Is this specific to a certain backend framework?

While the primary examples utilize Express.js and TypeScript, the underlying patterns and logic are applicable to any modern backend architecture or API design.

How does it handle complex user permissions?

It provides code structures for both Role-Based Access Control (RBAC) and granular Permission-Based Access Control, including role hierarchy management.

Can I use this for social logins like Google or GitHub?

Absolutely. The skill includes implementation patterns for OAuth2 and OpenID Connect, specifically showcasing integrations with Passport.js.

Does this skill support stateless authentication?

Yes, it provides comprehensive patterns for JWT-based stateless authentication, including secure generation, verification, and refresh token rotation strategies.

Authentication & Authorization Patterns

Name: Authentication & Authorization Patterns
Author: Activer007

byActiver007

Security & Testing

Implements robust security systems using modern patterns like JWT, OAuth2, session management, and role-based access control.

About

This skill provides Claude with expert-level guidance and code patterns for building secure, scalable authentication and authorization layers. It covers high-level architectural decisions and low-level implementation details for stateless JWT flows, stateful session management via Redis, and multi-provider OAuth2 integrations. By following these industry-standard patterns, developers can ensure their APIs and applications are protected against common security vulnerabilities while maintaining a clean, maintainable codebase for complex permission structures.

Key Features

Redis-backed session management for stateful applications
0 GitHub stars
Hierarchical Role-Based Access Control (RBAC) and Permission-based logic
Production-grade security middleware for Express and Node.js APIs
JWT implementation with secure refresh token rotation and hashing
Multi-provider OAuth2 and social login integration using Passport.js

Use Cases

Architecting a secure authentication system for a new full-stack application
Migrating from simple sessions to a scalable, stateless JWT architecture
Implementing granular, permission-based access control for enterprise dashboards

About

Key Features

Redis-backed session management for stateful applications
0 GitHub stars
Hierarchical Role-Based Access Control (RBAC) and Permission-based logic
Production-grade security middleware for Express and Node.js APIs
JWT implementation with secure refresh token rotation and hashing
Multi-provider OAuth2 and social login integration using Passport.js

Use Cases

Architecting a secure authentication system for a new full-stack application
Migrating from simple sessions to a scalable, stateless JWT architecture
Implementing granular, permission-based access control for enterprise dashboards