Is this specific to a certain backend framework?

While the primary examples utilize Express.js and TypeScript, the underlying patterns and logic are applicable to any modern backend architecture or API design.

How does it handle complex user permissions?

It provides code structures for both Role-Based Access Control (RBAC) and granular Permission-Based Access Control, including role hierarchy management.

Can I use this for social logins like Google or GitHub?

Absolutely. The skill includes implementation patterns for OAuth2 and OpenID Connect, specifically showcasing integrations with Passport.js.

Does this skill support stateless authentication?

Yes, it provides comprehensive patterns for JWT-based stateless authentication, including secure generation, verification, and refresh token rotation strategies.

Authentication & Authorization Patterns

Name: Authentication & Authorization Patterns
Author: Activer007

byActiver007

0•

Seguridad y Pruebas

Implements robust security systems using modern patterns like JWT, OAuth2, session management, and role-based access control.

This skill provides Claude with expert-level guidance and code patterns for building secure, scalable authentication and authorization layers. It covers high-level architectural decisions and low-level implementation details for stateless JWT flows, stateful session management via Redis, and multi-provider OAuth2 integrations. By following these industry-standard patterns, developers can ensure their APIs and applications are protected against common security vulnerabilities while maintaining a clean, maintainable codebase for complex permission structures.

Características Principales

01Redis-backed session management for stateful applications

020 GitHub stars

03Hierarchical Role-Based Access Control (RBAC) and Permission-based logic

04Production-grade security middleware for Express and Node.js APIs

05JWT implementation with secure refresh token rotation and hashing

06Multi-provider OAuth2 and social login integration using Passport.js

Casos de Uso

01Architecting a secure authentication system for a new full-stack application

02Migrating from simple sessions to a scalable, stateless JWT architecture

03Implementing granular, permission-based access control for enterprise dashboards

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add activer007/ordinary-claude-skills auth-implementation-patterns

For use in Claude.ai and ChatGPT

Download Skill