Skill UI

This comprehensive guide details how to set up OAuth 2.0 client credentials for the Navan REST API. It provides complete, runnable code examples in both TypeScript (Node.js) and Python. Users can follow these steps to exchange client secrets for a secure bearer token, enabling programmatic access to Navan's booking and travel data. This is essential for configuring new Navan integrations or rotating API credentials.

Designed to handle API integrations for services like Navan that lack a dedicated sandbox environment. This skill implements robust environment isolation (Development, Staging, Production) using separate OAuth credentials, advanced environment variable management, and a local development proxy/mock server. It ensures that development, testing, and CI/CD processes can run safely without modifying live production data.

This skill provides a comprehensive framework for setting up robust observability for Navan API integrations in production environments. It guides users through implementing structured logging, tracking request latency, classifying various errors (auth, rate limit, server), and monitoring the OAuth token refresh lifecycle. Includes practical steps and YAML examples for configuring alerts and building dashboards in platforms like Datadog, CloudWatch, or Prometheus/Grafana.

Use this guide when designing a robust, production-grade integration with the Navan API. It details a multi-layered architectural blueprint, including an API Gateway for rate limiting and circuit breaking, a centralized OAuth Token Management Service, secure data synchronization pipelines, and comprehensive monitoring stacks. Ideal for complex enterprise systems requiring reliable connectivity to travel and expense data.

Build a robust, typed API wrapper for Navan's REST endpoints, compensating for the lack of an official SDK. This pattern provides automated OAuth 2.0 token lifecycle management, built-in retry logic (for rate limiting and service downtime), and structured error handling, ensuring reliable, type-safe API interactions in production environments.

A comprehensive guide to securing Navan integrations and API access. This skill covers OAuth 2.0 best practices, secure credential storage, automated credential rotation, configuring Single Sign-On (SSO) via SAML/OpenID Connect, and implementing automated user lifecycle management using SCIM provisioning. Essential for hardening enterprise-level integrations.

This guide provides a comprehensive blueprint for implementing enterprise-grade Role-Based Access Control (RBAC) for Notion integrations. It covers the full OAuth 2.0 flow for public, multi-tenant apps, secure per-workspace token storage (with encryption), and layering custom permission models (admin/editor/viewer) over Notion's native permissions. Essential for building robust, secure, and audit-compliant Notion applications.

This guide covers essential security protocols for integrating with the Notion API. Learn how to manage integration tokens securely, implement OAuth2 flows, and enforce the principle of least privilege by separating read/write capabilities. It is crucial for developers building robust, secure Notion-powered applications.

This comprehensive checklist guides users through identifying and exploiting open redirect vulnerabilities in web applications. It covers parameter identification, advanced bypass techniques (e.g., URL encoding, CRLF injection), and chaining the vulnerability with other flaws like OAuth or SSRF. Ideal for web application penetration testing and bug bounty hunting.

This guide provides comprehensive instructions on implementing secure authentication and managing the token lifecycle for the OneNote Graph API. It details the mandatory shift from deprecated app-only authentication to delegated authentication using MSAL, ensuring compliance with modern OAuth 2.0 standards. Key topics include establishing least-privilege permission scopes, handling token renewal, and securely storing credentials using environment variables or Azure Key Vault. Essential for developers building resilient and compliant OneNote integrations.

This comprehensive guide provides step-by-step instructions for installing and configuring the Palantir Foundry SDK. It covers both the Platform SDK for direct REST API data access and the OSDK for Ontology-based workflows. Users will learn how to set up authentication using OAuth2 client credentials or Bearer tokens, ensuring secure and seamless integration into their development environment for both production and development use cases.

This guide outlines comprehensive security best practices for integrating with Palantir Foundry. It covers secure credential storage (using secrets managers like AWS Secrets Manager or Vault), implementing the Principle of Least Privilege via OAuth2 scopes, and establishing robust credential rotation procedures. Use this when securing production environments, setting up new data pipelines, or auditing existing API access controls.