What problem does it solve? Designing secure authentication and authorization is error-prone, and mistakes like weak password hashing, non-expiring tokens, or missing CSRF protection become real vulnerabilities. This Skill provides vetted patterns for login flows, token lifecycle, access control, and managed auth integrations so you avoid common security pitfalls. ## Core Features & Use Cases - Strategy Selection: Compare JWT, session cookies, OAuth2/OIDC, and passkeys to pick the right authentication model for your architecture. - Managed Auth Integration: Guidance for Auth0, Clerk, and Firebase Auth including SDK choices and integration patterns. - Token & Session Security: Best practices for access/refresh token rotation, httpOnly cookie storage, revocation lists, and CSRF protection. - Use Case: When building a Next.js SaaS app, use this Skill to choose between Auth0 and Clerk, implement Authorization Code + PKCE flow, and design a permission-based RBAC model with hierarchical roles. ## Quick Start Ask the AI to design an authentication flow with OAuth2 and role-based access control for your web application.
