This skill provides comprehensive guidance and production-ready patterns for building robust access control systems. It covers the full spectrum of modern security needs, from stateless JWT implementations with refresh token rotation to stateful session management using Redis. Developers can leverage this skill to integrate social logins via Passport.js, design complex Role-Based Access Control (RBAC) hierarchies, and secure REST or GraphQL APIs. By following these established implementation patterns, you can ensure your application identity layer is scalable, maintainable, and resilient against common security vulnerabilities.
主要功能
0181 GitHub stars
02JWT implementation with secure refresh token rotation flows
03Stateful session management patterns using Express and Redis
04OAuth2 and social login integration via Passport.js
05Hierarchical Role-Based Access Control (RBAC) middleware
06Granular permission-based authorization logic
使用场景
01Implementing enterprise-grade multi-tenant access control systems
02Securing modern web APIs with stateless token-based authentication
03Adding social login providers to existing user management workflows