authentication-setup
Setup and manage authentication and authorization systems including JWT, OAuth, and role-based access control.

Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encountering division on secrets, secret-dependent branches, or constant-time programming questions in C, C++, Go, Rust, Swift, Java, Kotlin, C#, PHP, JavaScript, TypeScript, Python, or Ruby.
npx skills add trailofbits/skillsSetup and manage authentication and authorization systems including JWT, OAuth, and role-based access control.

Helps users select appropriate Azure roles based on required permissions with least privilege access.

Implement security best practices for web apps and infrastructure, covering HTTPS, CORS, XSS, SQL injection, CSRF, rate limiting, and OWASP

Extract security requirements from threat models and business context for actionable security measures.

Implement authentication and authorization patterns like JWT, OAuth2, session management, and RBAC for secure API access.
