Implements RBAC security for .NET applications via WASM and Blazor Server.
npx skills add https://github.com/kashiash/xaf-skills --skill xaf-security
Please help me install this Agent Skill. Skill: xaf-security Source: https://github.com/kashiash/xaf-skills/tree/main/xaf-security Command: npx skills add https://github.com/kashiash/xaf-skills --skill xaf-security
XAF Security System provides role-based access control (RBAC) for DevExpress XAF apps, unifying authentication, authorization, and data-level permissions to prevent unauthorized access.
Configure Security in your XAF app by wiring up SecurityStrategyComplex, authentication, and roles as shown in examples, and seed an initial admin user.
High-intent search queries and answers about installing and using this skill.
You can secure XAF apps by wiring up SecurityStrategyComplex with authentication methods and defining roles that contain TypePermission, ObjectPermission, and MemberPermission rules for granular data access.
XAF security supports JWT Web API integration alongside Standard, ActiveDirectory, and OAuth2 authentication types, enabling token-based authorization for secure REST API endpoints.
Both EF Core and XPO data layers support object- and member-level permissions through SecurityStrategyComplex, enabling programmatic permission checks and custom permission-setting helpers for granular data access.
Use Updater-based seed data in XAF security to programmatically create an initial administrator user with custom ApplicationUser and ApplicationRole classes, assigning full permissions during application initialization.
SecurityStrategyComplex unifies authentication and RBAC enforcement in XAF, applying object- and member-level permissions, while standard authentication only validates identity without granular data-level access control.
DevExpressConfigure DevExpress XAF Security System authentication, roles, and audit trails.
ikenibornImplement JWT-based authentication, Telegram OAuth, and security middleware for REST APIs.
kashiashAutomate WinForms UI customization for DevExpress XAF applications across editors, layout, navigation, and deployment scenarios.
jpoutrinImplement OAuth 2.0 and OpenID Connect authorization code flows with PKCE.
