skills.rest
jangtrinh
jangtrinhCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

ck:backend-development

Design REST, GraphQL, and gRPC APIs with OAuth 2.1 and JWT security.

Updated Apr 9, 2026
Search Tags:#api design#jwt#owasp#backend#rbac#performance tuning#oauth 2.1
One-click install
npx skills add https://github.com/jangtrinh/demo-Lam --skill ck-backend-development-jangtrinh
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ck:backend-development
Source: https://github.com/jangtrinh/demo-Lam/tree/main/.claude/skills/backend-development
Command: npx skills add https://github.com/jangtrinh/demo-Lam --skill ck-backend-development-jangtrinh

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Back-end developers need reliable guidance to design and implement APIs, authentication, databases, and deployment with strong security and operational practices.

Core Features & Use Cases

  • API design support: REST, GraphQL, and gRPC patterns including status codes, pagination, versioning, and error handling.
  • Authentication & security hardening: OAuth 2.1 with PKCE, JWT validation, RBAC, MFA, OWASP Top 10 mitigations, and secure defaults (e.g., Argon2id, rate limiting).
  • Scalability, performance, and operations: caching, connection pooling, load balancing, observability (logs/metrics/traces), testing strategy, and production debugging/CI-CD.

Use cases include implementing an OAuth+JWT auth system, designing consistent API contracts for a new service, and improving a slow/unstable backend with profiling, caching, and safe deployment practices.

Quick Start

Ask for a production-ready backend plan for a REST API with OAuth 2.1 + JWT authentication, RBAC authorization, PostgreSQL schema design, and OWASP-aligned security and testing requirements.

Frequently Asked Questions about ck:backend-development

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design a secure REST API with OAuth 2.1 and JWT authentication?▼

You design a secure REST API by implementing OAuth 2.1 with PKCE and validating JWT tokens. This approach builds production-ready backends with RBAC authorization and OWASP Top 10 mitigations for robust access control.

What is the best way to improve backend performance and scalability for microservices?▼

The best way to improve backend performance is by applying caching, connection pooling, and load balancing. This optimizes microservices through observability metrics and profiling to stabilize slow or unstable backend systems.

How do I implement RBAC authorization and OWASP Top 10 mitigations in a backend?▼

You implement RBAC authorization and OWASP mitigations by applying secure defaults like Argon2id and rate limiting. This hardens backend security against vulnerabilities while maintaining robust access control.

Does this backend development approach support both monolith and microservices architectures?▼

Yes, this backend development approach supports both monolith and microservices architectures. It applies API contract design, operational practices, and production debugging uniformly across either structural pattern.

How do I structure database schemas and testing strategies for a new API service?▼

You structure database schemas and testing strategies by designing consistent API contracts with operational practices. This includes PostgreSQL schema design and verification via tests and observability for safe deployment.

What API design patterns are supported for building production-ready backends?▼

Supported API design patterns for production-ready backends include REST, GraphQL, and gRPC. These patterns encompass standard status codes, pagination, versioning, and consistent error handling for robust service contracts.

Related Skills

Explore More Software Engineering Skills→
gaebalaigaebalai
8

kiro-spec-init

Generate unique feature names and initialize specification files from project descriptions.

Community
Basic
joelhooksjoelhooks
22

cloudflare-deploy

Deploy Cloudflare Workers and Pages via wrangler with authentication and domain setup.

Community
Advanced
peppone-choipeppone-choi

verify-api-parity

Validate frontend API client methods against backend controller endpoints.

Community
Advanced
xoaixoai
25

baas

Correct BaaS architectural mistakes in Firebase and Supabase apps.

Community
Advanced