JWT Authentication Setup

Overview

This skill implements JWT (JSON Web Token) authentication for .NET APIs:

• Access Token - Short-lived JWT returned in response body
• Refresh Token - Stored in HttpOnly cookie (secure, not accessible via JavaScript)
• Options Pattern - Configurable expiration via JwtOptions
• Token Rotation - New refresh token issued on each refresh
• Security Audit - Comprehensive event tracking for compliance
• Token generation - Create access and refresh tokens
• Token validation - Validate incoming tokens
• User context - Extract user info from claims

Quick Reference