Provide defensive auth patterns for NextAuth.js v5 and Next.js 16+.
npx skills add https://github.com/TimeKast/AgendaInteligente --skill kb-security
Please help me install this Agent Skill. Skill: kb-security Source: https://github.com/TimeKast/AgendaInteligente/tree/main/.claude/skills/kb-security Command: npx skills add https://github.com/TimeKast/AgendaInteligente --skill kb-security
This Skill prevents common authentication and authorization vulnerabilities in NextAuth.js v5 + Next.js 16+ apps by providing portable, defense-in-depth patterns for session verification, RBAC modeling, input validation, and high-risk flows like password reset.
Use kb-security to review your NextAuth configuration and add Zod-validated permission checks plus a secure password-reset flow that avoids enumeration, hashes reset tokens, and enforces rate limits.
High-intent search queries and answers about installing and using this skill.
RBAC permission checks in NextAuth.js require defining a roles × actions matrix with default-deny semantics. You verify permissions in middleware, page guards, and Server Actions to ensure users only access explicitly granted resources.
Password reset hardening prevents enumeration by returning constant responses regardless of email validity. You hash reset tokens, enforce one-time consumption, invalidate active sessions, and apply rate limiting to block brute-force attacks.
Validating Server Action inputs with Zod requires schema parsing at every boundary to block malformed or malicious data. You define Zod schemas for API bodies and action inputs to prevent injection attacks before processing.
These security hardening patterns require defining a roles × actions RBAC matrix with default-deny and explicit deny semantics. You model roles and permissions upfront to eliminate ambiguous authorization logic and configuration drift.
Relying only on middleware creates single-layer failures where bypasses expose unprotected routes. You need additional page-level checks, Server Action verification, and RBAC permission enforcement to achieve defense-in-depth layering.
ftc8569Configure NextAuth.js v5 with OAuth providers and a Prisma adapter.
PrasadTelasulaImplement JWT-based authentication with bcrypt hashing and refresh tokens in FastAPI.
rsmdtApply standardized REST and GraphQL design patterns to API contracts and versioning.
engineers-hub-ltd-in-house-projectImplement Role-Based Access Control with hierarchical roles and middleware enforcement.
