backend-passport-js

JWT authentication in Express.js uses Passport.js middleware to validate tokens on protected routes. This Skill configures Passport with the JWT strategy, handles token validation, and integrates it into your Express middleware chain so requests are authenticated before reaching your route handlers.

Yes. Passport supports over 500 authentication strategies including OAuth, Google, GitHub, and JWT. This Skill lets you configure multiple strategies simultaneously, allowing users to authenticate via their preferred method while your API routes remain protected and strategy-agnostic.

Signup, login, and refresh flows require route handlers that validate credentials, issue JWT tokens, and handle token expiration. This Skill provides middleware integration and token generation using jsonwebtoken, along with patterns for protecting routes and managing session state across requests.

Role-based access control works by parsing user roles from JWT payload and enforcing permissions in middleware. This Skill integrates Passport authentication with custom middleware that checks roles before allowing route access, enabling fine-grained authorization across your Express REST API.

Authentication verifies who a user is using credentials or tokens; authorization controls what authenticated users can access. This Skill handles both: Passport authenticates requests via JWT or OAuth strategies, and middleware enforces role-based authorization on protected routes.

Yes. JWT tokens are stateless and work across microservices without shared session storage. This Skill generates signed JWTs that any microservice can validate independently, making it suitable for distributed backend APIs and service-to-service authentication flows.