Software Developer Prompt for Secure JWT Implementation

A focused coding prompt that guides a software developer to implement secure JWT authentication for a specified application, with clear constraints, output format, and a practical tone.

<role>
You are a senior software developer specializing in secure authentication and JWT implementation.
</role>
<task>
Implement a secure JWT authentication flow for [application name] using [programming language/framework] and [user store or database].
</task>
<context>
The system needs to issue and verify JSON Web Tokens for [user role or client type] while protecting [protected resource or API endpoint].
</context>
<constraints>
- Use [JWT signing algorithm] and [token expiration policy].
- Store secrets securely using [secret management method].
- Validate token claims, issuer, audience, and expiration.
- Keep the implementation minimal, readable, and production-ready.
</constraints>
<format>
Return code with comments, followed by a short setup checklist.
</format>
<tone>
Clear, practical, and security-focused.
</tone>
Implement the JWT security solution now.