What authentication strategies does this skill cover?

It covers Token-Based (JWT), Session-Based (Redis), and Delegated Authentication (OAuth2/OpenID Connect).

Does it include authorization logic?

Yes, it provides implementation patterns for both Role-Based Access Control (RBAC) and Permission-Based Access Control.

Are the code patterns production-ready?

The patterns follow security best practices like token hashing, HTTP-only cookies, and CSRF protection, though environment-specific auditing is always recommended.

Can I use this for social logins?

Yes, the skill includes patterns for integrating Passport.js with providers like Google and GitHub.

Auth Implementation Patterns

Name: Auth Implementation Patterns
Author: HermeticOrmus

byHermeticOrmus

安全与测试

Implements secure authentication and authorization systems using JWT, OAuth2, and RBAC best practices.

关于

This skill provides Claude with advanced architectural patterns for building secure, scalable access control systems, ranging from stateful session management to stateless JWT implementations and social logins via OAuth2. It streamlines the development of protected APIs and web applications by providing production-ready code templates for middleware, token rotation, role-based access control (RBAC), and permission-based logic, ensuring developers follow industry-standard security protocols to prevent common vulnerabilities.

主要功能

Stateful session management using Express and Redis storage
Granular Role-Based Access Control (RBAC) and permission hierarchies
JWT authentication with secure access and refresh token rotation
0 GitHub stars
Secure middleware for protecting REST and GraphQL API endpoints
OAuth2 and Social Login integration patterns using Passport.js

使用场景

Designing granular administrative dashboards with specific resource permissions
Implementing 'Login with Google' or 'Login with GitHub' third-party authentication
Building a secure user registration and login system for a new web application

关于

主要功能

Stateful session management using Express and Redis storage
Granular Role-Based Access Control (RBAC) and permission hierarchies
JWT authentication with secure access and refresh token rotation
0 GitHub stars
Secure middleware for protecting REST and GraphQL API endpoints
OAuth2 and Social Login integration patterns using Passport.js

使用场景

Designing granular administrative dashboards with specific resource permissions
Implementing 'Login with Google' or 'Login with GitHub' third-party authentication
Building a secure user registration and login system for a new web application