Can it help me debug existing security issues?

By providing industry-standard best practices and implementation patterns, it helps identify and resolve vulnerabilities in your current auth logic.

Can this skill help with social login integration?

Yes, it provides implementation patterns for OAuth2 and social login using popular frameworks like Passport.js.

Does it support stateless and stateful authentication?

Absolutely. It covers both stateless JWT-based token flows and stateful session-based management using Redis.

How does it handle complex user permissions?

The skill includes patterns for both Role-Based Access Control (RBAC) and more granular Permission-Based Access Control to suit different application needs.

Is this skill suitable for securing microservices?

Yes, the stateless JWT patterns provided are ideal for horizontally scalable architectures and microservices communication.

Auth Implementation Patterns

Name: Auth Implementation Patterns
Author: HermeticOrmus

byHermeticOrmus

0•

API Development

Implements secure authentication and authorization systems using industry-standard patterns like JWT, OAuth2, and RBAC.

This skill provides comprehensive guidance for architecting and implementing robust security layers in modern applications. It covers essential authentication strategies including stateless JWT with refresh token flows, stateful session management using Redis, and third-party social login via OAuth2. Beyond identity verification, it offers deep dives into authorization patterns like Role-Based Access Control (RBAC) and granular Permission-Based systems, ensuring your APIs and services follow security best practices while maintaining scalability and ease of maintenance.

Key Features

010 GitHub stars

02Stateless JWT implementation with secure refresh token rotation and hashing

03OAuth2 and social login integration strategies using Passport.js

04Stateful session management patterns using Redis for distributed apps

05Hierarchical Role-Based Access Control (RBAC) middleware

06Granular Permission-Based Access Control (PBAC) implementation

Use Cases

01Designing granular access control for complex multi-tenant platforms

02Securing a production-grade Node.js backend with JWT and refresh tokens

03Implementing social login or enterprise SSO for web applications

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add hermeticormus/after-the-third-cup auth-implementation-patterns

For use in Claude.ai and ChatGPT

Download Skill