---

name: Backend API Authentication description: Implement secure API authentication following industry best practices including token-based auth, OAuth2/OIDC, JWT handling, and password security. Use this skill when implementing or modifying authentication mechanisms, login endpoints, token generation or validation logic, user session management, password hashing or verification, API security middleware, authentication guards or decorators, OAuth2 flows, API key management, or any backend code that handles user credentials, access tokens, refresh tokens, or API authentication. Use when creating new auth endpoints, updating existing authentication logic, reviewing security vulnerabilities in auth code, implementing rate limiting for login endpoints, or working with authentication-related database models and queries.

When to use this skill

• When implementing or modifying authentication endpoints (login, logout, token refresh)
• When writing or updating token generation, validation, or verification logic
• When creating or modifying password hashing, verification, or reset functionality
• When implementing OAuth2, OIDC, or other authentication flows
• When working with authentication middleware, guards, or decorators
• When creating or updating user session management code
• When implementing API key generation, validation, or rotation
• When adding rate limiting to authentication endpoints
• When reviewing or fixing security vulnerabilities in authentication code
• When working with authentication-related database models, migrations, or queries
• When implementing JWT signing, verification, or token expiration logic
• When creating secure credential storage or secret management code

Backend API Authentication

This Skill provides Claude Code with specific guidance on how to adhere to coding standards as they relate to how it should handle backend API authentication.

Instructions

For details, refer to the information provided in this file: backend API authentication