/JwtSecurityAudit
Evaluates JSON Web Token implementation against signature bypass, 'none' algorithm exploitation, weak symmetric secrets, missing expiration, and storage risks.
Backend & APIs🔴 Advanced#jwt#auth
Auth
25 commands
/AuthenticateCircuitBreaker
Add a robust authentication flow to a circuit-breaker pattern implementation — e.g. a service calling a flaky downstream dependency.
Backend & APIs🟢 Beginner#circuitbreaker#resilience
/AuthorizeThirdPartyIntegration
Add fine-grained permission checks to a third-party api integration — e.g. an integration that fails when the vendor api is slow.
Backend & APIs🟢 Beginner#integration#external
/AuthenticateBackgroundJobQueue
Add a robust authentication flow to a background job queue — e.g. a job queue that silently drops failed jobs.
Backend & APIs🟢 Beginner#queue#jobs
/AuthorizePermissionsModel
Add fine-grained permission checks to a permissions and roles model — e.g. an app with only admin and user roles.
Backend & APIs🟢 Beginner#permissions#rbac
/AuthenticateJWTHandling
Add a robust authentication flow to jwt token handling — e.g. an api issuing jwts with no expiry.
Backend & APIs🟢 Beginner#jwt#tokens
/AuthorizeRateLimitedService
Add fine-grained permission checks to a service under load — e.g. a checkout service that falls over on flash sales.
Backend & APIs🟢 Beginner#load#reliability
/AuthenticateSessionStore
Add a robust authentication flow to a user session store — e.g. a session store with no expiry or invalidation.
Backend & APIs🟢 Beginner#sessions#auth
/AuthorizeApiGateway
Add fine-grained permission checks to an api gateway — e.g. a gateway routing to five backend services.
Backend & APIs🟢 Beginner#gateway#routing
/AuthenticatePasswordReset
Add a robust authentication flow to a password reset flow — e.g. a reset flow using guessable tokens.
Backend & APIs🟢 Beginner#password#reset
/AuthorizeLoginFlow
Add fine-grained permission checks to a user login flow — e.g. a login flow storing passwords in plain text.
Backend & APIs🟢 Beginner#login#auth
/AuthorizeSecretsManagement
Add fine-grained permission checks to application secrets management — e.g. a repo with api keys committed to git history.
Backend & APIs🟢 Beginner#secrets#config
/AuthenticateThirdPartyIntegration
Add a robust authentication flow to a third-party api integration — e.g. an integration that fails when the vendor api is slow.
Backend & APIs🟢 Beginner#integration#external
/AuthorizePaymentService
Add fine-grained permission checks to a payment processing service — e.g. a service storing raw card numbers.
Backend & APIs🟢 Beginner#payments#pci
/AuthenticatePermissionsModel
Add a robust authentication flow to a permissions and roles model — e.g. an app with only admin and user roles.
Backend & APIs🟢 Beginner#permissions#rbac
/AuthorizeCircuitBreaker
Add fine-grained permission checks to a circuit-breaker pattern implementation — e.g. a service calling a flaky downstream dependency.
Backend & APIs🟢 Beginner#circuitbreaker#resilience
/AuthenticateRateLimitedService
Add a robust authentication flow to a service under load — e.g. a checkout service that falls over on flash sales.
Backend & APIs🟢 Beginner#load#reliability
/AuthorizeBackgroundJobQueue
Add fine-grained permission checks to a background job queue — e.g. a job queue that silently drops failed jobs.
Backend & APIs🟢 Beginner#queue#jobs
/AuthenticateApiGateway
Add a robust authentication flow to an api gateway — e.g. a gateway routing to five backend services.
Backend & APIs🟢 Beginner#gateway#routing
/AuthorizeJWTHandling
Add fine-grained permission checks to jwt token handling — e.g. an api issuing jwts with no expiry.
Backend & APIs🟢 Beginner#jwt#tokens
/AuthenticateLoginFlow
Add a robust authentication flow to a user login flow — e.g. a login flow storing passwords in plain text.
Backend & APIs🟢 Beginner#login#auth
/AuthorizeSessionStore
Add fine-grained permission checks to a user session store — e.g. a session store with no expiry or invalidation.
Backend & APIs🟢 Beginner#sessions#auth
/AuthenticateSecretsManagement
Add a robust authentication flow to application secrets management — e.g. a repo with api keys committed to git history.
Backend & APIs🟢 Beginner#secrets#config
/AuthorizePasswordReset
Add fine-grained permission checks to a password reset flow — e.g. a reset flow using guessable tokens.
Backend & APIs🟢 Beginner#password#reset
/AuthenticatePaymentService
Add a robust authentication flow to a payment processing service — e.g. a service storing raw card numbers.
Backend & APIs🟢 Beginner#payments#pci