| name | jwt-handler |
| description | JWT creation, validation, and management for SDK authentication |
| allowed-tools | ["Read","Write","Edit","Glob","Grep","Bash"] |
| graph | {"domains":["domain:software-engineering"],"specializations":["specialization:sdk-platform-development"],"skillAreas":["skill-area:authentication-authorization","skill-area:api-clients-sdks"],"roles":["role:platform-engineer"],"topics":["topic:api-design","topic:developer-experience"]} |
JWT Handler Skill
Overview
This skill implements JWT-based authentication for SDKs including token creation, validation, key rotation via JWKS, and secure claims handling.
Capabilities
- Generate and validate JWTs with multiple algorithms
- Implement JWKS (JSON Web Key Set) key rotation
- Support multiple signing algorithms (RS256, ES256, EdDSA)
- Handle token claims validation and extraction
- Configure token expiration and refresh
- Implement audience and issuer validation
- Support nested JWTs and JWE encryption
- Handle clock skew tolerance
Target Processes
- Authentication and Authorization Patterns
- SDK Architecture Design
- Platform API Gateway Design
Integration Points
- jose libraries (node-jose, python-jose)
- JWKS endpoints for key distribution
- Identity providers
- Token introspection endpoints