litestar-security

Configure JWT authentication in Litestar by integrating JWTAuth backends to validate tokens and enforce deterministic 401 responses for unauthorized access. This Skill provides structured patterns for setting up backends with defense-in-depth across REST and WebSocket endpoints.

Implement route-level authorization guards in Litestar by applying configurable guard rules with endpoint inclusion and exclusion patterns to protect sensitive routes. This enforces deterministic 403 responses for forbidden access attempts across REST and WebSocket endpoints.

Yes, Litestar supports securing both REST and WebSocket endpoints using configurable authentication backends like SessionAuth and JWTAuth. This Skill integrates these backends to enforce consistent security contracts and deterministic 401 or 403 responses across services.

Handle API secrets in Litestar using SecretString and SecretBytes types to prevent credential leaking in logs or responses. This Skill provides safe secret management patterns integrated with built-in authentication backends to maintain defense-in-depth.

Exclude specific public endpoints from authentication in Litestar by configuring endpoint inclusion and exclusion rules within your security backend. This allows precise protection of sensitive routes while keeping public routes accessible without token validation.