Auth Implementation Patterns

소개

Provides comprehensive guidance and production-ready code patterns for building secure, scalable access control systems. This skill covers a wide spectrum of authentication strategies—from stateless JWTs with refresh token flows to stateful session management—alongside advanced authorization models like Role-Based Access Control (RBAC) and resource ownership validation. It is designed to help developers secure REST or GraphQL APIs, integrate social logins, and apply critical security best practices like robust password hashing and middleware-level permission checking.

주요 기능

• OAuth2 and social login integration patterns
• JWT implementation with access and refresh token flows
• 23,139 GitHub stars
• Role-Based (RBAC) and Permission-Based Access Control models
• Session-based authentication with stateful storage
• Security best practices for password hashing and resource ownership

사용 사례

• Integrating third-party social login providers like Google or GitHub
• Securing REST or GraphQL APIs with stateless or stateful authentication
• Implementing complex role-based or permission-based access control systems