Are the security patterns production-ready?

The patterns follow industry best practices, including secure cookie configurations (HttpOnly, SameSite), token hashing before database storage, and proper token revocation strategies.

Can I use this for social login integration?

Absolutely. The skill includes implementation guides and code patterns for OAuth2 and OpenID Connect using popular libraries like Passport.js for providers like Google and GitHub.

Does this skill support stateless authentication?

Yes, it provides detailed patterns for JWT (JSON Web Tokens) and refresh token flows, allowing for stateless and horizontally scalable authentication.

Is Role-Based Access Control (RBAC) included?

Yes, the skill covers both standard Role-Based Access Control (RBAC) with role hierarchies and more granular Permission-Based Access Control (PBAC).

Secure Auth Implementation Patterns

Name: Secure Auth Implementation Patterns
Author: Activer007

byActiver007

•

Security & Testing

Implements robust authentication and authorization systems using industry-standard patterns like JWT, OAuth2, and Role-Based Access Control.

This skill provides a comprehensive toolkit for developers to architect and implement secure access control systems within their applications. It offers detailed implementation patterns for both stateless (JWT) and stateful (Session) authentication, including advanced flows like refresh token rotation and Redis-backed session storage. Beyond identity verification, it provides ready-to-use middleware for Role-Based Access Control (RBAC) and Permission-Based Access Control (PBAC), ensuring that your API security is granular, scalable, and follows modern security best practices for social logins and enterprise SSO.

Key Features

01Hierarchical Role-Based Access Control (RBAC) middleware

02Granular Permission-Based Access Control (PBAC) logic for complex APIs

03Social login integration patterns for OAuth2 and OpenID Connect

045 GitHub stars

05Stateful session management patterns using Express and Redis storage

06Stateless JWT implementation with secure access and refresh token flows

Use Cases

01Implementing 'Sign in with Google/GitHub' functionality using Passport.js

02Securing REST or GraphQL APIs with granular permission-based route protection

03Building a secure, scalable authentication backend for a modern SaaS platform

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add activer007/ordinary-claude-skills auth-implementation-patterns

For use in Claude.ai and ChatGPT

Download Skill