What kind of authorization models are included?

The skill covers both Role-Based Access Control (RBAC) with hierarchies and more granular Permission-Based Access Control models.

Is this skill specific to a particular language?

While the examples are provided in TypeScript/Express, the underlying security patterns and logic are applicable to any modern backend framework.

Does this skill support JWT and Refresh Tokens?

Yes, it provides complete implementation patterns for both short-lived access tokens and secure, database-backed refresh token rotation flows.

How does it handle session security?

It provides patterns for secure cookie configuration, including HttpOnly, Secure, and SameSite attributes, often using Redis for stateful session storage.

Can I use this for social login implementation?

Absolutely. It includes patterns for OAuth2 integration with providers like Google and GitHub, typically using Passport.js or native strategies.

Auth Implementation Patterns

Name: Auth Implementation Patterns
Author: Microck

byMicrock

•

114

Security & Testing

Implements secure authentication and authorization systems using JWT, OAuth2, session management, and RBAC patterns.

About

Auth Implementation Patterns provides a comprehensive framework for designing and deploying robust access control systems. It offers expert guidance on choosing between stateful sessions and stateless JWTs, implementing secure refresh token rotations, and integrating social login via OAuth2/OpenID Connect. This skill is essential for developers looking to secure REST or GraphQL APIs, establish granular role-based access control (RBAC), and migrate legacy auth systems to modern, scalable architectures while maintaining industry-standard security practices.

Key Features

Redis-backed stateful session management patterns
OAuth2 and social login integration for Google and GitHub
114 GitHub stars
Comprehensive JWT implementation with Refresh Token flows
Hierarchical Role-Based Access Control (RBAC)
Granular Permission-Based Access Control middleware

Use Cases

Implementing complex user permission hierarchies in enterprise applications
Adding social login and SSO capabilities to existing authentication workflows
Securing modern web APIs with stateless authentication and token rotation

About

Key Features

Redis-backed stateful session management patterns
OAuth2 and social login integration for Google and GitHub
114 GitHub stars
Comprehensive JWT implementation with Refresh Token flows
Hierarchical Role-Based Access Control (RBAC)
Granular Permission-Based Access Control middleware

Use Cases

Implementing complex user permission hierarchies in enterprise applications
Adding social login and SSO capabilities to existing authentication workflows
Securing modern web APIs with stateless authentication and token rotation