jwt-auth
Handles JWT issuance, secure storage, and automatic refresh token rotation logic.
Install
mkdir -p .claude/skills/jwt-auth && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/7168" && unzip -o skill.zip -d .claude/skills/jwt-auth && rm skill.zipInstalls to .claude/skills/jwt-auth
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
Implement secure JWT authentication with refresh token rotation, secure storage, and automatic renewal. Use when building authentication for SPAs, mobile apps, or APIs that need stateless auth with refresh capabilities.Key capabilities
- →Implements JWT refresh token rotation
- →Stores refresh tokens in httpOnly cookies
- →Provides automatic token renewal logic
- →Detects token reuse for security
How it works
It uses short-lived access tokens and long-lived, rotated refresh tokens stored in secure cookies to maintain stateless authentication.
Inputs & outputs
When to use jwt-auth
- →Implement JWT refresh token rotation
- →Secure API endpoints with bearer tokens
- →Build auto-renewal logic for client apps
About jwt-auth
Guides the implementation of stateless authentication using JSON Web Tokens. It focuses on security best practices like token rotation and automatic renewal.
Implement secure JWT authentication with refresh token rotation, secure storage, and automatic renewal. Use when building authentication for SPAs, mobile apps, or APIs that need stateless auth with refresh capabilities.
When not to use it
- →Applications requiring stateful sessions
- →Simple internal tools
Prerequisites
Limitations
- →Requires Redis for token tracking
- →Refresh tokens must be rotated on every use
How it compares
It uses token rotation and memory-only storage instead of standard persistent localStorage tokens.
Compared to similar skills
jwt-auth side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| jwt-auth (this skill) | 1 | 6mo | Caution | Advanced |
| supabase-developer | 95 | 7mo | Review | Intermediate |
| better-auth-best-practices | 18 | 6mo | No flags | Intermediate |
| zod-4 | 12 | 7mo | No flags | Intermediate |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by dadbodgeoff
View all by dadbodgeoff →You might also like
supabase-developer
daffy0208
Build full-stack applications with Supabase (PostgreSQL, Auth, Storage, Real-time, Edge Functions). Use when implementing authentication, database design with RLS, file storage, real-time features, or serverless functions.
better-auth-best-practices
novuhq
Skill for integrating Better Auth - the comprehensive TypeScript authentication framework.
zod-4
prowler-cloud
Zod 4 schema validation patterns. Trigger: When creating or updating Zod v4 schemas for validation/parsing (forms, request payloads, adapters), including v3 -> v4 migration patterns.
lint-and-validate
davila7
Automatic quality control, linting, and static analysis procedures. Use after every code modification to ensure syntax correctness and project standards. Triggers onKeywords: lint, format, check, validate, types, static analysis.
fullstack-guardian
Jeffallan
Use when implementing features across frontend and backend, building APIs with UI, or creating end-to-end data flows. Invoke for feature implementation, API development, UI building, cross-stack work.
cloudbase-auth
TencentCloudBase
A single skill that helps design and implement CloudBase Auth v2 using Web SDK, Node SDK, and HTTP APIs, including login methods, tokens, and best practices.