hadrian-openapi-authz

To generate Hadrian auth.yaml and roles.yaml from an OpenAPI spec, provide your API specification to the skill. It outputs separate RBAC scaffolding files, placing credentials in auth.yaml and roles in roles.yaml for automated authorization checks.

BOLA testing identifies Broken Object Level Authorization vulnerabilities. API specs support it by providing endpoint parameters and object mappings, which this skill uses to infer owner_field details and generate role mappings for targeted authorization checks.

Yes, you can use GraphQL SDL to create RBAC scaffolding. The skill processes GraphQL SDL alongside REST OpenAPI and gRPC proto inputs to generate Hadrian-ready auth.yaml and roles.yaml files for security testing.

To separate credentials and roles when testing API authorization, use this skill to generate distinct auth.yaml and roles.yaml files. This ensures separation of concerns by isolating credentials in auth.yaml and role mappings in roles.yaml.

Yes, gRPC proto works for generating role mappings and authorization checks. The skill accepts gRPC proto definitions to infer object mappings and produce Hadrian-ready templates, validating owner_field on parameterized endpoints.