

Explore More Software Engineering Skills→
edfentonedfenton
3

mern-add-auth

Configure NextAuth.js authentication with OAuth providers for MERN apps.

Community
Advanced
Jawad-ChaudharyJawad-Chaudhary

auth-security

Implement JWT authentication and endpoint protection for FastAPI apps.

Community
Intermediate
SkobynSkobyn

hunt-brute-force

Detect login brute force, OTP/2FA brute force, and credential stuffing vulnerabilities.

Community
Advanced
dr-codedr-code

auth-patterns

Implement NextAuth v5 authentication and authorization for Next.js applications.

Community
Advanced