Create and verify JSON Web Tokens with signing algorithms and expiration policies.
npx skills add https://github.com/hung-phan/system-skills --skill jwt-hung-phan
Please help me install this Agent Skill. Skill: jwt Source: https://github.com/hung-phan/system-skills/tree/main/skills/system-review/references/security/jwt Command: npx skills add https://github.com/hung-phan/system-skills --skill jwt-hung-phan
This Skill guides the implementation of JSON Web Tokens (JWTs) for secure, stateless authentication, solving the challenges of cross-service authorization and scalable session management.
Create a JWT with the 'jwt' skill by specifying the 'iss', 'sub', 'exp', 'iat', and 'jti' fields.
High-intent search queries and answers about installing and using this skill.
Token issuance and verification for JWTs involves creating tokens with standard claims like iss, sub, exp, iat, and jti, then validating signatures and expiration policies on receiving services. This ensures secure cross-service authorization without server-side session management.
JWTs support both symmetric and asymmetric encryption algorithms for signing tokens, allowing you to balance performance with security requirements. You can configure specific signing algorithms and expiration policies based on your distributed system needs.
JSON Web Tokens are necessary when scaling session management across distributed systems causes database bottlenecks or when cross-service authorization becomes complex. They enable any microservice to authenticate a user with a single verifiable token, reducing session management complexity.
Yes, JWTs support both symmetric and asymmetric encryption algorithms for signing and verifying tokens. This allows engineers to select the appropriate cryptographic approach based on their microservices architecture security and performance requirements.
JWT authentication reduces session management complexity by being stateless, eliminating the need for server-side session storage. Any service in a microservices architecture can authenticate a user with a single verifiable token, improving performance and horizontal scalability.
resonatehqAuthenticate clients with JWT tokens and authorize access by prefix.
mahg-esImplement JWT-based authenticate and authorize middleware for Express routes.
ginkidaDesign OAuth 2.0 and OpenID Connect authorization flows with PKCE and JWT validation.
igbuendImplement server-side opaque token authentication with CSPRNG generation and lifecycle policies.
