Аутентификация и авторизация: JWT, OAuth2, RBAC

★ 8.5 · security

auth-implementation-patterns is a Claude Code skill that guides implementation of authentication and authorization patterns — JWT, OAuth2, session management, and RBAC — to build secure, scalable access control systems. It covers the distinction between AuthN and AuthZ, session-based and token-based approaches, and OAuth2/OpenID Connect for social login (Google, GitHub) and enterprise SSO, including multi-tenancy scenarios. Practical guidance addresses securing REST and GraphQL APIs, migrating existing auth systems, and debugging security issues. Built-in best practices enforce password hashing with bcrypt/argon2, short-lived access tokens (15–30 minutes), httpOnly cookies with secure and sameSite flags, rate limiting on auth endpoints, and mandatory server-side validation. Detailed pattern documentation and worked examples are stored in `references/details.md`. The skill is aimed at developers building login systems, protecting APIs, or rolling out enterprise single sign-on.