Enforce authentication, authorization, and input validation on API endpoints.
npx skills add https://github.com/gpaura/claude_plugins --skill api-protect
Please help me install this Agent Skill. Skill: api-protect Source: https://github.com/gpaura/claude_plugins/tree/main/skills/api-protect Command: npx skills add https://github.com/gpaura/claude_plugins --skill api-protect
This Skill secures API routes by implementing authentication, authorization, and input validation to prevent unauthorized access and data leakage.
Use the api-protect skill to scaffold a secure API route with authentication, RBAC checks, and input validation.
High-intent search queries and answers about installing and using this skill.
You can secure API endpoints with RBAC and JWT in Next.js by enforcing authentication, role-based authorization, and token validation. This approach protects CRUD routes and admin actions from unauthorized access and data leakage.
The best way to implement input validation for API routes is by using Zod to sanitize inputs and validate types. This prevents injection attacks by ensuring only properly formatted data reaches your backend logic.
Yes, this API security approach works with Supabase, Next.js, or custom backends. It applies token validation, resource ownership checks, rate limiting, and optional CORS handling to protect web application endpoints.
To add rate limiting and CORS handling to protected API endpoints, you enforce per-user and per-IP limits alongside proper cross-origin resource sharing configuration. This prevents abuse and secures your API routes.
Yes, API authentication and authorization support resource ownership checks. By enforcing RBAC and resource-level permissions, the system restricts access so users can only interact with data they explicitly own.
alti3Configure Litestar OpenAPI generation with title, version, and schema outputs.
ArabelaTsoAdd structured logging to authentication, authorization, and input-handling code paths.
RodrigoVeraCandiaGenerate Angular 19 authentication with login, guards, and JWT interceptors.
PatkikEnforce Laravel access control with Policies, Gates, and can middleware.
