Auth & Security Guard

This skill handles the critical security logic of logging in users and managing their permissions.

Instructions

1. Select authentication methods (JWT, OAuth2, Session-based).
2. Implement secure password hashing (e.g., bcrypt/argon2).
3. Design Role-Based Access Control (RBAC) or Attribute-Based (ABAC).
4. Set up Multi-Factor Authentication (MFA) flows.
5. Protect against common attacks (CSRF, XSS, Brute-force).

Examples

• "Implement a JWT-based login flow in Node.js."
• "Design a permission system for an organization with Admin, Editor, and Viewer roles."