dapr-middleware-validator

Validate DAPR HTTP middleware configuration files by checking security settings, secret references, and handler pipeline order. This Skill inspects YAML files for HTTPS enforcement, correct secretKeyRef usage, and proper sequencing of routerchecker, ratelimit, bearer, OPA, and routeralias handlers to catch misconfigurations before deployment.

Middleware validation checks that OAuth2 and Bearer token configurations use secure HTTPS endpoints, properly reference secrets, and avoid plain-text credentials. It verifies secretKeyRef fields are correctly specified and detects insecure endpoint configurations that could expose credentials.

Middleware handler order affects request flow and security enforcement. The correct sequence—routerchecker, ratelimit, bearer, OPA, routeralias—ensures rate limiting runs before authentication, OPA policies enforce after identity is verified, and routing rules apply consistently without bypasses or conflicts.

Yes, this Skill validates OPA policy configurations by checking for default deny rules and correct policy syntax. It ensures policies are properly configured to fail securely and integrate correctly within the middleware pipeline.

Misconfigured rate limiting—such as incorrect handler sequencing or missing configuration references—may fail to enforce limits or bypass authentication checks. Validation detects ordering issues and configuration errors so rate limits apply consistently before downstream handlers.

No, this Skill automatically validates DAPR HTTP middleware YAML files when created or modified, checking security requirements, handler ordering, and OAuth2/Bearer/OPA configurations. Automated validation eliminates manual review and catches configuration errors early.