Auth Implementation Patterns

1---
2name: auth-implementation-patterns
3description: Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing APIs, or debugging security issues.
4---
5 
6# Authentication & Authorization Implementation Patterns
7 
8Build secure, scalable authentication and authorization systems using industry-standard patterns and modern best practices.
9 
10## Use this skill when
11 
12- Implementing user authentication systems
13- Securing REST or GraphQL APIs
14- Adding OAuth2/social login or SSO
15- Designing session management or RBAC
16- Debugging authentication or authorization issues
17 
18## Do not use this skill when
19 
20- You only need UI copy or login page styling
21- The task is infrastructure-only without identity concerns
22- You cannot change auth policies or credential storage
23 
24## Instructions
25 
26- Define users, tenants, flows, and threat model constraints.
27- Choose auth strategy (session, JWT, OIDC) and token lifecycle.
28- Design authorization model and policy enforcement points.
29- Plan secrets storage, rotation, logging, and audit requirements.
30- If detailed examples are required, open `resources/implementation-playbook.md`.
31 
32## Safety
33 
34- Never log secrets, tokens, or credentials.
35- Enforce least privilege and secure storage for keys.
36 
37## Resources
38 
39- `resources/implementation-playbook.md` for detailed patterns and examples.
40