What authentication methods does this skill support?

It provides implementation patterns for JWT (stateless), session-based (stateful), and OAuth2/OpenID Connect for social logins.

Can I use this for Role-Based Access Control (RBAC)?

Yes, the skill includes logic for both hierarchical role structures and granular permission-based access control systems.

Does it include code for handling token expiration?

Absolutely. It provides a detailed pattern for implementing secure access token verification and a persistent refresh token flow.

Which backend frameworks are these patterns for?

The patterns use TypeScript and Express.js examples, but the architectural concepts are applicable to any modern backend framework.

Authentication & Authorization Patterns

Name: Authentication & Authorization Patterns
Author: carlopezzuto

bycarlopezzuto

0•

API Development

Implements secure access control systems using industry-standard patterns like JWT, OAuth2, and Role-Based Access Control (RBAC).

This skill provides a comprehensive toolkit for building robust security layers within backend applications. It offers production-ready implementation patterns for stateless JWT authentication, stateful session management, and third-party social logins via OAuth2. Beyond basic login flows, it includes advanced logic for refresh token rotation, hierarchical Role-Based Access Control (RBAC), and fine-grained permission systems, ensuring developers can secure REST and GraphQL APIs against unauthorized access while maintaining horizontal scalability.

Key Features

01Stateful session-based management using Redis storage

02Stateless JWT authentication with secure refresh token rotation

03OAuth2 and social login integration patterns using Passport.js

04Hierarchical Role-Based Access Control (RBAC) middleware

05Fine-grained permission-based authorization for granular resource security

060 GitHub stars

Use Cases

01Securing REST or GraphQL APIs with stateless token-based authentication

02Implementing complex multi-tier user permission systems in enterprise apps

03Adding Google, GitHub, or SSO social login capabilities to existing platforms

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add carlopezzuto/agents auth-implementation-patterns

For use in Claude.ai and ChatGPT

Key Features

01Stateful session-based management using Redis storage

02Stateless JWT authentication with secure refresh token rotation

03OAuth2 and social login integration patterns using Passport.js

04Hierarchical Role-Based Access Control (RBAC) middleware

05Fine-grained permission-based authorization for granular resource security

060 GitHub stars

Use Cases

01Securing REST or GraphQL APIs with stateless token-based authentication

02Implementing complex multi-tier user permission systems in enterprise apps

03Adding Google, GitHub, or SSO social login capabilities to existing platforms

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add carlopezzuto/agents auth-implementation-patterns

For use in Claude.ai and ChatGPT