Backend Auth Patterns

Purpose

Implement authentication and authorization that is secure by default. Every endpoint must have an auth check. No secrets in code. No plaintext passwords.

Agent Protocol

Trigger

Exact user phrases: "auth", "authentication", "authorization", "JWT", "OAuth", "RBAC", "permissions", "login", "session", "refresh token", "guard", "middleware auth", "access control", "secure endpoint".

Input Context

• Application type (SPA, mobile, M2M, server-rendered).
• Security requirements level (basic auth, enterprise SSO, API-key M2M).
• Existing auth infrastructure (if any).

Output Artifact

Auth design as text. No file output.