What problem does it solve? Building secure authentication from scratch is error-prone: weak password hashing, missing token expiry, and unprotected routes are common vulnerabilities. This Skill provides working patterns for implementing JWT authentication in Node.js applications, covering registration, login, token verification middleware, and role-based authorization. ## Core Features & Use Cases - Token Generation & Verification: Create short-lived access tokens and long-lived refresh tokens using jsonwebtoken, with middleware that validates Bearer tokens on protected routes. - Password Security: Hash and verify passwords with bcrypt, plus a complete password reset flow using short-expiry signed tokens. - Role-Based Access Control: Restrict endpoints by user role with a reusable authorize middleware. - Use Case: You are building a REST API and need stateless authentication. Use this Skill to scaffold registration, login, token refresh, and admin-only routes without designing the security flow from zero. ## Quick Start Ask the AI to implement JWT authentication with registration, login, and a protected profile route in your Node.js Express app.
