'auth' 검색 결과

Implement authentication and authorization with OWASP Top 10 standards, OAuth 2.0 + OIDC, WebAuthn/Passkeys, session management, and RBAC/ABAC. Use when user asks to implement login, signup, authentication, authorization, JWT, OAuth, SSO, passkeys, MFA, or role-based access. Do NOT use for API key management (use api-forge), encryption at rest, or network-level security (firewalls, WAF).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Authentication patterns: session vs JWT vs OAuth comparison, provider selection (NextAuth, Clerk, Supabase Auth), security checklist, and common mistakes. Use when implementing auth, reviewing auth flows, or choosing auth providers.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Tests API authentication mechanisms for weaknesses including broken token validation, missing authentication on endpoints, weak password policies, credential stuffing susceptibility, token leakage in URLs or logs, and session management flaws. The tester evaluates JWT implementation, API key handling, OAuth flows, and session token entropy to identify authentication bypasses. Maps to OWASP API2:2023 Broken Authentication. Activates for requests involving API authentication testing, token vali...

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Better Auth (TypeScript 認証フレームワーク) v1.7 リファレンス。 認証・認可、サインアップ・サインイン、セッション管理、OAuth、パスキー、二要素認証 (2FA / TOTP)、SSO / SAML、SCIM、 OAuth Provider (OAuth 2.1 / OIDC)、MCP 認可 (@better-auth/mcp)、Infrastructure (dash / sentinel)、 プラグイン (organization, admin, magic-link, anonymous 等)。betterAuth, createAuthClient, signUp, signIn, getSession。 Next.js, Nuxt, SvelteKit, Hono, Express, Expo, TanStack, Effect 統合。

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Set up and check OmniRoute authentication for API access and dashboard sessions. Use Bearer credentials for remote requests, manage login cookies, inspect authentication status, and configure OIDC, a standard for signing in through an identity provider.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Setting up API key authentication for OmniRoute
• Logging in to and out of dashboard sessions
• Checking authentication status and CSRF tokens

Audit whether author profiles clearly present relevant experience, qualifications, and professional links. Review rendered pages, metadata, structured data, and HTTP responses to identify specific places where author expertise needs clearer presentation and explain how to verify improvements.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Check whether article authors have relevant biographies
• Improve profiles with qualifications and professional links
• Audit author information in rendered HTML and structured data

Review article bylines to check that author names, roles, and biography links are clearly visible. Inspect rendered pages and related metadata to identify specific pages or templates that need clearer author information.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking author information on blog posts
• Adding author names, roles, and profile links
• Reviewing author information in rendered HTML

Implement or review login and access controls for applications and APIs. Helps define token lifetimes, session handling, and permissions for specific resources, with checks for user identity, organization boundaries, credential storage, and authentication failures.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Implement login and session management
• Review access controls for REST or GraphQL APIs
• Design social login or single sign-on

Trace OAuth and OIDC sign-in flows in a CTF sandbox, from redirects through token exchange to application acceptance. Show where tokens become a recognized identity or permission, and preserve the smallest reproducible flow.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Trace sign-in redirects and callback parameters
• Inspect state, nonce, and PKCE validation
• Check how tokens become application identity or permissions

Assess authorized single sign-on systems using SAML, OIDC, and OAuth2. Map the login flow, check signatures, redirects, and token validation, then document reproducible findings and their impact, including identity or tenant confusion.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review redirect and token checks in a single sign-on flow
• Assess SAML signatures and assertion handling
• Investigate tenant confusion and logout failures

Create a Microsoft 365 Copilot agent that connects to external systems through MCP, a protocol for accessing tools and data. Generate project configuration, select available functions, configure authentication, and follow provisioning and testing steps.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Connect Microsoft 365 Copilot to an MCP server
• Select external tools to expose in Copilot
• Configure OAuth 2.0 or SSO authentication

