ppathan-security/auth-security-auditv0.1.0Public
Auth security audit
Audits jsonwebtoken and bcryptjs usage across Express auth routes under a source directory: verifies password hashing (bcrypt salt rounds, compare usage, no plaintext storage) and JWT lifecycle (signing expiry, middleware verification, bearer extraction, 401 handling), then emits a security verification checklist plus
Read the full description
prioritized recommendations. Process-only, read-only, needs python3.
Before you run it1 local tool
Everything here is checked on your machine when rote inspects the play. This page never learns what you have installed or which credentials you hold.
- ○python3local tool
Must be on your PATH when used. minimum version undeclared.
Inputs1, all required
rote asks for these before running and shows the defaults it will use.
- Src
srcAbsolute path to the backend source directory (e.g. backend/src) to audit
requiredstringcustom value allowed
What it changes
No write operations are declared in this version's manifest.
Credentials remain in the recipient's local rote vault; this page and the publisher never receive them.
Runtime details
- rote CLIversion 0.62.0 or newer
- Servicesnone declared
- Digest
sha256:f62c4dde402741aab992090e92cf57b98f1237c0d166fda1866c5ffdf4d07100 - Archive size5915 bytes
- Published2026-09-01T12:35:45.617884+00:00
- Published withrote 0.66.1
Credential values and current readiness remain local. Opening this page never prompts for a credential, opens an authorization browser, or calls a service this play uses.
A play is a published, versioned automation package that runs on your own machine through rote, a free command-line tool. Opening this page installs nothing and runs nothing.