authentication

name	authentication
description	Backend authentication and authorization patterns. JWT, OAuth2, session management, RBAC, and secure token handling.
sasmp_version	2.0.0
bonded_agent	03-api-development
bond_type	SECONDARY_BOND
atomic_operations	["JWT_IMPLEMENTATION","OAUTH2_SETUP","SESSION_MANAGEMENT","RBAC_CONFIGURATION"]
parameter_validation	{"query":{"type":"string","required":true,"minLength":5,"maxLength":2000},"auth_type":{"type":"string","enum":["jwt","oauth2","session","api_key"],"required":false}}
retry_logic	{"max_attempts":2,"backoff":"exponential","initial_delay_ms":1000}
logging_hooks	{"on_invoke":"skill.authentication.invoked","on_success":"skill.authentication.completed","on_error":"skill.authentication.failed"}
exit_codes	{"SUCCESS":0,"INVALID_INPUT":1,"SECURITY_ISSUE":2}

Authentication Skill

Bonded to: api-development-agent (Secondary)

---

Quick Start

# Invoke authentication skill
"Implement JWT authentication for my API"
"Set up OAuth2 with Google login"
"Configure role-based access control"

---

Auth Methods Comparison

Method	Best For	Stateless	Complexity
JWT	APIs, microservices	Yes	Medium
OAuth2	Third-party login	Yes	High
Session	Traditional web apps	No	Low
API Key	Simple integrations	Yes	Low

---

Examples

JWT Authentication

from jose import jwt
from datetime import datetime, timedelta

SECRET_KEY = "your-secret-key"
ALGORITHM = "HS256"

def create_access_token(user_id: str, expires_delta: timedelta = timedelta(minutes=30)):
    expire = datetime.utcnow() + expires_delta
    return jwt.encode(
        {"sub": user_id, "exp": expire},
        SECRET_KEY,
        algorithm=ALGORITHM
    )

def verify_token(token: str) -> str:
    payload = jwt.decode(token, SECRET_KEY, algorithms=[ALGORITHM])
    return payload.get("sub")

RBAC Implementation

 enum  Enum
 functools  wraps

 ():
    ADMIN = 
    USER = 
    VIEWER = 

PERMISSIONS = {
    Role.ADMIN: [, , , ],
    Role.USER: [, ],
    Role.VIEWER: []
}

 ():
     ():

          ():
             permission   PERMISSIONS.get(user.role, []):
                 HTTPException(status_code=)
              func(user, *args, **kwargs)
         wrapper
     decorator