Skill UI

A specialized workflow guide for comprehensive security testing of REST and GraphQL APIs. It systematically covers critical security aspects such as authentication validation (OAuth2, JWT), authorization checks (IDOR, privilege escalation), input validation (SQL/NoSQL injection), rate limiting enforcement, and secure error handling. Ideal for vulnerability assessment, bug bounty programs, and pre-deployment security audits.

A guide for building secure, scalable, and robust authentication and authorization systems. This skill covers industry-standard practices, including OAuth2, JWT, OIDC, RBAC, and session management, helping developers design secure APIs and identity infrastructure.

A guide for building secure, scalable, and robust authentication and authorization systems. This skill covers industry-standard practices, including OAuth2, JWT, OIDC, RBAC, and session management, helping developers design secure APIs and identity infrastructure.

Overview of secure authentication and authorization patterns covering JWT access/refresh flows, middleware enforcement, OAuth2 PKCE login, RBAC permissions, and anti-patterns/checklists for modern web apps.

Overview of secure authentication and authorization patterns covering JWT access/refresh flows, middleware enforcement, OAuth2 PKCE login, RBAC permissions, and anti-patterns/checklists for modern web apps.

This skill details the architecture and implementation of a robust API Gateway, serving as the single entry point for multiple backend microservices. It centrally manages critical cross-cutting concerns, including path-based and header-based routing, JWT/OAuth2 authentication, rate limiting, load balancing, and circuit breaker protection. This pattern is essential for building resilient, scalable, and maintainable microservices architectures, significantly simplifying client integration and request management.

A comprehensive expert resource for building high-performance, async-first APIs using FastAPI, SQLAlchemy 2.0, and Pydantic V2. Covers advanced topics like microservices architecture, WebSockets, advanced security (OAuth2, RBAC), robust testing strategies (pytest), performance optimization, and modern DevOps practices (Docker, Kubernetes). Ideal for mastering scalable, production-ready Python web services.

This skill generates robust, type-safe client Software Development Kits (SDKs) for multiple languages (including Python, TypeScript, Go, and Java) directly from OpenAPI 3.0+ specifications. It automatically handles complex API patterns such as authentication (Bearer, OAuth2), automatic retries with exponential backoff, and sophisticated pagination helpers. Use this when you need to create standardized, idiomatic client libraries to consume a defined API contract across diverse development stacks.

This guide provides a comprehensive setup process for Guidewire InsuranceSuite development. It covers installing Guidewire Studio, configuring secure OAuth2 authentication via Guidewire Hub, and obtaining necessary JWT tokens for connecting to core APIs like PolicyCenter, ClaimCenter, and BillingCenter. Essential for developers integrating with the Guidewire platform.

This guide outlines critical security measures for integrating with Guidewire systems, which handle sensitive policyholder PII, claims, and financial data. It covers best practices for implementing OAuth2 JWT authentication, API role scoping, input validation, and sensitive data redaction (PII) to prevent data breaches and meet compliance standards.

Specialized skill for designing, building, and optimizing modern, cloud-native enterprise Java applications. Covers microservices architecture, Spring Boot 3.x, reactive programming (WebFlux), advanced data persistence (JPA optimization, R2DBC), and robust security implementation (OAuth2/JWT). Use this when implementing DDD patterns, ensuring high test coverage, and managing complex transaction boundaries.

Guides developers through OAuth2 Flow Helper tasks within Security Fundamentals by providing best-practice instructions, generating production-ready code/configs, and validating outputs for authentication, validation, and secure coding.