Build a two-tier certificate authority with OpenSSL and Python, separating the offline root from the issuing authority. Covers server and client certificates, revocation checks, and policies that define certificate usage and trust.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Set up an internal certificate authority
• Issue server and client certificates
• Configure certificate revocation checks

Build server-side Zoom integrations for meeting scheduling, user management, and recording downloads. This reference guides API endpoint selection, OAuth authentication, request limits, and error diagnosis, with examples for automated workflows and event notifications.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Automating meeting creation and updates
• Managing Zoom users in bulk
• Downloading recordings after event notifications

Operate Chrome or Brave using signed-in browser sessions to verify deployed pages, reproduce bugs, inspect page structure, and examine errors or network traffic. An optional macOS bridge extends control to native applications and operating system input.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Verify page appearance after deployment
• Reproduce blank pages and disappearing content
• Inspect console errors and network traffic

Prepare a local LangBot environment for development and browser testing. The skill covers service startup, shared connection settings, browser access, proxy troubleshooting, and reusable login profiles, with guidance for Linux and WSL environments.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Prepare a local Linux or WSL development environment
• Start services and verify WebUI access
• Choose Computer Use or Playwright MCP for browser control

Implement application security controls, including login, access permissions, password hashing, and input validation. The skill provides code, configuration requirements, and testing guidance for checking protections against unauthorized access, malicious input, and sensitive data exposure.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Implementing login with password hashing and rate limits
• Adding JWT validation and session protection
• Preventing SQL injection and malicious script execution

Build and debug Java applications with Spring Boot 3.x. This skill guides application design, API implementation, database query tuning, authentication, and testing, including WebFlux applications that process requests without blocking.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Build APIs with Spring Boot
• Improve slow JPA queries
• Configure OAuth2/JWT authentication

Build and maintain TypeScript MCP servers that connect AI to tools, plus interactive MCP Apps, using mcp-use. The skill guides implementation, authentication, migration, and verification based on the package version and types installed in the project.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Starting a TypeScript MCP server project
• Adding interactive Views to MCP Apps
• Reviewing OAuth authentication and permissions

Build and maintain TypeScript MCP servers that connect AI to tools, plus interactive MCP Apps, using mcp-use. The skill guides implementation, authentication, migration, and verification based on the package version and types installed in the project.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Starting a TypeScript MCP server project
• Adding interactive Views to MCP Apps
• Reviewing OAuth authentication and permissions

Prepare a Python environment for Mixpanel analysis by installing required libraries and checking credentials and connectivity. Use it for first-time setup, missing dependencies, or guidance on service account and OAuth sign-in options.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Set up a new environment for Mixpanel analysis
• Install missing Python analysis libraries
• Configure service account or OAuth credentials

Test how applications trust Host and forwarding headers to identify poisoned password reset links, shared cache contamination, and unintended internal requests. The skill provides validation criteria to distinguish reflected values from demonstrated security impact.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking password reset email links
• Validating shared cache poisoning
• Testing proxy routing and blocked paths

Assess account takeover risks across password resets, email changes, JWT tokens, SSO, and recovery flows. The skill connects individual weaknesses into testable scenarios and requires proof that an attacker session can gain access to a separate test account.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review password reset links and token handling
• Check reauthentication for email and password changes
• Assess takeover risks involving JWT and SSO

Authentication, authorization, and API security implementation. Use when building user systems, protecting APIs, or implementing access control. Covers OAuth 2.1/OIDC, JWT patterns, sessions, Passkeys/WebAuthn, RBAC/ABAC/ReBAC, policy engines (OPA, Casbin, SpiceDB), managed auth (Clerk, Auth0), self-hosted (Keycloak, Ory), and API security best practices.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Configure TOTP authenticator apps, send OTP codes via email/SMS, manage backup codes, handle trusted devices, and implement 2FA sign-in flows using Better Auth's twoFactor plugin. Use when users need MFA, multi-factor authentication, authenticator setup, or login security with Better Auth.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.