Implement OAuth 2.0 flows and JWT standards for secure API design.
npx skills add https://github.com/MayaDispeler/TheOrqestra --skill api-security-mayadispeler
Please help me install this Agent Skill. Skill: api-security Source: https://github.com/MayaDispeler/TheOrqestra/tree/main/skills/api-security Command: npx skills add https://github.com/MayaDispeler/TheOrqestra --skill api-security-mayadispeler
This Skill provides comprehensive guidelines and best practices for secure API design and implementation, addressing common security vulnerabilities and ensuring the protection of sensitive data.
Review the guidelines for securing your API and apply best practices to ensure compliance with industry standards.
High-intent search queries and answers about installing and using this skill.
Secure OAuth 2.0 flows by following established decision rules and mental models like the Authorization Code pattern. This prevents common vulnerabilities by ensuring correct token issuance and validation.
Best practices for JWT standards involve applying zero-trust principles and comparing good versus bad implementation outputs. This protects APIs by ensuring tokens are properly signed, validated, and managed throughout their lifecycle.
Rate limiting protects APIs by restricting excessive requests, functioning as a Defense in Depth mechanism. It enforces non-negotiable security standards to prevent abuse, throttling traffic before it triggers downstream vulnerabilities.
Correct API key management requires enforcing the full key lifecycle and zero-trust principles. This secures sensitive data by ensuring keys are properly generated, distributed, rotated, and revoked against insecure practices.
Common API security mistakes often involve improper Bearer Token handling and weak Defense in Depth strategies. Avoid them by reviewing guidelines that contrast secure versus insecure implementation practices and applying vocabulary definitions.
alexsandrocruzConfigure OpenIddict OAuth 2.0 authentication and authorization in ABP applications.
dapperdiversScan web applications for vulnerabilities using nuclei and nikto.
AgentiveCityConfigure WAF rules, rate limiting, IP lists, and secure headers for Cloudflare Workers APIs.
ftnilssonImplement token-based authentication and RBAC access control for backend systems.
