关于
This skill provides comprehensive implementation patterns for securing modern web applications and APIs. It covers the full lifecycle of identity management, from password hashing with bcrypt and JWT-based session handling to complex OAuth 2.0 flows and Multi-Factor Authentication (MFA). By providing standardized boilerplate and best practices for refresh tokens, password reset flows, and Role-Based Access Control (RBAC), it ensures that developers can build robust, secure backend architectures while avoiding common security pitfalls in Express and Node.js environments.
