How does this help with security debugging?

By providing standardized, battle-tested patterns, it helps developers identify common vulnerabilities such as insecure token storage, improper cookie settings, or missing permission checks.

Can I use this for social login implementation?

Absolutely. The skill includes implementation patterns for OAuth2 and OpenID Connect using popular strategies like Google and GitHub via Passport.js.

Does this skill support stateless authentication?

Yes, it provides detailed patterns for JWT (JSON Web Token) implementation, including secure refresh token rotation strategies and token verification middleware.

Is Role-Based Access Control (RBAC) supported?

Yes, it features both hierarchical Role-Based Access Control (RBAC) and more granular Permission-Based Access Control patterns for complex authorization needs.

Does it work with session-based systems?

Yes, the skill provides patterns for traditional stateful session management using Express and Redis to handle user identity across requests.

Auth Implementation Patterns

Name: Auth Implementation Patterns
Author: Activer007

byActiver007

0•

Security & Testing

Implements secure authentication and authorization systems using JWT, OAuth2, session management, and role-based access control patterns.

This skill provides specialized guidance for building robust access control systems, covering both authentication (identity verification) and authorization (permission management). It includes production-grade implementation patterns for JWT stateless authentication, stateful session management with Redis, social login via OAuth2, and sophisticated Role-Based Access Control (RBAC). Whether you are securing a REST API, migrating legacy auth systems, or implementing enterprise SSO, this skill ensures your security architecture follows industry best practices and modern security standards to prevent unauthorized access.

Key Features

01Role-Based Access Control (RBAC) and permission-based logic

02Production-ready middleware for API security and identity verification

030 GitHub stars

04Stateful session management patterns using Redis

05JWT implementation with secure refresh token rotation flows

06OAuth2 and social login integration using Passport.js

Use Cases

01Securing REST or GraphQL APIs with stateless token-based authentication

02Implementing multi-provider social login and enterprise SSO solutions

03Designing granular permission systems for multi-tenant applications

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add activer007/ordinary-claude-skills auth-implementation-patterns

For use in Claude.ai and ChatGPT

Download Skill