skills.rest
filiptrivan
filiptrivanCOMMUNITY
Explore all skills by this author →
𝕏@filiptrivanGitHub

authorization

Define user, role, and permission contracts for Spiderly authorization.

61|24|Updated Sep 14, 2024
Search Tags:#authorization#security#permissions#rbac#dotnet#google-oauth#frontend-guards
One-click install
npx skills add https://github.com/filiptrivan/spiderly --skill authorization-filiptrivan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: authorization
Source: https://github.com/filiptrivan/spiderly/tree/main/claude-plugins/skills/authorization
Command: npx skills add https://github.com/filiptrivan/spiderly --skill authorization-filiptrivan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Sets up permission-based authorization in Spiderly projects, providing contracts for User, Role, and Permission entities and ready-made patterns for seeding permissions, protecting endpoints with AuthGuard, and integrating Google OAuth.

Core Features & Use Cases

  • Defines IUser, IRole, and IPermission interfaces to model access control.
  • Provides permission code conventions and seeding patterns for initial admin roles.
  • Supports DoNotAuthorize to expose public lookup tables and AuthGuard to protect endpoints.
  • Offers generated authorization service hooks and guidance for checking permissions in custom code.
  • Supports frontend guards and Google OAuth flow integration.

Quick Start

Define the IUser, IRole, and IPermission interfaces in your domain layer and enable AuthGuard on protected endpoints to bootstrap authorization.

Frequently Asked Questions about authorization

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up role-based access control in a Spiderly project?▼

Role-based access control in a Spiderly project is set up by defining IUser, IRole, and IPermission interfaces in your domain layer and applying the AuthGuard attribute to protect endpoints.

How do I make specific API endpoints public while securing others with permissions?▼

You make specific API endpoints public while securing others by using the DoNotAuthorize attribute to expose public lookup tables and applying the AuthGuard attribute to protect sensitive endpoints.

Can I integrate Google OAuth with role-based permissions in my .NET application?▼

Yes, you can integrate Google OAuth with role-based permissions in your .NET application; the authorization setup supports the Google OAuth flow alongside user, role, and permission contracts.

What is the best way to seed initial admin roles and permission codes?▼

The best way to seed initial admin roles and permission codes is using the provided permission code conventions and seeding patterns to establish baseline administrative access.

Does this authorization approach support frontend guards for protecting UI routes?▼

Yes, this authorization approach supports frontend guards for protecting UI routes by providing integration points for frontend security alongside backend services and API controllers.

Related Skills

Explore More Software Engineering Skills→
yeeehaoooyeeehaooo

create-domain-aggregate

Generate DDD Aggregate Root structures with repository interfaces and domain events for .NET.

Community
Advanced
fpindejfpindej
230

add-permission

Add permission constants to C# and TypeScript files for authorization rules.

Community
Intermediate
filiptrivanfiliptrivan
61

custom-endpoints

Add custom non-CRUD endpoints to Spiderly controllers with DI wiring.

Community
Intermediate
SparkymodSparkymod
1

permission-model

Enforce role-based access control with `[MustHavePermission]` on endpoint handlers.

Community
Intermediate