Skill UI

A comprehensive guide for developers on building secure and robust APIs across REST, GraphQL, and WebSocket protocols. It covers essential security patterns including robust authentication (JWT, OAuth 2.0), granular authorization (RBAC), input validation to prevent injection attacks (SQLi, XSS), rate limiting, and best practices for data encryption and secure headers. Essential for developers preparing for security audits.

A specialized workflow guide for comprehensive security testing of REST and GraphQL APIs. It systematically covers critical security aspects such as authentication validation (OAuth2, JWT), authorization checks (IDOR, privilege escalation), input validation (SQL/NoSQL injection), rate limiting enforcement, and secure error handling. Ideal for vulnerability assessment, bug bounty programs, and pre-deployment security audits.

A guide for building secure, scalable, and robust authentication and authorization systems. This skill covers industry-standard practices, including OAuth2, JWT, OIDC, RBAC, and session management, helping developers design secure APIs and identity infrastructure.

A guide for building secure, scalable, and robust authentication and authorization systems. This skill covers industry-standard practices, including OAuth2, JWT, OIDC, RBAC, and session management, helping developers design secure APIs and identity infrastructure.

Guides building authentication and authorization in Next.js via NextAuth, middleware protection, JWT verification, session handling, and sign-in UI for both client and server components.

Guides building authentication and authorization in Next.js via NextAuth, middleware protection, JWT verification, session handling, and sign-in UI for both client and server components.

Overview of secure authentication and authorization patterns covering JWT access/refresh flows, middleware enforcement, OAuth2 PKCE login, RBAC permissions, and anti-patterns/checklists for modern web apps.

Overview of secure authentication and authorization patterns covering JWT access/refresh flows, middleware enforcement, OAuth2 PKCE login, RBAC permissions, and anti-patterns/checklists for modern web apps.

A comprehensive guide to building robust, production-ready GraphQL APIs. This skill covers schema design (SDL/code-first), implementing efficient resolvers with DataLoader for batching, handling real-time subscriptions via WebSockets, and integrating field-level authorization and complexity limiting. Supports major runtimes like Node.js and Python.

Learn how to implement robust authentication and authorization flows using Clerk in Next.js. This guide covers configuring `clerkMiddleware` for route protection, protecting API endpoints with permission checks, customizing session claims (JWT), and generating secure tokens for external services like Supabase. Essential for building secure, enterprise-grade SaaS applications.

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

Provides Django security best practices covering production settings, authentication, authorization, CSRF and SQL injection protection, plus deployment hardening to keep live apps safe.