n8n:protect-endpoints

What problem does it solve?

This Skill ensures that all authenticated REST endpoints adhere to Role-Based Access Control (RBAC) principles, thereby securing your application against IDOR/permission bypass vulnerabilities.

Core Features & Use Cases

• RBAC Enforcement: Applies access-scope decorators to REST endpoints, requiring proper authorization for each request.
• Decorator Usage: Guide on how to add decorators to new or existing controllers and routes.
• Scoping Logic: Determines the appropriate access scope based on the URL's project context or global scope.
• Implementation Guidelines: Instructions on adding new resource operations and roles, as well as frontend integration steps.

Quick Start

Add the @ProjectScope decorator to the relevant routes of your controller to enforce access control.