What authentication methods does this skill support?

It provides implementation patterns for JWT (stateless), session-based (stateful), and OAuth2/OpenID Connect for social logins.

Can I use this for Role-Based Access Control (RBAC)?

Yes, the skill includes logic for both hierarchical role structures and granular permission-based access control systems.

Does it include code for handling token expiration?

Absolutely. It provides a detailed pattern for implementing secure access token verification and a persistent refresh token flow.

Which backend frameworks are these patterns for?

The patterns use TypeScript and Express.js examples, but the architectural concepts are applicable to any modern backend framework.

Authentication & Authorization Patterns

Name: Authentication & Authorization Patterns
Author: carlopezzuto

bycarlopezzuto

API 开发

Implements secure access control systems using industry-standard patterns like JWT, OAuth2, and Role-Based Access Control (RBAC).

关于

This skill provides a comprehensive toolkit for building robust security layers within backend applications. It offers production-ready implementation patterns for stateless JWT authentication, stateful session management, and third-party social logins via OAuth2. Beyond basic login flows, it includes advanced logic for refresh token rotation, hierarchical Role-Based Access Control (RBAC), and fine-grained permission systems, ensuring developers can secure REST and GraphQL APIs against unauthorized access while maintaining horizontal scalability.

主要功能

Stateful session-based management using Redis storage
Stateless JWT authentication with secure refresh token rotation
OAuth2 and social login integration patterns using Passport.js
Hierarchical Role-Based Access Control (RBAC) middleware
Fine-grained permission-based authorization for granular resource security
0 GitHub stars

使用场景

Securing REST or GraphQL APIs with stateless token-based authentication
Implementing complex multi-tier user permission systems in enterprise apps
Adding Google, GitHub, or SSO social login capabilities to existing platforms

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add carlopezzuto/agents auth-implementation-patterns

For use in Claude.ai and ChatGPT

Download Skill

GitHub

关于