dual-auth-rbac

Community

Secure multi-tenant auth with session+JWT RBAC

Authorpeterbamuhigire
Version1.0.0
Installs0

System Documentation

What problem does it solve?

Centralizes and secures authentication for multi-tenant apps by combining stateful web sessions with stateless JWTs and robust RBAC, preventing cross-tenant data leakage.

Core Features & Use Cases

  • Dual authentication architecture: session-based web access for browsers and JWT-based access for APIs/mobile clients, with consistent RBAC across both.
  • Tenant-aware RBAC: supports franchise-level isolation, per-tenant overrides, and device-bound tokens.
  • Strong security foundations: Argon2ID password hashing, per-tenant tokens with revocation, multi-layer middleware, and environment-driven hardening.
  • Reference schema and utilities: provides a comprehensive MySQL-based schema (schema.sql) and guidance for implementing permission resolution and MFA workflows.

Quick Start

Configure and deploy a production-grade dual-auth RBAC system for a multi-tenant application using session-based authentication for web UI and JWT for APIs.

Dependency Matrix

Required Modules

None required

Components

references

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: dual-auth-rbac
Download link: https://github.com/peterbamuhigire/skills-web-dev/archive/main.zip#dual-auth-rbac

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.