Does this skill support the latest OAuth standards?

Yes, the skill enforces OAuth 2.1 with PKCE and specifically forbids deprecated patterns like the implicit grant flow.

Which password hashing algorithm does this skill recommend?

The skill recommends Argon2id as the primary choice for modern security, followed by bcrypt as a secondary option.

Can I use this for passwordless login?

Absolutely. It contains specific implementation patterns for Passkeys, WebAuthn, and FIDO2 biometric authentication.

How does it handle session security?

It provides configurations for secure session management, including HTTPOnly, Secure, and SameSite cookie attributes to prevent common web attacks.

Authentication Patterns

Name: Authentication Patterns
Author: yonatangross

byyonatangross

•

安全与测试

Implements secure authentication and authorization flows using modern standards like OAuth 2.1, Passkeys, and Argon2id.

This skill equips Claude with production-ready patterns for building robust security layers in web applications. It provides comprehensive guidance on implementing modern login flows, JWT token management, and session security while enforcing strict adherence to OAuth 2.1 with PKCE. By incorporating advanced features like Passkeys/WebAuthn and Role-Based Access Control (RBAC), it helps developers avoid common security pitfalls and anti-patterns, ensuring that application access is both secure and scalable.

主要功能

01Granular Role-Based Access Control (RBAC) systems

02OAuth 2.1 and PKCE implementation patterns

03Passwordless authentication via Passkeys and WebAuthn

04Secure password hashing with Argon2id and bcrypt

0569 GitHub stars

06JWT token lifecycle and refresh rotation management

使用场景

01Implementing biometric and passwordless authentication for enhanced security

02Building a secure, production-grade login system for FastAPI or React apps

03Migrating legacy authentication systems to modern OAuth 2.1 standards

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add yonatangross/orchestkit auth-patterns

For use in Claude.ai and ChatGPT

Download Skill