概要
This skill provides comprehensive guidance and production-ready patterns for building robust access control systems. It covers critical security requirements such as stateless JWT authentication with refresh token rotation, stateful session management using Redis, and third-party social login integration via OAuth2. Additionally, it offers implementation strategies for granular authorization models like Role-Based Access Control (RBAC) and Permission-Based Access Control, making it an essential resource for developers designing secure APIs or migrating legacy authentication systems.