What authentication standard does this skill use?

This skill implements JWT (JSON Web Token) authentication using the HMAC SHA-256 (HS256) algorithm and HTTP Bearer token schemes.

Can I customize the token expiration time?

Yes, the skill provides patterns for environment variable configuration where you can set JWT_EXPIRATION_DAYS, defaulting to 7 days.

Does this skill help prevent IDOR (Insecure Direct Object Reference)?

Yes, it includes specific patterns to verify that the user_id extracted from the JWT matches the user_id in the URL path, preventing users from accessing each other's data.

Is it compatible with frontend auth libraries?

It is designed to work effectively with Better Auth by using a shared BETTER_AUTH_SECRET for token consistency across the entire stack.

How does it handle password security?

It utilizes Passlib with the bcrypt hashing scheme to ensure passwords are never stored in plain text and are verified securely during login.

Backend JWT Authentication

Name: Backend JWT Authentication
Author: Syedaashnaghazanfar

bySyedaashnaghazanfar

•

API開発

Implements secure JWT authentication middleware, token verification, and user isolation patterns for FastAPI backends.

概要

This skill provides a robust framework for implementing JSON Web Token (JWT) security within FastAPI applications. It automates the creation of authentication middleware, secure token generation, and password hashing using industry-standard bcrypt. A key focus is user isolation, providing patterns that strictly validate token-based user IDs against request paths to prevent unauthorized data access. It is specifically optimized for environments using shared secrets like Better Auth, ensuring seamless authentication consistency between frontend and backend services.

主な機能

Secure password hashing and verification via Passlib and bcrypt
Configurable environment-based secret management and token expiration
Strict user isolation by matching JWT claims to URL path parameters
Standardized templates for signup, sign-in, and sign-out endpoints
2 GitHub stars
JWT verification middleware with HS256 algorithm support

ユースケース

Protecting sensitive user data through automated ID validation patterns
Securing RESTful API endpoints in a multi-user FastAPI application
Implementing cross-stack authentication with shared Better Auth secrets

概要

主な機能

Secure password hashing and verification via Passlib and bcrypt
Configurable environment-based secret management and token expiration
Strict user isolation by matching JWT claims to URL path parameters
Standardized templates for signup, sign-in, and sign-out endpoints
2 GitHub stars
JWT verification middleware with HS256 algorithm support

ユースケース

Protecting sensitive user data through automated ID validation patterns
Securing RESTful API endpoints in a multi-user FastAPI application
Implementing cross-stack authentication with shared Better Auth secrets