Implement OAuth2, OpenID Connect, and JWT authentication for .NET APIs.
npx skills add https://github.com/I-Synergy/CLAUDE.MD --skill api-security-i-synergy
Please help me install this Agent Skill. Skill: api-security Source: https://github.com/I-Synergy/CLAUDE.MD/tree/main/.claude/skills/api-security Command: npx skills add https://github.com/I-Synergy/CLAUDE.MD --skill api-security-i-synergy
This Skill addresses the critical need to secure APIs against common vulnerabilities, ensuring data integrity, user privacy, and system resilience.
Secure the '/users/{id}' endpoint using policy-based authorization that requires the 'Admin' role.
High-intent search queries and answers about installing and using this skill.
To secure a REST API endpoint using JWT authentication, implement policy-based authorization requiring specific roles like 'Admin' for sensitive data access. This ensures only authenticated administrators can access protected resources via robust access control mechanisms.
OWASP API Top 10 vulnerabilities include injection attacks, broken access control, and security misconfigurations. Protect your .NET applications by implementing input validation, proper secrets management, and following security best practices and detailed security checklists.
Yes, this API security guidance supports implementing OAuth2 and OpenID Connect protocols in .NET applications. These robust authentication and authorization mechanisms ensure secure access control across your API endpoints.
The best way to manage secrets and validate input for API security involves implementing dedicated secrets management practices and strict input validation routines. This defends against injection attacks and prevents broken access control vulnerabilities.
Yes, you can implement policy-based authorization to restrict access to sensitive user data. By requiring specific roles such as 'Admin', you ensure that only authenticated administrators can access sensitive endpoints like '/users/{id}'.
Broken access control occurs when API authentication and authorization mechanisms are improperly configured or missing. Prevent it in your APIs by implementing robust JWT validation, policy-based role checks, and adhering to OWASP API security best practices.
congiulucImplement JWT authentication and RBAC for .NET Minimal API endpoints.
michaelalberReview .NET applications for OWASP Top 10 vulnerabilities and Telerik CVEs.
vertivolatamImplement API Gateways with Kong and Nginx rate limiting strategies.
salmanabdurrahmanAnalyze Android APK and AAB artifacts for security vulnerabilities.
