auth-module-architecture

Defines Auth module architecture with IAM integration and RBAC permission modeling for BK-CI Kotlin/Spring services.

2.5k|521|Updated May 29, 2019

Ready to run

npx skills add https://github.com/TencentBlueKing/bk-ci --skill auth-module-architecture

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: auth-module-architecture
Source: https://github.com/TencentBlueKing/bk-ci/tree/main/ai/skills/auth-module-architecture
Command: npx skills add https://github.com/TencentBlueKing/bk-ci --skill auth-module-architecture

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Auth 权限认证模块架构指南为 BK-CI 提供一个可扩展的鉴权架构蓝图，聚焦 IAM 集成、RBAC 权限模型以及资源权限校验，帮助开发者在实现权限功能、配置 IAM 资源、执行权限迁移与处理认证流程时快速对齐架构设计。

Core Features & Use Cases

RBAC-driven authorization design: 定义角色、组与权限，以在 BK-CI 组件间实施一致的访问控制。
IAM integration patterns: 概述如何将 BK-CI 与 IAM 对接，实现策略评估与用户管理。
OAuth and migration guidance: 提供 OAuth2 流程与权限迁移策略，支持模块演进中的兼容性。
Use Case: 在新增需要访问控制的功能时，遵循本架构实现一致的认证与授权。

Quick Start

Instantiate a sample RBAC/IAM integration in BK-CI Auth module and verify OAuth2 flow using the described architecture.

Frequently Asked Questions about auth-module-architecture

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I design an RBAC permission model for BK-CI backend services?▼

To implement RBAC authorization in BK-CI, define roles, groups, and permissions to enforce consistent access control across components. This architecture provides modular subcomponents and data models for scalable permission management.

How does IAM integration work with BK-CI for policy evaluation?▼

IAM integration with BK-CI works by connecting BK-CI to IAM SDK primitives for policy evaluation and user management. The architecture outlines specific patterns to interface with IAM, enabling secure strategy evaluation across deployments.

Can I use this architecture to migrate authentication flows in Kotlin/Spring services?▼

Yes, you can use this architecture to migrate authentication flows in Kotlin/Spring services. It provides OAuth2 flow guidance and permission migration strategies to support compatibility during module evolution.

What is the best way to implement OAuth2 flow in a BK-CI Auth module?▼

The best way to implement OAuth2 flow in a BK-CI Auth module is to follow the described scalable architecture blueprint. Instantiate a sample RBAC/IAM integration and verify the OAuth2 flow using the modular API surfaces.

When do I need to follow this Auth module architecture blueprint?▼

You need to follow this Auth module architecture blueprint when adding new features requiring access control or configuring IAM resources in BK-CI. It ensures rapid alignment with secure, scalable permission management practices.