authorization

Define user, role, and permission contracts for Spiderly authorization.

61|24|Updated Sep 14, 2024

Search Tags:#authorization #security #permissions #rbac #dotnet #google-oauth #frontend-guards

Ready to run

npx skills add https://github.com/filiptrivan/spiderly --skill authorization-filiptrivan

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: authorization
Source: https://github.com/filiptrivan/spiderly/tree/main/claude-plugins/skills/authorization
Command: npx skills add https://github.com/filiptrivan/spiderly --skill authorization-filiptrivan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Sets up permission-based authorization in Spiderly projects, providing contracts for User, Role, and Permission entities and ready-made patterns for seeding permissions, protecting endpoints with AuthGuard, and integrating Google OAuth.

Core Features & Use Cases

Defines IUser, IRole, and IPermission interfaces to model access control.
Provides permission code conventions and seeding patterns for initial admin roles.
Supports DoNotAuthorize to expose public lookup tables and AuthGuard to protect endpoints.
Offers generated authorization service hooks and guidance for checking permissions in custom code.
Supports frontend guards and Google OAuth flow integration.

Quick Start

Define the IUser, IRole, and IPermission interfaces in your domain layer and enable AuthGuard on protected endpoints to bootstrap authorization.

Frequently Asked Questions about authorization

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I set up role-based access control in a Spiderly project?▼

Role-based access control in a Spiderly project is set up by defining IUser, IRole, and IPermission interfaces in your domain layer and applying the AuthGuard attribute to protect endpoints.

How do I make specific API endpoints public while securing others with permissions?▼

You make specific API endpoints public while securing others by using the DoNotAuthorize attribute to expose public lookup tables and applying the AuthGuard attribute to protect sensitive endpoints.

Can I integrate Google OAuth with role-based permissions in my .NET application?▼

Yes, you can integrate Google OAuth with role-based permissions in your .NET application; the authorization setup supports the Google OAuth flow alongside user, role, and permission contracts.

What is the best way to seed initial admin roles and permission codes?▼

The best way to seed initial admin roles and permission codes is using the provided permission code conventions and seeding patterns to establish baseline administrative access.

Does this authorization approach support frontend guards for protecting UI routes?▼

Yes, this authorization approach supports frontend guards for protecting UI routes by providing integration points for frontend security alongside backend services and API controllers.