Does this skill support both stateful and stateless authentication?

Yes, it includes detailed implementation patterns for both stateful session-based authentication (using Redis) and stateless JWT-based token flows.

How does it handle granular user permissions?

The skill covers both Role-Based Access Control (RBAC) with role hierarchies and more granular Permission-Based Access Control (PBAC) patterns for fine-tuned security.

Can I use this for social login?

Absolutely. It provides patterns for OAuth2 and social login integration, specifically demonstrating how to use Passport.js with Google and GitHub strategies.

Is it compatible with Node.js and Express?

Yes, the provided patterns are optimized for Node.js environments and commonly used libraries like Express, jsonwebtoken, and connect-redis.

Auth Implementation Patterns

Name: Auth Implementation Patterns
Author: Activer007

byActiver007

0•

安全与测试

Implements industry-standard authentication and authorization patterns including JWT, OAuth2, and RBAC to secure web applications and APIs.

This skill provides specialized guidance for building secure, scalable access control systems within the Claude Code environment. It offers ready-to-use implementation patterns for stateful session management, stateless JWT flows, social login via OAuth2, and granular permission systems like Role-Based Access Control (RBAC). Whether you are architecting a new security layer from scratch, migrating authentication systems, or debugging complex middleware issues, this skill ensures your implementation follows modern security best practices and protects sensitive user data.

主要功能

010 GitHub stars

02OAuth2 and social login integration patterns using Passport.js

03Secure middleware implementation for REST and GraphQL API protection

04JWT and Refresh Token lifecycle management with secure rotation

05Session-based authentication patterns using Redis for stateful storage

06Hierarchical Role-Based Access Control (RBAC) and permission systems

使用场景

01Implementing complex authorization logic for multi-tenant enterprise applications

02Adding social login capabilities like Google or GitHub to existing applications

03Securing modern web APIs with stateless JWT authentication and refresh tokens

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add activer007/ordinary-claude-skills auth-implementation-patterns

For use in Claude.ai and ChatGPT

Download Skill