Agent Skills
› rmyndharis/antigravity-skills
› auth-implementation-patterns
auth-implementation-patterns
GitHub提供身份认证与授权实现模式，涵盖JWT、OAuth2、会话管理及RBAC。用于构建安全可扩展的访问控制系统、保护API或调试安全问题。指导定义用户模型、选择认证策略及规划密钥存储，确保遵循最小权限原则。
Trigger Scenarios
实现用户认证系统
保护REST或GraphQL API
添加OAuth2社交登录或SSO
设计会话管理或RBAC
调试认证或授权问题
Install
npx skills add rmyndharis/antigravity-skills --skill auth-implementation-patterns -g -y
SKILL.md
Frontmatter
{
"name": "auth-implementation-patterns",
"description": "Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing APIs, or debugging security issues."
}
Authentication & Authorization Implementation Patterns
Build secure, scalable authentication and authorization systems using industry-standard patterns and modern best practices.
Use this skill when
- Implementing user authentication systems
- Securing REST or GraphQL APIs
- Adding OAuth2/social login or SSO
- Designing session management or RBAC
- Debugging authentication or authorization issues
Do not use this skill when
- You only need UI copy or login page styling
- The task is infrastructure-only without identity concerns
- You cannot change auth policies or credential storage
Instructions
- Define users, tenants, flows, and threat model constraints.
- Choose auth strategy (session, JWT, OIDC) and token lifecycle.
- Design authorization model and policy enforcement points.
- Plan secrets storage, rotation, logging, and audit requirements.
- If detailed examples are required, open
resources/implementation-playbook.md.
Safety
- Never log secrets, tokens, or credentials.
- Enforce least privilege and secure storage for keys.
Resources
resources/implementation-playbook.mdfor detailed patterns and examples.
Version History
- e63f7dd Current 2026-07-05 09:28
