security-patterns - Zero-Trust Security Patterns for Apps
Enforce zero-trust security across frontend and backend applications
Tags
Updated: 2026-03-23Capabilities
Typical Inputs
Typical Outputs
What this skill does
- store tokens in memory
- prevent XSS attacks
- auto-logout on inactivity
- clear PII on logout
- authorize API methods
- mask PII in responses
- log audit trails
- validate input data
- rate limit API requests
- encrypt data at rest
- encrypt data in transit
- configure security headers
Inputs
- user credentials
- API endpoints
- tokens
- sensitive data
- authorization codes
Outputs
- authentication events
- authorization decisions
- audit logs
- masked data responses
- security headers
Requirements
- TLS 1.3
- OAuth 2.0
- PKCE
- role-based access control
- Spring Boot framework