概要
This skill provides comprehensive guidance for architecting and implementing robust security layers in modern applications. It covers essential authentication strategies like stateless JWTs with refresh tokens and stateful session management, alongside sophisticated authorization models including Role-Based Access Control (RBAC) and granular permission systems. Whether you are securing a REST API, integrating social login via OAuth2, or debugging complex security middleware, this skill ensures your implementation follows industry security best practices and scales effectively for production environments.