standard-security-auth

Implement JWT, cookie-based sessions, and MFA authentication for web applications.

1|Updated Dec 30, 2025

Search Tags:#authentication #RBAC #frontend-backend #api-security #JWT #MFA #cookie-based-auth

Ready to run

npx skills add https://github.com/minhcopilot/antigravity --skill standard-security-auth

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: standard-security-auth
Source: https://github.com/minhcopilot/antigravity/tree/main/skills/standard-security-auth
Command: npx skills add https://github.com/minhcopilot/antigravity --skill standard-security-auth

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill standardizes and secures authentication implementations across frontend and backend, reducing misconfigurations and security gaps.

Core Features & Use Cases

JWT-based authentication: Token-based sessions with secure storage and token refresh.
Cookie-based sessions: HttpOnly cookies for session persistence and reduced XSS risk.
MFA & RBAC: Support for multi-factor verification and role-based access controls.
Audit & API integration: Centralized logging and seamless integration with existing APIs and middleware.

Quick Start

Configure your app to issue and validate JWTs, store tokens in HttpOnly cookies, enable MFA checks in the authentication middleware, and verify protected routes with test users.

Frequently Asked Questions about standard-security-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I implement secure JWT authentication with HttpOnly cookies?▼

Secure JWT authentication utilizes HttpOnly cookies for session persistence, reducing XSS risk while handling token issuance, secure storage, and refresh across frontend and backend middleware.

What is the best way to add MFA checks to existing API authentication middleware?▼

Adding MFA checks to API authentication middleware involves configuring multi-factor verification logic alongside role-based access controls to protect routes and log access events.

How does role-based access control integrate with frontend token handling?▼

Role-based access control integrates with frontend token handling by validating user permissions via middleware, ensuring protected routes verify roles before allowing API access.

Can I use cookie-based sessions and JWT together for scalable web apps?▼

Cookie-based sessions and JWT can be combined for scalable web apps by issuing tokens stored in HttpOnly cookies, balancing stateless validation with secure session persistence.

Does this authentication pattern support centralized audit logging?▼

This authentication pattern supports centralized audit logging by capturing authentication events and API integration checks, standardizing security reviews and access tracking across the stack.