bap-identity

Manage BAP identity backups with AES-256-GCM encrypted .bep files.

14|5|Updated Jun 3, 2025
One-click install
npx skills add https://github.com/b-open-io/prompts --skill bap-identity
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: bap-identity
Source: https://github.com/b-open-io/prompts/tree/main/user/.claude/skills/bap-identity
Command: npx skills add https://github.com/b-open-io/prompts --skill bap-identity

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides end-to-end management of BAP identity backups using bap-cli and bbackup. It enables creating, listing, extracting member identities, encrypting/decrypting JSON backups, and generating test fixtures for automated Playwright tests involving BAP identities. It reduces manual handling and errors when dealing with encrypted backups.

Core Features & Use Cases

  • Identity Management: create, list, and extract identities from BAP backups.
  • Backup Encryption/Decryption: encrypt and decrypt JSON payloads to .bep format.
  • Test Fixtures: generate test data for automated testing of identity-driven apps.

Quick Start

Example:

  • Create a new Type42 backup: bap new --type type42 --password <password> --name "<name>" --output <file.bep>
  • List identities: bap list <backup.bep> --password <password>
  • Extract a member identity: bap member <backup.bep> --password <password> --index 0 --output member.bep

Frequently Asked Questions about bap-identity

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create and encrypt a BAP identity backup?

Create encrypted BAP identity backups using bap-cli with the `bap new` command, specifying backup type (Type42 or Legacy), password, identity name, and output file. The Skill encrypts the backup with AES-256-GCM using PBKDF2-SHA256 and 600,000 iterations, outputting a .bep file.

Can I decrypt and extract member identities from a .bep backup file?

Yes. Use `bap list` to view all identities in a .bep backup, then `bap member` with a password and index to extract individual member identities. Both commands decrypt the backup on demand without modifying the original file.

What encryption method does bap-cli use for identity backups?

BAP identity backups use password-based AES-256-GCM encryption with PBKDF2-SHA256 key derivation and 600,000 iterations. This enforces strong encryption strength and prevents downgrade attacks when upgrading backups.

How do I generate test fixtures for Playwright tests with BAP identities?

Create encrypted .bep backups containing test identities using bap-cli commands, then reference them in Playwright test setup. The Skill supports exporting decrypted JSON payloads via the `dec` command for fixture generation and test automation workflows.

Does bap-cli support upgrading encryption on existing backups?

Yes. Use the `bap upg` command to upgrade encryption strength on existing Type42 and Legacy backups. The Skill re-encrypts the backup with the latest AES-256-GCM settings while preserving all member identities.

Can I convert JSON backups to encrypted .bep format?

Yes. The `bap enc` command encrypts JSON backup payloads into .bep format using your specified password and AES-256-GCM encryption. Decryption is handled by the `dec` command to retrieve original JSON.