概要
This skill empowers developers to design and deploy robust security architectures for modern web applications using best-in-class authentication and authorization strategies. It provides detailed implementation patterns for stateless JWT authentication with refresh token rotation, stateful session management using Redis, and flexible authorization models including Role-Based Access Control (RBAC) and Permission-Based Access Control. Whether you are integrating social logins through OAuth2 or securing complex REST/GraphQL APIs, this skill ensures your security layer is scalable, follows modern best practices, and mitigates common vulnerabilities.
