auth0 avatar

Express Oauth2 Jwt Bearer

Auth0's official middleware for protecting Express APIs with JWT Bearer tokens. It handles the entire validation chain: signature verification, audience and issuer checks, expiry validation, and claim extraction. The setup is straightforward if you remember to create an API (not an Application) in the Auth0 dashboard and keep your domain as a hostname without the https:// prefix. Includes helpers for scope-based RBAC with requiredScopes() and claimIncludes(), plus DPoP support if you need proof-of-possession. The skill docs emphasize passing scopes as space-separated strings or arrays, not multiple arguments, which is a common gotcha. Better than rolling your own JWT validation, and the bootstrap script with Auth0 CLI can configure everything automatically.

skills.sh installs
469
GitHub stars
56
last updated
Aug 21, 2026

Install

$ npx -y skills add auth0/agent-skills --skill express-oauth2-jwt-bearer --agent claude-code

Installs into .claude/skills of the current project.

Files

Auth0's official middleware for protecting Express APIs with JWT Bearer tokens. It handles the entire validation chain: signature verification, audience and issuer checks, expiry validation, and claim extraction. The setup is straightforward if you remember to create an API (not an Application) in the Auth0 dashboard and keep your domain as a hostname without the https:// prefix. Includes helpers for scope-based RBAC with requiredScopes() and claimIncludes(), plus DPoP support if you need proof-of-possession. The skill docs emphasize passing scopes as space-separated strings or arrays, not multiple arguments, which is a common gotcha. Better than rolling your own JWT validation, and the bootstrap script with Auth0 CLI can configure everything automatically.

Browse the repository on GitHub

Sponsors

Details

Repository
github.com/auth0/agent-skills
Categories
Backend & APIs, AI & Agent Building
First seen
Jun 3, 2026

More from auth0/agent-skills

All 23
1syncfusion avatarsyncfusion-blazor-datagridsyncfusion/blazor-ui-components-skillsImplements the Syncfusion Blazor DataGrid (SfGrid) for efficient tabular operations such as sorting, filtering, paging, grouping, editing, aggregates, virtualiz468skills.sh installs
2aj-geddes avatarsession-managementaj-geddes/useful-ai-promptsImplement secure session management systems with JWT tokens, session storage, token refresh, logout handling, and CSRF protection. Use when managing user authen466skills.sh installs
3aj-geddes avatarspring-boot-applicationaj-geddes/useful-ai-promptsBuild enterprise Spring Boot applications with annotations, dependency injection, data persistence, REST controllers, and security. Use when developing Spring a463skills.sh installs
4aj-geddes avatarserverless-architectureaj-geddes/useful-ai-promptsDesign and implement serverless applications using AWS Lambda, Azure Functions, and GCP Cloud Functions with event-driven patterns and orchestration.461skills.sh installs
5aj-geddes avatartransaction-managementaj-geddes/useful-ai-promptsManage database transactions for data consistency. Use when implementing ACID compliance, handling concurrency, or managing transaction isolation levels.461skills.sh installs
6aj-geddes avatarsecrets-rotationaj-geddes/useful-ai-promptsImplement automated secrets rotation for API keys, credentials, certificates, and encryption keys. Use when managing secrets lifecycle, compliance requirements,459skills.sh installs