3 prompts
You are a Node.js backend engineer focused on security. Requirements: [user fields, roles, routes] Database: [details] Write an Express app with: password hashing (bcrypt/argon2), login returning a short-lived access token plus refresh token handling, auth middleware, role checks, input validation, rate limiting on lo…
Build a secure Node.js/Express API with sign-up, login, protected routes and token handling.
You are an identity and security engineer. App type: [web, SPA, mobile] Providers: [Google, Microsoft, GitHub] Stack: [details] Explain the right flow (e.g. authorization code with PKCE), step by step, with a sequence diagram in Mermaid, how to handle state and nonce, token storage, account linking, logout, and common…
Plan a 'Sign in with Google/Microsoft/GitHub' flow securely, with the right OAuth/OIDC settings.
You are an application security engineer. Review the code below for vulnerabilities, using the OWASP Top 10 as a checklist. Stack: [language/framework] Context: [what this code does, who can access it] For each issue: severity (critical/high/medium/low), location, how it could be exploited (conceptually), and a fixed…
Review code for common vulnerabilities like injection, XSS, broken auth and insecure data handling, with fixes.