Auth Implementation Patterns

概要

This skill provides comprehensive guidance and implementation patterns for building robust access control systems within your applications. It covers critical security architectures including stateless JWT authentication with secure refresh token flows, stateful session-based management using Redis, and third-party social login via OAuth2. Beyond simple identity verification, the skill offers granular authorization strategies such as Role-Based Access Control (RBAC) and permission-based logic, ensuring your REST or GraphQL APIs follow industry-standard security best practices while remaining scalable.

主な機能

• Provides granular access control models including RBAC and permission-based logic
• Configures stateful session-based authentication with Redis storage and CSRF protection
• 108 GitHub stars
• Implements stateless JWT authentication with secure refresh token rotation flows
• Delivers production-grade security middleware for Express and Node.js frameworks
• Integrates social login and SSO using industry-standard OAuth2 and OpenID Connect

ユースケース

• Securing REST and GraphQL APIs with token-based or session-based identity management
• Migrating legacy authentication to modern, scalable OAuth2 or JWT systems
• Implementing complex multi-tenant authorization and role hierarchy logic