Skill UI

A comprehensive guide for developers on building secure and robust APIs across REST, GraphQL, and WebSocket protocols. It covers essential security patterns including robust authentication (JWT, OAuth 2.0), granular authorization (RBAC), input validation to prevent injection attacks (SQLi, XSS), rate limiting, and best practices for data encryption and secure headers. Essential for developers preparing for security audits.

An expert developer specializing in secure backend coding practices, vulnerability mitigation, and robust API design. Proficient in preventing common attacks such as SQL injection, XSS, and CSRF. Covers comprehensive areas including input validation, authentication mechanisms (OAuth 2.0, MFA), database security, and implementing necessary security headers (CSP, HSTS) for building secure-by-design applications. Ideal for implementing security fixes or building new, hardened backend services.

This comprehensive skill guide details the implementation of robust and secure API authentication systems. It covers industry standards like JWT, OAuth 2.0 (including various flows), and API key management. Key features include role-based access control (RBAC), refresh token rotation, session management, and brute-force protection, ensuring secure communication for diverse service architectures.

Expert guide for designing robust, scalable, and resilient backend systems. Covers modern patterns including Microservices, Event Sourcing, CQRS, and advanced API contracts (REST, GraphQL, gRPC). Specializes in defining service boundaries, implementing distributed transactions (Saga), and integrating comprehensive security measures like OAuth 2.0 and mTLS.

A comprehensive expert resource for building high-performance, async-first APIs using FastAPI, SQLAlchemy 2.0, and Pydantic V2. Covers advanced topics like microservices architecture, WebSockets, advanced security (OAuth2, RBAC), robust testing strategies (pytest), performance optimization, and modern DevOps practices (Docker, Kubernetes). Ideal for mastering scalable, production-ready Python web services.

This guide provides expert patterns and code templates for integrating with the HubSpot CRM API. It covers secure authentication methods, including OAuth 2.0 for public apps and Private App Tokens for single-account use. Topics include CRUD operations on CRM objects, handling associations, webhooks, and batch processing. Implementation examples are provided for both Node.js and Python SDKs.

A comprehensive guide for installing and configuring the Linear SDK for TypeScript/JavaScript. It details two primary authentication methods: using a personal API key for scripts and server-side tools, and implementing the full OAuth 2.0 flow (including PKCE and token refreshing) for user-facing applications. Essential for integrating Linear functionality into custom software.

This guide details secure methods for connecting external applications to the Linear API. It covers essential security practices, including secure storage of API keys using environment variables, implementing OAuth 2.0 with PKCE for robust authentication, managing token refresh cycles, and verifying webhook signatures using HMAC-SHA256. Essential for building production-grade, secure integrations.

This skill facilitates the configuration and management of Single Sign-On (SSO) for Windsurf enterprise deployments. It supports industry-standard protocols like SAML 2.0 and OIDC/OAuth 2.0, allowing seamless identity integration with major providers such as Okta, Azure AD, and Google Workspace. Essential for administrators implementing centralized, secure enterprise authentication.

Configures OAuth 2.0 flows (Authorization Code with PKCE, Client Credentials, Device Authorization) with secure scope, token lifecycle, PKCE validation, and RFC 9700 guidance so teams can deploy compliant IAM controls.

Identifies and exploits OAuth 2.0/OpenID Connect misconfigurations during authorized security assessments, covering redirect URI manipulation, token leakage, authorization code theft, and scope escalation to evaluate provider and consumer defenses.

Performs OAuth 2.0 scope minimization reviews by inventorying service principals, delegated grants, and app role assignments to flag excessive permissions, risky consent patterns, and unused token grants across identity providers and SaaS integrations.