Does it include support for refresh tokens?

Yes, it provides a detailed pattern for implementing a secure refresh token flow, including token storage, rotation, and revocation logic.

Can I use this for complex user permissions?

Absolutely. It includes patterns for both Role-Based Access Control (RBAC) and more granular Permission-Based Access Control to handle complex authorization requirements.

What authentication strategies are covered?

This skill covers session-based authentication using Redis, token-based authentication using JWT, and delegated authentication via OAuth2 and OpenID Connect.

Is it compatible with social login?

Yes, the skill includes patterns for integrating third-party social logins like Google and GitHub using the Passport.js middleware framework.

Authentication Implementation Patterns

Name: Authentication Implementation Patterns
Author: Microck

byMicrock

•

Security & Testing

Implements secure, industry-standard authentication and authorization systems including JWT, OAuth2, and role-based access control.

This skill provides comprehensive architectural patterns and implementation guides for building production-grade access control systems. It covers a wide range of security paradigms, from stateless JWT and refresh token rotations to traditional stateful session management with Redis. By providing boilerplate for OAuth2 social logins and granular authorization models like RBAC and permission-based access, this skill helps developers secure APIs and web applications while adhering to modern security best practices and mitigating common vulnerabilities.

Key Features

0181 GitHub stars

02Hierarchical Role-Based Access Control (RBAC) systems

03OAuth2 and Social Login integration via Passport.js

04Stateful session management patterns using Express and Redis

05Stateless JWT and secure refresh token flow implementation

06Granular Permission-Based Access Control (PBAC) middleware

Use Cases

01Securing REST or GraphQL APIs with scalable token-based authentication

02Designing complex multi-tenant authorization systems with distinct user roles

03Adding social login providers like Google or GitHub to an existing application

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add microck/ordinary-claude-skills auth-implementation-patterns

For use in Claude.ai and ChatGPT

Download Skill