skills.rest
vaadin-developer
vaadin-developerOFFICIAL
Explore all skills by this author →
GitHub

jsentinel-rest-hardening

Harden jsentinel-rest APIs with Argon2id hashing, HIBP checks, and session drift detection.

2|Updated Jul 7, 2019
Search Tags:#api#rest#session management#password security#security features
One-click install
npx skills add https://github.com/vaadin-developer/security-for-flow --skill jsentinel-rest-hardening
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: jsentinel-rest-hardening
Source: https://github.com/vaadin-developer/security-for-flow/tree/main/docs/skills/claude/jsentinel-rest-hardening
Command: npx skills add https://github.com/vaadin-developer/security-for-flow --skill jsentinel-rest-hardening

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires jSentinel-crypto-bc, jSentinel-credentials-hibp, and includes scripts (resource) components.

What problem does it solve?

The Skill provides robust production-ready enhancements to a REST service built on the jsentinel-rest framework, addressing security, privacy, and compliance concerns.

Core Features & Use Cases

  • Modern Password Hashing: Implements Argon2id, the modern standard for password hashing.
  • HIBP Password Leak Check: Optional feature that verifies user credentials against the Have I Been Pwnd database.
  • Drift Detection: Ensures that revoking a role immediately forces a user to re-authenticate, maintaining session integrity.
  • Use Case: A company upgrades their REST API for added security, incorporating these features to enforce best practices for their customer's sensitive data handling.

Quick Start

Add this skill to enhance the REST security features of your application. Ensure HIBP check is enabled with the slot {{HIBP_ENABLED}}. Verify production-readiness after application startup.

Frequently Asked Questions about jsentinel-rest-hardening

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce immediate session invalidation after role revocation in a REST API?▼

To enforce immediate session invalidation after role revocation, you implement session drift detection. Using a filter like RestJSentinelVersionFilter ensures users are forced to re-authenticate immediately when a role is revoked, preventing unauthorized access.

What is the best way to implement modern password hashing for a REST API?▼

The best way to implement modern password hashing for a REST API is using Argon2id. Argon2id is the current standard for password hashing, providing robust production-ready security for sensitive customer data.

Can I check user credentials against the Have I Been Pwned database during REST API authentication?▼

Yes, you can check user credentials against the Have I Been Pwned database during REST API authentication. This optional HIBP password leak check enhances security by verifying if user passwords have been exposed in known data breaches.

Does the jsentinel-rest framework require additional dependencies for REST API hardening?▼

Yes, REST API hardening for the jsentinel-rest framework requires additional dependencies. It relies on jSentinel-crypto-bc for cryptographic operations and jSentinel-credentials-hibp for performing the Have I Been Pwned credential checks.

How do I enable the HIBP password leak check in my REST application?▼

To enable the HIBP password leak check in your REST application, you must configure the slot designated as HIBP_ENABLED. After adding this skill, verify production-readiness and ensure the slot is properly set during application startup.

Related Skills

Explore More Software Engineering Skills→
vaadin-developervaadin-developer
2

jsentinel-standalone-hardening

Harden jsentinel-standalone CLI applications with Argon2id hashing, HIBP checks, and drift detection.

Official
Advanced
pwv-vcpwv-vc
6

aws-logs-query

Query AWS CloudWatch logs for staging and production environments.

Official
Intermediate
vaadin-developervaadin-developer
2

jsentinel-rest

Integrate jSentinel authentication and authorization into JDK-HttpServer REST applications.

Official
Intermediate
vaadin-developervaadin-developer
2

jsentinel-vaadin-hardening

Integrate Argon2id hashing, HIBP leak checks, and session drift detection into Vaadin applications.

Official
Advanced