jwt-security 是做什么的？
遵循安全最佳实践实现 JWT 身份验证的指南，涵盖令牌创建、验证和存储
遵循安全最佳实践实现 JWT 身份验证的指南，涵盖令牌创建、验证和存储
此技能（mindrally/jwt-security）提供了一套完整的指南，帮助开发者在实现 JWT 身份验证时遵循行业安全最佳实践。它涵盖了令牌的安全创建（如选择合适的签名算法和密钥管理）、可靠的验证流程（签名验证、过期检查、受众声明验证）以及安全的存储策略（防止 XSS 和 CSRF 攻击，推荐使用 HttpOnly Cookie 或安全存储机制）。该技能适用于任何使用 JWT 进行用户认证的 Web 应用程序或 API，无论是后端（如 Node.js、Python、Java）还是前端（如 React、Vue）。通过遵循此技能提供的指导，开发者可以有效避免常见的 JWT 安全漏洞，如令牌伪造、注入攻击和敏感信息泄露。
npx skills add https://github.com/mindrally/skills/tree/main/skills/jwt-securityInstalled? Explore more 编程与开发 skills: steipete/bluebubbles, steipete/eightctl, steipete/blucli · View all 6 →
遵循安全最佳实践实现 JWT 身份验证的指南，涵盖令牌创建、验证和存储
This repo contains 20 individual skills — each has its own dedicated page.
Implement web accessibility (a11y) best practices following WCAG guidelines to create inclusive, accessible user interfaces.
Expert guidelines for Chrome extension development with Manifest V3, covering security, performance, and best practices. Use when building browser extensions, creating popup UIs, implementing content scripts, working with Chrome APIs, managing extension permissions, or publishing to Chrome Web Store.
Expert guidance for computer vision development using OpenCV, PyTorch, and modern deep learning techniques for image and video processing.
Expert guidance for data analysis, visualization, and Jupyter Notebook development with pandas, matplotlib, seaborn, and numpy.
Expert guidance for deep learning, transformers, diffusion models, and LLM development with PyTorch, Transformers, Diffusers, and Gradio.
Expert in Expo React Native TypeScript mobile development with best practices
Expert in FastAPI Python development with best practices for APIs and async operations
Expert guidelines for building performant animations with Framer Motion/Motion library in React applications
HTMX development guidelines for building dynamic web applications with minimal JavaScript using HTML attributes.
Machine learning development with JAX, functional programming patterns, and high-performance computing.
MySQL development best practices for schema design, query optimization, and database administration
Expert in TypeScript, Node.js, Next.js App Router, React, Shadcn UI, Radix UI and Tailwind
Full-stack Next.js 14 development with TypeScript, TailwindCSS, and Supabase for building production-ready web applications.
Expert guidance for Odoo ERP development including Python ORM, XML views, and module architecture
Expert guidance for browser automation using Puppeteer with best practices for web scraping, testing, screenshot capture, and JavaScript execution in headless Chrome.
Redis development best practices for caching, data structures, and high-performance key-value operations
Expert guidance for building web scrapers and crawlers using the Scrapy Python framework with best practices for spider development, data extraction, and pipeline management.
SCSS/Sassy CSS best practices and coding guidelines for maintainable, scalable stylesheets
Guidelines for developing with TypeORM, a full-featured ORM for TypeScript and JavaScript supporting multiple databases
Expert in web scraping and data extraction with Python tools
Send and manage iMessages via BlueBubbles, including attachments, tapbacks, edits, replies, and groups.
Control Eight Sleep pods (status, temperature, alarms, schedules).
BluOS CLI (blu) for discovery, playback, grouping, and volume.
Create, search, and manage Bear notes via grizzly CLI.
Capture frames or clips from RTSP/ONVIF cameras.
Search GIF providers with CLI/TUI, download results, and extract stills/sheets.