Is refresh token rotation included?

Yes, the skill includes patterns for secure refresh token handling, including database storage, hashing, and token revocation strategies.

Does this skill support both stateful and stateless authentication?

Yes, it provides comprehensive patterns for both stateful session-based authentication (using Redis) and stateless token-based authentication (using JWT).

Can I use this for social login integration?

Absolutely. The skill includes implementation patterns for OAuth2 and social logins like Google and GitHub using the Passport.js ecosystem.

How does it handle complex user permissions?

It provides boilerplate for both Role-Based Access Control (RBAC) with role hierarchies and more granular Permission-Based Access Control for fine-tuned security.

Auth Implementation Patterns

Name: Auth Implementation Patterns
Author: Microck

byMicrock

•

API Development

Implements secure, industry-standard authentication and authorization patterns including JWT, OAuth2, and RBAC.

This skill provides comprehensive guidance and production-ready patterns for building robust access control systems. It covers the full spectrum of modern security needs, from stateless JWT implementations with refresh token rotation to stateful session management using Redis. Developers can leverage this skill to integrate social logins via Passport.js, design complex Role-Based Access Control (RBAC) hierarchies, and secure REST or GraphQL APIs. By following these established implementation patterns, you can ensure your application identity layer is scalable, maintainable, and resilient against common security vulnerabilities.

Key Features

0181 GitHub stars

02JWT implementation with secure refresh token rotation flows

03Stateful session management patterns using Express and Redis

04OAuth2 and social login integration via Passport.js

05Hierarchical Role-Based Access Control (RBAC) middleware

06Granular permission-based authorization logic

Use Cases

01Implementing enterprise-grade multi-tenant access control systems

02Securing modern web APIs with stateless token-based authentication

03Adding social login providers to existing user management workflows

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add microck/ordinary-claude-skills auth-implementation-patterns

For use in Claude.ai and ChatGPT

Download Skill