api-authentication

API authentication middleware secures endpoints by validating Bearer Tokens (JWT) and API Keys. This Skill implements both methods, intercepting requests to verify credentials before granting access to protected resources.

Secure API key management involves generating, validating, rotating, and revoking credentials via a dedicated API. This Skill provides patterns for a self-service portal, allowing users to manage their own keys with specific read and write scopes.

Sliding window rate limiting prevents API abuse by tracking requests over a rolling time frame rather than fixed intervals. This Skill enforces this approach with configurable tiers, throttling clients who exceed their designated request limits.

Yes, API rate limiting supports configurable client tiers. This Skill enforces a sliding window approach that applies distinct request limits based on the assigned tier, protecting APIs from denial-of-service attacks and abuse.

Yes, implementing Bearer Token authentication requires the jwt-management dependency. This Skill integrates JWT validation within its middleware, relying on that prerequisite to handle token signing and verification securely.