Issue short-lived access tokens and rotating refresh tokens in httpOnly cookies.
npx skills add https://github.com/jrmatherly/metorial-workspace --skill jwt-auth
Please help me install this Agent Skill. Skill: jwt-auth Source: https://github.com/jrmatherly/metorial-workspace/tree/main/.github/skills/jwt-auth Command: npx skills add https://github.com/jrmatherly/metorial-workspace --skill jwt-auth
Enable secure, stateless authentication for SPAs, mobile apps, and APIs by issuing short-lived access tokens and rotatable refresh tokens.
Use the jwt-auth skill to enable secure authentication with refresh token rotation in your app.
High-intent search queries and answers about installing and using this skill.
You should use JWT authentication with refresh token rotation for SPAs, mobile apps, and APIs requiring stateless authentication with automatic token renewal. It issues short-lived access tokens and rotates refresh tokens to maintain secure, continuous user sessions.
You can secure JWT tokens by keeping the short-lived access token in application memory and storing the rotatable refresh token in an httpOnly cookie. This approach mitigates XSS-based token theft while supporting automatic session renewal.
Yes, this JWT authentication implementation supports both TypeScript/JavaScript and Python backends. It provides token creation, rotation, storage in httpOnly cookies, and verification capabilities seamlessly across these distinct backend environments.
The best way to implement stateless authentication for modern APIs is to issue short-lived JWT access tokens and rotate refresh tokens. This approach maintains secure stateless verification while enabling automatic token renewal for active sessions.
You need short-lived access tokens for SPA authentication to minimize the impact window if a token is compromised. Pairing them with rotatable refresh tokens stored in httpOnly cookies ensures secure, automatic session renewal without persistent exposure.
saintgo7Implement API key issuance, verification, and revocation with salted hashing.
mahg-esImplement JWT-based authenticate and authorize middleware for Express routes.
HassanRJ-3108Implement user signup, signin, password hashing, and JWT verification.
curiositechImplement OAuth 2.0 and OpenID Connect authentication flows with PKCE.
