The Agent Skills Directory

[SAFE]: The skill provides implementation guides and code snippets for authentication (JWT, Sessions, OAuth2) and authorization (RBAC, Permissions). All patterns utilize well-known, industry-standard libraries such as jsonwebtoken, bcrypt, passport, and express-session.
[SAFE]: Security best practices are explicitly demonstrated and encouraged, including password hashing with bcrypt, input validation using zod, and implementation of rate limiting using express-rate-limit.
[SAFE]: The code correctly handles sensitive data by recommending the use of environment variables (e.g., process.env.JWT_SECRET) rather than hardcoding credentials.
[SAFE]: Session management patterns include security flags such as httpOnly, secure, and sameSite to mitigate common web vulnerabilities like XSS and CSRF.

auth-implementation-patterns