Authentication & Session Security

概要

This skill provides Claude with specialized knowledge for implementing secure authentication and session handling within software projects. It guides developers through complex security protocols like OAuth2/OIDC (including PKCE), helps implement industry-standard password hashing, and ensures JWTs are correctly validated and signed. By proactively identifying common vulnerabilities like session fixation or insecure token storage, this skill helps build resilient, production-ready security architectures that protect sensitive user data.

主な機能

• OAuth2 and OIDC authorization flow implementation
• MFA and password hashing best practices
• JWT verification, expiration, and signature validation
• Secure session management and timeout configuration
• Session fixation and CSRF prevention strategies
• 0 GitHub stars

ユースケース

• Implementing social login or Single Sign-On (SSO) using OAuth2
• Securing REST or GraphQL APIs with JWT-based authentication
• Auditing existing session management code for security vulnerabilities