auth-security-expert

Manage JWT creation, login/logout, password hashing, and rate limiting for JobVarejo.

Updated Jan 28, 2026
One-click install
npx skills add https://github.com/i9placesolutions/jobvarejo --skill auth-security-expert
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: auth-security-expert
Source: https://github.com/i9placesolutions/jobvarejo/tree/main/.agents/skills/auth-security-expert
Command: npx skills add https://github.com/i9placesolutions/jobvarejo --skill auth-security-expert

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides expertise in authentication and security for JobVarejo, handling tasks like JWT creation, login/logout, password hashing, rate limiting, and solving authentication and authorization issues.

Core Features & Use Cases

  • Authentication Management: Custom JWT and HMAC-SHA256 tokens, login/register/reset-password, and scrypt password hashing.
  • Rate Limiting: Implementation of rate limiting using Redis and in-memory fallback.
  • Security: Enforces security measures like SSRF protection, CORS/COOP/COEP headers, and cookie handling.
  • Use Case: When Codex needs to implement or modify authentication, authorization, and security features in JobVarejo, the auth-security-expert Skill is the go-to.

Quick Start

Use the auth-security-expert Skill to create a new JWT token for a user with the following details: name: 'John Doe', email: 'john@example.com', role: 'user'.

Frequently Asked Questions about auth-security-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement JWT authentication and password hashing in Node.js?▼

To implement JWT authentication and password hashing in Node.js, use this Skill to create custom JWT and HMAC-SHA256 tokens for login workflows, paired with scrypt for secure password hashing.

What is the best way to set up rate limiting with Redis?▼

The best way to set up rate limiting with Redis is to enforce request thresholds using Redis as the primary store, with an in-memory fallback to maintain protection if the connection drops.

How does SSRF protection and CORS header configuration work for web applications?▼

SSRF protection and CORS header configuration work by enforcing security measures that block unauthorized server-side requests and applying CORS, COOP, and COEP headers alongside secure cookie handling for web applications.

Do I need Redis to handle role-based access control and secure user sessions?▼

You do not strictly need Redis to handle role-based access control, but it is required for rate limiting, while secure user sessions are managed through custom JWT tokens and secure cookie handling.

Can I use scrypt password hashing alongside custom JWT tokens for login and logout?▼

Yes, you can use scrypt password hashing alongside custom JWT tokens, as this approach integrates scrypt for hashing credentials and generates HMAC-SHA256 JWTs to manage secure login and logout operations.