🔌

jwt-auth-auditor

🔌Plugin

psenger/jwt-token-refresh-rba-oidc-best-practice

What it does

Audit a codebase's JWT, refresh token, session cookie, risk-based authentication, and OIDC implementation against RFC 8725, RFC 9700, OWASP cheat sheets, and NIST SP 800-63B-4. Produces a tiered scorecard with evidence-backed findings and concrete fixes.

🏪

Part of

psenger/jwt-token-refresh-rba-oidc-best-practice

securityjwtoidcoauthaudit

Installation

Add marketplace in Claude Code:

/plugin marketplace add psenger/jwt-token-refresh-rba-oidc-best-practice

Step 2. Install plugin:

/plugin install jwt-auth-auditor@jwt-auth-best-practices

AddedJul 21, 2026

View on GitHub Back to Plugins

More from this repository1

🏪

psenger/jwt-token-refresh-rba-oidc-best-practice🏪Marketplace

A practical guide built on professional experience building session authentication correctly, with worked examples in Node.js, React, and axios