Agent skill · security · aiskillstore
auth-implementation-patterns
Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing APIs, or debugging security issues.
Why this skill is useful
Includes executable scripts for JWT authentication and refresh token management that provide secure access control capabilities.
What it needs
Requires jsonwebtoken installed locally. About 8k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Authentication & Authorization Implementation Patterns Build secure, scalable authentication and authorization systems using industry-standard patterns and modern best practices. When to Use This Skill Implementing user authentication systems Securing REST or GraphQL APIs Adding OAuth2/social login Implementing role-based access control (RBAC) Designing session management Migrating authentication systems Debugging auth issues Implementing SSO or multi-tenancy Core Concepts 1. Authentication vs Authorization Authentication (AuthN): Who are you? Verifying identity (username/password, OAuth, biometrics) Issuing credentials (sessions, tokens) Managing login/logout Authorization (AuthZ): What can you do? Permission checking Role-based access control (RBAC) Resource ownership validation Policy enforcement 2. Authentication Strategies Session-Based: Server stores session state Session ID in cookie Traditional, simple, stateful Token-Based (JWT): Stateless, self-contained Scales horizontally Can store claims OAuth2/OpenID Connect: Delegate authentication Social login (Google, GitHub) Enterprise SSO JWT Authentication Pattern 1: JWT Implementation Pattern 2: Refresh Token Flow Session-Based Authentication Pattern 1: Express Session OAuth2 / Social Login Pattern 1: OAuth2 with Passport.js Authorization Patterns Pattern 1: Role-Based Access Control (RBAC) Pattern 2: Permission-Based Access Control Pattern 3: Resource Ownership Security Best Practices Pattern 1: Password Security Pattern 2: Rate Limiting Best Practices 1. Never Store Plain Passwords: Always hash with bcrypt/argon2 2. Use HTTPS: Encrypt data in transit 3. Short-Lived Access Tokens: 15-30 minutes max 4. Secure Cookies: httpOnly, secure, sameSite flags 5. Validate All Input: Email format, password strength 6. Rate Limit Auth Endpoints: Prevent brute force attacks 7. Implement CSRF Protection: For session-based auth 8. Rotate Secrets Regularly: JWT secrets, session secrets 9. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/auth-implementation-patterns--bf41d7