fastapi-auth-patterns

JWT authentication in FastAPI requires token generation with secure password hashing, token validation on protected endpoints, and environment-driven secret management. This Skill implements the complete flow: Argon2 password hashing, JWT token creation and verification, and per-endpoint protection patterns using FastAPI dependencies.

OAuth2 is a protocol framework supporting multiple flows and external providers; JWT is a token format. This Skill implements OAuth2 password flow with JWT tokens, scope-based permissions, and optional Supabase integration for managed OAuth provider authentication alongside self-hosted token approaches.

Role-based access control (RBAC) and scope-based permissions protect endpoints by validating user roles or scopes before execution. This Skill provides RBAC and scope implementation patterns, endpoint protection decorators, and configuration validation to enforce fine-grained permissions across your FastAPI routes.

Yes. This Skill includes Supabase integration patterns for managed authentication, OAuth provider support, and token validation. It handles environment setup, secret configuration, and endpoint protection to connect FastAPI routes with Supabase's authentication system.

Critical validations include password hashing strength, token expiration and signature verification, environment variable security, scope enforcement, and endpoint-level access control. This Skill automates these checks, validates configurations across development and production, and debugs common authentication failures.

Endpoint protection requires authentication validation and permission checks before route execution. This Skill provides multiple protection patterns: JWT token verification, OAuth2 scope validation, role checking, and FastAPI dependency injection to secure individual routes or groups of endpoints.