skills.rest
Rub-git
Rub-gitCOMMUNITY
Explore all skills by this author →
GitHub

n8n:protect-endpoints

Enforce role-based access control on RESTful endpoints with access scope decorators.

Updated Jul 3, 2026
Search Tags:#REST#access control#middleware#RBAC#endpoint security
One-click install
npx skills add https://github.com/Rub-git/n8n-auto --skill n8n-protect-endpoints
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: n8n:protect-endpoints
Source: https://github.com/Rub-git/n8n-auto/tree/main/.agents/skills/protect-endpoints
Command: npx skills add https://github.com/Rub-git/n8n-auto --skill n8n-protect-endpoints

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill ensures that all authenticated REST endpoints adhere to Role-Based Access Control (RBAC) principles, thereby securing your application against IDOR/permission bypass vulnerabilities.

Core Features & Use Cases

  • RBAC Enforcement: Applies access-scope decorators to REST endpoints, requiring proper authorization for each request.
  • Decorator Usage: Guide on how to add decorators to new or existing controllers and routes.
  • Scoping Logic: Determines the appropriate access scope based on the URL's project context or global scope.
  • Implementation Guidelines: Instructions on adding new resource operations and roles, as well as frontend integration steps.

Quick Start

Add the @ProjectScope decorator to the relevant routes of your controller to enforce access control.

Frequently Asked Questions about n8n:protect-endpoints

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce RBAC on REST API endpoints to prevent permission bypass vulnerabilities?▼

You can enforce role-based access control on REST API endpoints by applying access scope decorators to controllers and routes, requiring proper authorization for each request to prevent IDOR and permission bypass vulnerabilities.

What's the best way to secure REST endpoints against IDOR vulnerabilities in a service architecture?▼

Securing REST endpoints against IDOR vulnerabilities is best achieved by applying RBAC access scope decorators to routes, ensuring all authenticated endpoints require proper authorization based on project context or global scope.

How do I add access scope decorators to existing controllers and routes?▼

To add access control to existing controllers and routes, apply the @ProjectScope decorator to the relevant routes of your controller to enforce RBAC authorization checks for each request.

Do I need middleware to resolve access scopes for RBAC decorators?▼

Yes, implementing role-based access control with decorators requires middleware for scope resolution to determine the appropriate access scope based on the URL's project context or global scope.

Can I use RBAC scope decorators to add new resource operations and roles?▼

Yes, RBAC scope decorators support adding new resource operations and roles, with implementation guidelines covering decorator usage on new or existing controllers and routes, as well as frontend integration steps.

Related Skills

Explore More Software Engineering Skills→
getsentrygetsentry
56

wrdn-authz

Trace authorization paths to report permission boundary bypasses.

Official
Advanced
antgroupantgroup
34

pentest-access-control

Identifies and validates web/API authorization vulnerabilities including RBAC bypass and privilege escalation.

Official
Advanced
kojderkojder
2

spring-boot-backend

Generate a secure Spring Boot 3 backend with Java 17 for a Photo Map MVP.

Community
Advanced
MolcajeteAIMolcajeteAI
2

authorization-patterns

Implement RBAC and ABAC authorization patterns with TypeScript and Fastify.

Official
Advanced