NestJS Authentication

关于

This skill provides specialized assistance for designing, implementing, and refactoring authentication modules within NestJS TypeScript backends. It guides the creation of secure login and signup flows, manages JWT access and refresh tokens, and enforces granular security through custom guards and decorators for Role-Based Access Control (RBAC). By following NestJS best practices and Passport.js patterns, it ensures that API endpoints are protected and sensitive data like passwords and secrets are handled correctly using environment-based configurations.

主要功能

• Implementation of JWT-based authentication and refresh token logic
• Configuration of Passport.js strategies for local and token-based login
• 1 GitHub stars
• Guidance on secure password hashing using bcrypt or argon2
• Standardized module structure for AuthService, strategies, and controllers
• Creation of custom guards and decorators for Role-Based Access Control (RBAC)

使用场景

• Adding secure signup, login, and logout endpoints to an existing NestJS API
• Protecting specific routes using JWT strategies and role-based permissions
• Refactoring monolithic auth logic into a clean, idiomatic NestJS module structure