Skills tagged: authorization

• convex-security-check - Convex Security Check

  convexsecurityauthenticationauthorization

  ★ 0 · Updated 2026-09-22

  Quick security audit checklist covering authentication, function exposure, argument validation, row-level access control, and environment variable handling.

  ⚙ Audit authentication configuration⚙ Review function exposure⚙ Validate function arguments
• cognito - AWS Cognito User Authentication and Authorization

  awscognitosecurityauthentication

  ★ 4 · Updated 2026-09-21

  Provides user authentication, authorization, and directory management for web and mobile applications.

  ⚙ Create user pools⚙ Create app clients⚙ Sign up and confirm users
• springboot-security - Spring Boot Security Audit

  spring-bootspring-securitysecurityjava

  ★ 1 · Updated 2026-09-18

  Spring Security best practices for authentication, authorization, input validation, CSRF, secrets, headers, and rate limiting in Spring Boot.

  ⚙ Audit authentication and authorization⚙ Validate user inputs⚙ Prevent SQL injection vulnerabilities
• bola-idor - Broken Object Level Authorization (BOLA/IDOR) Testing

  authorizationbolaidorowasp

  ★ 22 · Updated 2026-09-18

  Identifies and tests Broken Object Level Authorization and Insecure Direct Object Reference vulnerabilities in APIs and web applications.

  ⚙ Map object identifiers across applications⚙ Replay requests using alternate tokens⚙ Test unauthenticated endpoint access
• authz-constraints - Backend Authorization (authZ) Constraints and Best Practices

  authorizationauthzsecurityaccess-control

  ★ 5 · Updated 2026-09-17

  Defines rules for backend authorization including fail-close policy, two-level checks, centralized enforcement, multi-tenancy, and audit logging.

  ⚙ Enforce fail-close authorization rules⚙ Perform two-level permission checks⚙ Centralize authorization decision logic
• Philsquare Permissions - Implement role permissions in Laravel policies

  laravelpermissionspoliciesauthorization

  ★ 602 · Updated 2026-09-14

  Provides guidance for implementing role-based permissions in Laravel policies using the philsquare/permissions package.

  ⚙ Extend BasePolicy for Laravel policies⚙ Define role permissions in rolePermissions⚙ Use permission helpers like crud
• common-security-standards - Security Standards

  securityauthenticationauthorizationencryption

  ★ 2 · Updated 2026-09-12

  Enforces universal security protocols for safe and resilient software development.

  ⚙ Validate and sanitize external input⚙ Apply least privilege access controls⚙ Prevent code and SQL injection
• gcp-iam-troubleshooter - Advanced GCP IAM Troubleshooting Skill

  gcpiamtroubleshootingauthorization

  ★ 0 · Updated 2026-09-10

  Provides diagnostic playbooks for complex GCP authorization errors, token impersonation failures, and cross-project lookups.

  ⚙ Identify active GCP principal⚙ Audit service account IAM roles⚙ Diagnose token impersonation issues
• client-service-enablement - Client Service Enablement

  service-enablementorganizationauthorizationpostgresql

  ★ 1 · Updated 2026-09-10

  Reconciles an organization before enabling services, separates configuration from operational readiness, and preserves human authority.

  ⚙ Preview client service enablement⚙ Apply client service enablement⚙ Pause own service enablements
• backend-security-coder - Backend Security Coding Expert

  backend securityAPI securityauthenticationauthorization

  ★ 46,798 · Updated 2026-06-30

  Expert in secure backend coding practices focusing on input validation, authentication, and API security

  ⚙ review code for vulnerabilities⚙ validate user inputs⚙ sanitize data inputs
• security-baseline - Security Baseline Checklist

  securityauditcomplianceCSP

  ★ 1 · Updated 2026-05-09

  Run nine authoritative security checks covering CSP, OAuth, PKCE, JWKS, CSRF, MCP auth, URL redaction, and backtrace policy.

  ⚙ verify security headers⚙ check OAuth callback flow⚙ validate PKCE state storage
• dojo-world - Dojo World Permission and Access Management

  permissionsworld managementDojoaccess control

  ★ 8 · Updated 2026-03-26

  Manages permissions, namespaces, and access control for Dojo world resources

  ⚙ grant writer permission⚙ grant owner permission⚙ revoke writer permission
• controller-agent - Rails Controller Generator

  RailscontrollerRESTauthorization

  ★ 442 · Updated 2026-03-26

  Creates thin RESTful Rails controllers with tests and authorization

  ⚙ create controllers⚙ add actions⚙ implement CRUD
• laravel-security - Laravel Security Best Practices Guide

  securityweb-securitylaravelphp

  ★ 265,108 · Updated 2026-03-24

  Comprehensive Laravel security guidance covering authentication, validation, CSRF, file uploads, and secure deployment

  ⚙ configure authentication⚙ implement authorization⚙ validate user input
• auth:mlflow-oidc-auth - MLflow OIDC Authentication

  authenticationauthorizationmlflowoidc

  ★ 18 · Updated 2026-03-24

  Configure MLflow with mlflow-oidc-auth plugin for Keycloak OIDC authentication

  ⚙ configure MLflow server⚙ set up OIDC authentication⚙ connect PostgreSQL database
• auth:mlflow-oidc-auth - MLflow OIDC Authentication Setup

  authenticationOIDCMLflowKeycloak

  ★ 602 · Updated 2026-03-24

  Configure MLflow Tracking Server with Keycloak OIDC authentication using mlflow-oidc-auth plugin

  ⚙ configure MLflow authentication⚙ setup OIDC provider⚙ enable group authorization
• intent-sink - Intent Validation Endpoint

  intent validationexecution checkpointauthorizationsafety

  ★ 602 · Updated 2026-03-24

  Validates intents before execution

  ⚙ validate intent⚙ check intent structure⚙ check resource conservation
• security-patterns - Zero-Trust Security Patterns for Full Stack

  zero-trustauthenticationauthorizationencryption

  ★ 0 · Updated 2026-03-23

  Enforce zero-trust security across frontend and backend systems

  ⚙ store tokens in memory⚙ sanitize user input⚙ detect inactivity
• security-patterns - Zero-Trust Security Patterns for Apps

  securityauthenticationauthorizationXSS prevention

  ★ 57 · Updated 2026-03-23

  Enforce zero-trust security across frontend and backend applications

  ⚙ store tokens in memory⚙ prevent XSS attacks⚙ auto-logout on inactivity
• oauth21-token-endpoint - OAuth 2.1 Token Endpoint Implementation

  OAuth 2.1token endpointauthenticationsecurity

  ★ 0 · Updated 2026-03-23

  Implement OAuth 2.1 token endpoint with grant types, PKCE, CORS, and error handling

  ⚙ process token requests⚙ authenticate confidential clients⚙ issue access tokens

Scroll to load more