auth-architecture - Design JWT, API key, and RBAC authentication
Provides patterns for JWT and API key authentication, RBAC authorization, middleware pipelines, rate limiting, and secure credential management.
Tags
Updated: 2026-10-16Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Generate API keys
- Hash API keys
- Validate API keys
- Create JWT tokens
- Validate JWT tokens
- Load user context
- Check permissions
- Check resource access
- Enforce rate limits
- Log access attempts
Inputs
- Authorization credentials
- JWT configuration
- API key storage
- User roles
- User permissions
- Resource access requirements
Outputs
- Authentication decisions
- Authorization decisions
- Request user context
- Generated API keys
- Generated JWT tokens
- Access attempt logs
- Updated key usage timestamps
Requirements
- Rust environment
- JWT signing secret
- API key storage backend
- Argon2 support
- JWT library support
- DashMap support
