auth-implementation-patterns

1# Authentication & Authorization Implementation Patterns
2 
3Build secure, scalable authentication and authorization systems using industry-standard patterns and modern best practices.
4 
5## Use this skill when
6 
7- Implementing user authentication systems
8- Securing REST or GraphQL APIs
9- Adding OAuth2/social login or SSO
10- Designing session management or RBAC
11- Debugging authentication or authorization issues
12 
13## Do not use this skill when
14 
15- You only need UI copy or login page styling
16- The task is infrastructure-only without identity concerns
17- You cannot change auth policies or credential storage
18 
19## Instructions
20 
21- Define users, tenants, flows, and threat model constraints.
22- Choose auth strategy (session, JWT, OIDC) and token lifecycle.
23- Design authorization model and policy enforcement points.
24- Plan secrets storage, rotation, logging, and audit requirements.
25- If detailed examples are required, open `resources/implementation-playbook.md`.
26 
27## Safety
28 
29- Never log secrets, tokens, or credentials.
30- Enforce least privilege and secure storage for keys.
31 
32## Resources
33 
34- `resources/implementation-playbook.md` for detailed patterns and examples.