Which frameworks are these patterns designed for?

The patterns are primarily demonstrated using TypeScript and Express.js, but the logic and security principles are applicable to most backend frameworks.

What authentication strategies are supported by this skill?

This skill supports session-based authentication, token-based (JWT) authentication, and OAuth2/OpenID Connect for social logins.

Does it help with security best practices like CSRF?

Yes, it covers secure cookie configurations, HTTP-only flags, and same-site attributes to mitigate common web vulnerabilities.

Does it include refresh token management?

Yes, it provides logic for generating, rotating, and revoking refresh tokens to maintain secure user sessions.

Can I implement Role-Based Access Control (RBAC) with this?

Yes, it includes specific patterns for role hierarchies and middleware-based permission checking for granular access control.

Authentication Implementation Patterns

Name: Authentication Implementation Patterns
Author: amurata

byamurata

•

Security & Testing

Implements secure, industry-standard authentication and authorization patterns including JWT, OAuth2, and RBAC.

About

This skill provides developers with a comprehensive toolkit for building production-grade access control systems within Claude Code. It offers structured guidance and implementation patterns for session management, stateless token-based authentication (JWT), and complex authorization logic like Role-Based Access Control (RBAC). Whether you are securing a REST API, adding social login, or managing user permissions, this skill ensures your security architecture follows modern best practices for scalability and safety.

Key Features

3 GitHub stars
JWT and Refresh Token lifecycle management
Granular permission-based middleware for APIs
Session-based authentication with Redis storage
OAuth2 and Social Login integration patterns
Hierarchical Role-Based Access Control (RBAC)

Use Cases

Adding Google or GitHub social login capabilities to a web application
Implementing complex multi-level user permissions for enterprise dashboards
Securing REST or GraphQL APIs with stateless JWT authentication

About

Key Features

3 GitHub stars
JWT and Refresh Token lifecycle management
Granular permission-based middleware for APIs
Session-based authentication with Redis storage
OAuth2 and Social Login integration patterns
Hierarchical Role-Based Access Control (RBAC)

Use Cases

Adding Google or GitHub social login capabilities to a web application
Implementing complex multi-level user permissions for enterprise dashboards
Securing REST or GraphQL APIs with stateless JWT authentication