Configure security headers, CORS, rate limiting, and JWT authentication for FastAPI services.
npx skills add https://github.com/CybLow/pypaginate --skill sec-api
Please help me install this Agent Skill. Skill: sec-api Source: https://github.com/CybLow/pypaginate/tree/main/.opencode/skills/sec-api Command: npx skills add https://github.com/CybLow/pypaginate --skill sec-api
API security best practices to harden endpoints, manage access, and reduce exposure across services.
Implement the security headers middleware, configure CORS, and add JWT and API-key checks to secure your API endpoints.
High-intent search queries and answers about installing and using this skill.
To implement security headers like CSP and HSTS for a FastAPI application, apply a security headers middleware that injects Content-Security-Policy, Strict-Transport-Security, and X-Frame-Options into HTTP responses to harden endpoints.
The best way to configure CORS with a least-privilege allowlist for microservices is specifying strict origin allowlists in your framework configuration to manage cross-origin requests and reduce exposure across services.
You can set up Redis-backed rate limiting to prevent API abuse by configuring a rate limiting backend that tracks request counts per client identifier in Redis, blocking excessive requests before they reach endpoints.
Yes, this approach supports JWT authentication flows with access and refresh tokens. It guides implementations of JWT workflows to establish access controls and manage secure authentication for web services and microservices.
To harden a Dockerfile for API container security during deployment, apply container security configurations that restrict permissions and isolate the environment, reducing exposure across services.
You can use this security baseline with Starlette, as it applies to web services and microservices built with frameworks like FastAPI or Starlette, guiding implementations of authentication and rate limiting.
SlanyCukrServe Python ASGI applications with Uvicorn's production-ready server.
cenjieSecure REST APIs with authentication, rate limiting, CORS, and input validation.
salvo-rsAuthenticate and authorize Salvo apps with JWT, Basic Auth, API keys, sessions, and custom schemes.
AGIBuildConfigure ASP.NET Core Identity with roles, claims, and external providers.
