This skill empowers Claude to design and implement industry-standard security architectures for modern web applications. It provides ready-to-use patterns for token-based authentication (JWT), stateful session management with Redis, social login via OAuth2, and granular access control strategies like RBAC and permission-based logic. Whether you are building a new API from scratch, migrating from legacy sessions to stateless tokens, or debugging complex security vulnerabilities, this skill ensures your access control logic is scalable, secure, and follows current security best practices.
Key Features
01JWT implementation with secure refresh token rotation flows
02Hierarchical Role-Based Access Control (RBAC) middleware
03Fine-grained Permission-Based Access Control (PBAC) logic
04Stateful session management integration using Express and Redis
05Social login and OAuth2 strategies via Passport.js
062 GitHub stars
