authentication-setup
Complete authentication and authorization system with JWT, OAuth, and role-based access control.
- Covers five core authentication methods: JWT tokens, session management, OAuth 2.0, password hashing (bcrypt/argon2), and multi-factor authentication support
- Includes step-by-step implementation for user registration, login, token refresh, and logout endpoints with database schema design
- Provides authentication middleware for protecting API routes and role-based authorization for permission management
- Supports social login integration (Google, GitHub, Microsoft) and refresh token management with database revocation capabilities
- Includes security best practices: environment variable management, short-lived access tokens (15 min), long-lived refresh tokens (7 days), and audit logging recommendations
Authentication Setup
When to use this skill
Lists specific situations where this skill should be triggered:
- User Login System: When adding user authentication to a new application
- API Security: When adding an authentication layer to a REST or GraphQL API
- Permission Management: When role-based access control is needed
- Authentication Migration: When migrating an existing auth system to JWT or OAuth
- SSO Integration: When integrating social login with Google, GitHub, Microsoft, etc.
Input Format
The required and optional input information to collect from the user:
Required Information
More from supercent-io/skills-template
security-best-practices
Implement security best practices for web applications and infrastructure. Use when securing APIs, preventing common vulnerabilities, or implementing security policies. Handles HTTPS, CORS, XSS, SQL Injection, CSRF, rate limiting, and OWASP Top 10.
14.1Kdata-analysis
Analyze datasets to extract insights, identify patterns, and generate reports. Use when exploring data, creating visualizations, or performing statistical analysis. Handles CSV, JSON, SQL queries, and Python pandas operations.
13.8Kweb-accessibility
Implement web accessibility (a11y) standards following WCAG 2.1 guidelines. Use when building accessible UIs, fixing accessibility issues, or ensuring compliance with disability standards. Handles ARIA attributes, keyboard navigation, screen readers, semantic HTML, and accessibility testing.
12.7Kworkflow-automation
Automate repetitive development tasks and workflows. Use when creating build scripts, automating deployments, or setting up development workflows. Handles npm scripts, Makefile, GitHub Actions workflows, and task automation.
12.6Kcode-review
Conduct thorough, constructive code reviews for quality and security. Use when reviewing pull requests, checking code quality, identifying bugs, or auditing security. Handles best practices, SOLID principles, security vulnerabilities, performance analysis, and testing coverage.
12.5Kdatabase-schema-design
Design and optimize database schemas for SQL and NoSQL databases. Use when creating new databases, designing tables, defining relationships, indexing strategies, or database migrations. Handles PostgreSQL, MySQL, MongoDB, normalization, and performance optimization.
12.2K