nestjs-auth-rbac

What problem does it solve?

This Skill provides comprehensive authentication and role-based access control for NestJS applications to manage user permissions effectively.

Core Features & Use Cases

• JWT Authentication with Refresh Tokens: Implements secure user login and token renewal workflows.
• Role and Permission Management: Defines flexible role schemas and permission assignments to control access.
• OAuth2 and Social Login Integration: Supports Google and GitHub login flows for seamless user onboarding.
• Security Hardening: Includes measures like CSRF protection, brute-force defenses, and password hashing.
• Multi-tenancy Support: Identifies tenants via subdomains, headers, or JWT claims with data isolation strategies.
• Resource Ownership Checks: Ensures users can only modify resources they own unless granted privilege.
• Token Revocation and Rotation: Supports blacklisting, token families, and session invalidation.

Quick Start

Use the nestjs-auth-rbac skill to set up secure, scalable auth with role-based safeguards in your NestJS project.