authentication

What problem does it solve?

This Skill provides comprehensive guidance and code for implementing secure authentication and authorization, covering JWT, OAuth2, OIDC, session management, and RBAC, while also enabling deep security analysis and threat modeling to prevent vulnerabilities.

Core Features & Use Cases

• JWT & Session Management: Generate and verify JWTs, hash passwords, and manage secure user sessions.
• OAuth2 & OIDC: Implement various OAuth2 grant types (Auth Code, PKCE, Client Credentials) and OIDC ID token validation.
• RBAC & Permissions: Define roles and permissions for fine-grained access control.
• Security Analysis: Perform threat modeling (STRIDE) and vulnerability reviews (OWASP Top 10) for auth flows.
• Use Case: You need to implement a new login flow for a multi-tenant application. Use this skill to design a secure OAuth2 Authorization Code Flow with PKCE, generate JWTs with tenant-specific claims, and perform a STRIDE threat model to identify and mitigate potential vulnerabilities like token replay or impersonation.

Quick Start

Use the authentication skill to generate Python code for creating a JWT access token for user 'user-123' with roles 'member' and 'viewer'.