security-and-auth

To implement JWT authentication, you must design secure token generation and validation flows. This skill provides guidelines for structuring JSON Web Tokens to verify user identities in Node.js applications.

The best way to encrypt sensitive data using AES-256-GCM and HMAC is to apply authenticated encryption to ensure data integrity and confidentiality. This skill provides guidance on integrating these cryptographic standards to protect your application's data.

To set up rate limiting and prevent API abuse, you need to design strategies that restrict excessive incoming requests. This skill discusses rate limiting architectures to protect your endpoints from malicious traffic and denial-of-service attempts.

Yes, this security skill covers both authentication and authorization design. It offers comprehensive architectural guidelines for designing secure systems that manage both user identity verification and access control permissions.

You should use HMAC instead of JWT when you need to verify the integrity and authenticity of a message rather than transmitting user identity claims. This skill provides guidance on selecting the appropriate encryption and security mechanisms for your specific use case.