O que segurança-jwt faz?
Diretrizes para implementar autenticação JWT com práticas recomendadas de segurança para criação, validação e armazenamento de tokens.
Diretrizes para implementar autenticação JWT com práticas recomendadas de segurança para criação, validação e armazenamento de tokens.
Esta skill fornece um conjunto abrangente de diretrizes de segurança para implementar autenticação baseada em JWT (JSON Web Tokens) em suas aplicações. Ela cobre as melhores práticas para criação segura de tokens, incluindo algoritmos de assinatura fortes (como HS256 ou RS256), gerenciamento adequado de chaves e prevenção de vulnerabilidades comuns, como injeção de payload. A validação rigorosa de tokens é abordada, com ênfase na verificação de assinatura, expiração (exp), emissor (iss) e público-alvo (aud) para evitar ataques como confusão de algoritmos. Além disso, a skill oferece orientações detalhadas sobre armazenamento seguro de tokens no lado do cliente (como usar cookies HttpOnly em vez de localStorage) e no servidor, protegendo contra ataques XSS e CSRF. Suportada por agentes de IA como Claude Code e Cursor, esta skill é essencial para desenvolvedores que desejam implementar autenticação JWT robusta, seguindo as melhores práticas da indústria para evitar brechas de segurança.
npx skills add https://github.com/mindrally/skills/tree/main/skills/jwt-securityInstalled? Explore more Programação e Desenvolvimento skills: steipete/bluebubbles, steipete/eightctl, steipete/blucli · View all 6 →
Diretrizes para implementar autenticação JWT com práticas recomendadas de segurança para criação, validação e armazenamento de tokens.
This repo contains 20 individual skills — each has its own dedicated page.
Implement web accessibility (a11y) best practices following WCAG guidelines to create inclusive, accessible user interfaces.
Expert guidelines for Chrome extension development with Manifest V3, covering security, performance, and best practices. Use when building browser extensions, creating popup UIs, implementing content scripts, working with Chrome APIs, managing extension permissions, or publishing to Chrome Web Store.
Expert guidance for computer vision development using OpenCV, PyTorch, and modern deep learning techniques for image and video processing.
Expert guidance for data analysis, visualization, and Jupyter Notebook development with pandas, matplotlib, seaborn, and numpy.
Expert guidance for deep learning, transformers, diffusion models, and LLM development with PyTorch, Transformers, Diffusers, and Gradio.
Expert in Expo React Native TypeScript mobile development with best practices
Expert in FastAPI Python development with best practices for APIs and async operations
Expert guidelines for building performant animations with Framer Motion/Motion library in React applications
HTMX development guidelines for building dynamic web applications with minimal JavaScript using HTML attributes.
Machine learning development with JAX, functional programming patterns, and high-performance computing.
MySQL development best practices for schema design, query optimization, and database administration
Expert in TypeScript, Node.js, Next.js App Router, React, Shadcn UI, Radix UI and Tailwind
Full-stack Next.js 14 development with TypeScript, TailwindCSS, and Supabase for building production-ready web applications.
Expert guidance for Odoo ERP development including Python ORM, XML views, and module architecture
Expert guidance for browser automation using Puppeteer with best practices for web scraping, testing, screenshot capture, and JavaScript execution in headless Chrome.
Redis development best practices for caching, data structures, and high-performance key-value operations
Expert guidance for building web scrapers and crawlers using the Scrapy Python framework with best practices for spider development, data extraction, and pipeline management.
SCSS/Sassy CSS best practices and coding guidelines for maintainable, scalable stylesheets
Guidelines for developing with TypeORM, a full-featured ORM for TypeScript and JavaScript supporting multiple databases
Expert in web scraping and data extraction with Python tools
Send and manage iMessages via BlueBubbles, including attachments, tapbacks, edits, replies, and groups.
Control Eight Sleep pods (status, temperature, alarms, schedules).
BluOS CLI (blu) for discovery, playback, grouping, and volume.
Create, search, and manage Bear notes via grizzly CLI.
Capture frames or clips from RTSP/ONVIF cameras.
Search GIF providers with CLI/TUI, download results, and extract stills/sheets.