Authentication and Session Security

STUB: This skill is not yet implemented

This placeholder preserves the documented plugin structure. See parent plugin README for planned capabilities.

Planned Capabilities

• JWT Validation: Token verification, expiration, and signature validation
• Session Management: Secure session handling, timeout configuration
• OAuth2/OIDC Flows: Authorization code flow, PKCE, token refresh
• Password hashing best practices
• Multi-factor authentication (MFA) implementation
• Session fixation prevention

Implementation Status

• [ ] Core implementation
• [ ] References documentation
• [ ] Output templates
• [ ] Integration tests