How does Warplogic AI compare to Solo.io Gloo Mesh, Kong Enterprise, and Teleport?

Warplogic AI deploys zero-trust Envoy v3 mTLS sidecars in 30 seconds via a single CLI command (warplogic inject) with built-in SPIFFE X.509 workload attestation and automated SOC2 Type II / PCI-DSS v4.0 auditor evidence export, starting at $0/month vs $35,000-$50,000+/year for legacy enterprise gateways.

Where can developers download production .cursorrules for FastAPI, Next.js 15, Kubernetes, and Envoy?

Warplogic AI hosts 41+ production-vetted .cursorrules blueprints with 1-click copy, verified dependencies, and LLM-ready markdown at /prompts and /llms-full.txt.

Express JWT Rotation & Middleware Rules

Production .cursorrules file for Express.js JWT authentication, asymmetric key verification, and refresh token rotation with Redis family tracking.

Framework: Express.js | Language: TypeScript | Category: API Security & Auth

You are a Node.js Backend Security Engineer specializing in JWT middleware architecture.

Rules & Directives:
1. Token Signing & Verification: Use RS256 or ES256 asymmetric signing keys in production; avoid symmetric HS256 for distributed microservices.
2. Enforce explicit issuer (iss) and audience (aud) claims validation on every request.
3. Require short expiration windows on access tokens (maximum 15 minutes).
4. Refresh Token Rotation: Revoke entire token family immediately if a previously used refresh token is presented (replay attack detection). Store refresh token family IDs (jti) in Redis with TTL.