Is this suitable for production security?

The skill follows industry best practices like password hashing, secure cookie flags, and CSRF protection, providing a solid foundation for production-grade security.

Can I implement complex user permissions?

Yes, it includes patterns for both Role-Based Access Control (RBAC) with role hierarchies and granular Permission-Based Access Control (PBAC).

What authentication methods does this skill cover?

The skill provides patterns for JWT (JSON Web Tokens), traditional Session-based authentication via Redis, and OAuth2/Social Login (Google, GitHub).

Does it handle token refresh logic?

Yes, it includes a complete Refresh Token flow pattern including secure storage, hashing, and token rotation for stateless systems.

Auth Implementation Patterns

Name: Auth Implementation Patterns
Author: ccf

byccf

0•

API Development

Implements secure access control systems using industry-standard JWT, OAuth2, session management, and role-based patterns.

This skill provides a comprehensive toolkit for building robust security layers in modern applications. It offers standardized implementation patterns for user authentication, stateless JWT handling, stateful session management with Redis, and complex authorization schemes like RBAC and resource ownership. Designed for developers building APIs or securing web applications, it ensures that security best practices—including token rotation, secure cookie handling, and permission hierarchies—are consistently applied across your codebase to prevent common vulnerabilities.

Key Features

01JWT and Refresh Token implementation for stateless, scalable authentication

02Secure stateful session management patterns using Express and Redis

03Granular Role-Based (RBAC) and Permission-Based Access Control systems

040 GitHub stars

05Social Login integration blueprints using Passport.js and OAuth2 providers

06Resource ownership validation logic to ensure users only access their own data

Use Cases

01Implementing multi-tenant authorization systems with hierarchical user roles

02Securing REST or GraphQL APIs with token-based authentication and refresh logic

03Migrating legacy session-based systems to modern OAuth2 or JWT architectures

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add ccf/claude-code-ccf-marketplace auth-implementation-patterns

For use in Claude.ai and ChatGPT

Download Skill