소개
This skill provides a comprehensive collection of production-ready authentication and authorization patterns designed for modern web applications. It covers critical security implementations such as JWT versus session-based storage, Next.js middleware for route protection, and Role-Based Access Control (RBAC). Additionally, it includes robust logic for password management—including bcrypt hashing, cryptographically secure reset flows, and account lockout mechanisms to prevent brute-force attacks. Whether you are integrating OAuth with NextAuth or building a custom identity solution, this skill ensures your application adheres to security best practices and scales effectively.