n8n:protect-endpoints

Name: n8n:protect-endpoints
Availability: InStock
Author: rub-git

Enforce role-based access control on RESTful endpoints with access scope decorators.

Updated Jul 3, 2026

Search Tags:#REST #access control #middleware #RBAC #endpoint security

Ready to run

npx skills add https://github.com/Rub-git/n8n-auto --skill n8n-protect-endpoints

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: n8n:protect-endpoints
Source: https://github.com/Rub-git/n8n-auto/tree/main/.agents/skills/protect-endpoints
Command: npx skills add https://github.com/Rub-git/n8n-auto --skill n8n-protect-endpoints

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill ensures that all authenticated REST endpoints adhere to Role-Based Access Control (RBAC) principles, thereby securing your application against IDOR/permission bypass vulnerabilities.

Core Features & Use Cases

RBAC Enforcement: Applies access-scope decorators to REST endpoints, requiring proper authorization for each request.
Decorator Usage: Guide on how to add decorators to new or existing controllers and routes.
Scoping Logic: Determines the appropriate access scope based on the URL's project context or global scope.
Implementation Guidelines: Instructions on adding new resource operations and roles, as well as frontend integration steps.

Quick Start

Add the @ProjectScope decorator to the relevant routes of your controller to enforce access control.

Frequently Asked Questions about n8n:protect-endpoints

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I enforce RBAC on REST API endpoints to prevent permission bypass vulnerabilities?▼

You can enforce role-based access control on REST API endpoints by applying access scope decorators to controllers and routes, requiring proper authorization for each request to prevent IDOR and permission bypass vulnerabilities.

What's the best way to secure REST endpoints against IDOR vulnerabilities in a service architecture?▼

Securing REST endpoints against IDOR vulnerabilities is best achieved by applying RBAC access scope decorators to routes, ensuring all authenticated endpoints require proper authorization based on project context or global scope.

How do I add access scope decorators to existing controllers and routes?▼

To add access control to existing controllers and routes, apply the @ProjectScope decorator to the relevant routes of your controller to enforce RBAC authorization checks for each request.

Do I need middleware to resolve access scopes for RBAC decorators?▼

Yes, implementing role-based access control with decorators requires middleware for scope resolution to determine the appropriate access scope based on the URL's project context or global scope.

Can I use RBAC scope decorators to add new resource operations and roles?▼

Yes, RBAC scope decorators support adding new resource operations and roles, with implementation guidelines covering decorator usage on new or existing controllers and routes, as well as frontend integration steps.