Secure Pikku applications with authentication, authorization, and middleware across transports.
npx skills add https://github.com/pikkujs/pikku --skill pikku-security
Please help me install this Agent Skill. Skill: pikku-security Source: https://github.com/pikkujs/pikku/tree/main/.claude/skills/pikku-security Command: npx skills add https://github.com/pikkujs/pikku --skill pikku-security
Pikku security provides authentication, authorization, and middleware capabilities across Pikku apps, enabling consistent and secure access control across transports.
Set up pikku-auth, permissions, and middleware in your wiring to enable authentication and authorization across transports.
High-intent search queries and answers about installing and using this skill.
Authentication and authorization for HTTP and WebSocket routes are added by applying pikkuAuth and pikkuMiddleware to your wirings, enabling consistent session handling and per-function access control across transports.
Managing API sessions with bearer tokens and cookies is handled through built-in security middlewares like authBearer and authCookie, which intercept requests to validate sessions and enforce access policies globally or inline.
Per-function permissions and permission groups are supported, allowing you to attach specific access control rules to individual functions and group permissions for scalable policy management across your application.
Yes, the security middleware works across CLI and queue transports, providing unified authentication, authorization, and session management rules that apply consistently regardless of the transport layer being used.
Scoping access control rules globally and at the tag level is achieved by applying pikkuPermission and pikkuMiddleware at global, prefix, or tag levels, or by defining inline per-wiring access control for granular governance.
Using API key middleware secures application access by validating unique keys through the authAPIKey middleware, providing a straightforward method to authenticate requests and enforce permissions before they reach your functions.
mkerchenskiDiagnose ASP.NET Core hosting, middleware ordering, configuration, and security patterns.
cyoteeConfigure Wagmi HTTP and WebSocket transports for Ethereum networks.
serkan-ozalMock API responses and intercept HTTP requests in browser automation.
akourmazImplement role-based access control with hierarchical permissions and scoped access.
