Implements secure user authentication, token management, and role-based access control using industry-standard patterns.
This skill provides comprehensive implementation patterns for securing modern web applications and APIs. It covers the full lifecycle of identity management, from password hashing with bcrypt and JWT-based session handling to complex OAuth 2.0 flows and Multi-Factor Authentication (MFA). By providing standardized boilerplate and best practices for refresh tokens, password reset flows, and Role-Based Access Control (RBAC), it ensures that developers can build robust, secure backend architectures while avoiding common security pitfalls in Express and Node.js environments.
主な機能
01OAuth 2.0 integration (Google Strategy)
02API Key authentication and MFA implementation
03JWT and Refresh Token lifecycle management
04Secure password hashing and reset workflows
050 GitHub stars
06Role-Based Access Control (RBAC) middleware
ユースケース
01Securing REST APIs with token-based authorization
02Implementing multi-tenant or role-specific access permissions
03Building a secure user registration and login system
