Acerca de
This skill provides comprehensive guidance for architecting and implementing robust security layers in modern applications. It covers essential authentication strategies including stateless JWT with refresh token flows, stateful session management using Redis, and third-party social login via OAuth2. Beyond identity verification, it offers deep dives into authorization patterns like Role-Based Access Control (RBAC) and granular Permission-Based systems, ensuring your APIs and services follow security best practices while maintaining scalability and ease of maintenance.