Does it support stateless authentication?

Absolutely. It provides detailed implementation patterns for JWT (JSON Web Tokens) including short-lived access tokens and secure refresh token flows.

Can this skill help with social login?

Yes, it includes patterns for implementing OAuth2 and OpenID Connect using popular libraries like Passport.js for Google and GitHub logins.

Does it cover session-based auth?

Yes, it includes patterns for traditional session management using Redis for stateful, scalable session storage.

Is it compatible with Express.js?

Yes, the provided patterns are demonstrated using TypeScript and Express, making them ideal for modern Node.js backend development.

How does it handle authorization?

It offers modular patterns for both Role-Based Access Control (RBAC) and granular Permission-Based Access Control to manage user rights effectively.

Auth Implementation Patterns

Name: Auth Implementation Patterns
Author: Activer007

byActiver007

•

安全与测试

Implements secure, scalable authentication and authorization systems using industry-standard patterns like JWT, OAuth2, and RBAC.

This skill empowers developers to architect and implement robust security layers within their applications by providing pre-defined patterns for identity verification and access control. It covers a wide spectrum of modern security needs, from stateless JWT-based token management and refresh token flows to stateful session handling with Redis and third-party social logins via OAuth2. By integrating best practices for Role-Based Access Control (RBAC) and permission-grained security, it ensures that applications are not only accessible but also strictly governed, reducing the risk of common security vulnerabilities during the development of REST or GraphQL APIs.

主要功能

015 GitHub stars

02Standardized patterns for secure password verification and token revocation

03Comprehensive JWT implementation with access and refresh token management

04Stateful session-based authentication patterns using Redis storage

05Social login integration via OAuth2 and OpenID Connect protocols

06Granular Role-Based Access Control (RBAC) and permission-based middleware

使用场景

01Designing hierarchical permission systems for enterprise SaaS applications

02Securing a REST or GraphQL API with stateless JWT authentication

03Implementing multi-provider social login for simplified user onboarding

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add activer007/ordinary-claude-skills auth-implementation-patterns

For use in Claude.ai and ChatGPT

Download Skill