What kind of authorization models are included?

The skill covers both Role-Based Access Control (RBAC) with hierarchies and more granular Permission-Based Access Control models.

Is this skill specific to a particular language?

While the examples are provided in TypeScript/Express, the underlying security patterns and logic are applicable to any modern backend framework.

Does this skill support JWT and Refresh Tokens?

Yes, it provides complete implementation patterns for both short-lived access tokens and secure, database-backed refresh token rotation flows.

How does it handle session security?

It provides patterns for secure cookie configuration, including HttpOnly, Secure, and SameSite attributes, often using Redis for stateful session storage.

Can I use this for social login implementation?

Absolutely. It includes patterns for OAuth2 integration with providers like Google and GitHub, typically using Passport.js or native strategies.

Auth Implementation Patterns

Name: Auth Implementation Patterns
Author: Microck

byMicrock

•

114

•

Security & Testing

Implements secure authentication and authorization systems using JWT, OAuth2, session management, and RBAC patterns.

Auth Implementation Patterns provides a comprehensive framework for designing and deploying robust access control systems. It offers expert guidance on choosing between stateful sessions and stateless JWTs, implementing secure refresh token rotations, and integrating social login via OAuth2/OpenID Connect. This skill is essential for developers looking to secure REST or GraphQL APIs, establish granular role-based access control (RBAC), and migrate legacy auth systems to modern, scalable architectures while maintaining industry-standard security practices.

Key Features

01Redis-backed stateful session management patterns

02OAuth2 and social login integration for Google and GitHub

03114 GitHub stars

04Comprehensive JWT implementation with Refresh Token flows

05Hierarchical Role-Based Access Control (RBAC)

06Granular Permission-Based Access Control middleware

Use Cases

01Implementing complex user permission hierarchies in enterprise applications

02Adding social login and SSO capabilities to existing authentication workflows

03Securing modern web APIs with stateless authentication and token rotation

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add microck/ordinary-claude-skills auth-implementation-patterns

For use in Claude.ai and ChatGPT

Download Skill