Skill UI

A comprehensive guide for developers on building secure and robust APIs across REST, GraphQL, and WebSocket protocols. It covers essential security patterns including robust authentication (JWT, OAuth 2.0), granular authorization (RBAC), input validation to prevent injection attacks (SQLi, XSS), rate limiting, and best practices for data encryption and secure headers. Essential for developers preparing for security audits.

A specialized workflow guide for comprehensive security testing of REST and GraphQL APIs. It systematically covers critical security aspects such as authentication validation (OAuth2, JWT), authorization checks (IDOR, privilege escalation), input validation (SQL/NoSQL injection), rate limiting enforcement, and secure error handling. Ideal for vulnerability assessment, bug bounty programs, and pre-deployment security audits.

A guide for building secure, scalable, and robust authentication and authorization systems. This skill covers industry-standard practices, including OAuth2, JWT, OIDC, RBAC, and session management, helping developers design secure APIs and identity infrastructure.

A guide for building secure, scalable, and robust authentication and authorization systems. This skill covers industry-standard practices, including OAuth2, JWT, OIDC, RBAC, and session management, helping developers design secure APIs and identity infrastructure.

Guides building authentication and authorization in Next.js via NextAuth, middleware protection, JWT verification, session handling, and sign-in UI for both client and server components.

Guides building authentication and authorization in Next.js via NextAuth, middleware protection, JWT verification, session handling, and sign-in UI for both client and server components.

Overview of secure authentication and authorization patterns covering JWT access/refresh flows, middleware enforcement, OAuth2 PKCE login, RBAC permissions, and anti-patterns/checklists for modern web apps.

Overview of secure authentication and authorization patterns covering JWT access/refresh flows, middleware enforcement, OAuth2 PKCE login, RBAC permissions, and anti-patterns/checklists for modern web apps.

This skill provides a comprehensive checklist for performing rigorous code security reviews. It covers critical areas such as secrets management, input validation, preventing SQL injection, secure authentication (JWT, RLS), and mitigating XSS/CSRF vulnerabilities. Essential for developers building features that handle sensitive data or user input.

This comprehensive skill guide details the implementation of robust and secure API authentication systems. It covers industry standards like JWT, OAuth 2.0 (including various flows), and API key management. Key features include role-based access control (RBAC), refresh token rotation, session management, and brute-force protection, ensuring secure communication for diverse service architectures.

This skill details the architecture and implementation of a robust API Gateway, serving as the single entry point for multiple backend microservices. It centrally manages critical cross-cutting concerns, including path-based and header-based routing, JWT/OAuth2 authentication, rate limiting, load balancing, and circuit breaker protection. This pattern is essential for building resilient, scalable, and maintainable microservices architectures, significantly simplifying client integration and request management.

Learn how to implement robust authentication and authorization flows using Clerk in Next.js. This guide covers configuring `clerkMiddleware` for route protection, protecting API endpoints with permission checks, customizing session claims (JWT), and generating secure tokens for external services like Supabase. Essential for building secure, enterprise-grade SaaS applications.