“jwt”的搜索结果

Expert guidance on authentication implementation including OAuth 2.0/OIDC, JWT tokens, session management, and secure password handling. Covers both implementing auth from scratch and integrating auth providers. Use when "implement authentication, oauth login, jwt tokens, session management, social login, password reset, multi-factor auth, refresh tokens, Working with Auth0, Clerk, NextAuth, Passport.js, authentication, oauth, jwt, session, security, login, password, mfa, oidc" mentioned.

中文简介正在准备中。当前显示原文说明。

Authentication and authorization expert for OAuth, sessions, JWT, MFA, and identity securityUse when "authentication flow, login system, oauth integration, jwt tokens, session management, password hashing, mfa setup, refresh tokens, social login, role-based access, authentication, authorization, oauth, oidc, jwt, sessions, mfa, passkeys, nextauth, supabase-auth, clerk" mentioned.

中文简介正在准备中。当前显示原文说明。

Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for JWT, JWS, and JWE validation paths, header parsing, key selection, claim acceptance, audience and issuer checks, role derivation, and token-to-identity confusion bugs. Use when the user asks to inspect JWT headers or claims, key lookup, `kid` handling, `alg` confusion, audience or issuer validation, role claims, or explain how a token becomes accepted identity or privilege. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.

中文简介正在准备中。当前显示原文说明。

Hunt JSON Web Token (JWT) vulnerabilities — alg=none bypass, RS256→HS256 key confusion, weak HMAC secret cracking, kid path traversal, JWKS injection, jku/x5u header attacks, embedded JWK confusion, expired-token acceptance, claim mutability, and token replay. Use when an app uses JWT for authentication or stateless sessions.

中文简介正在准备中。当前显示原文说明。

Identify and exploit Algorithm Confusion vulnerabilities in JSON Web Tokens (JWT). This skill details how to bypass signature verification by changing the signing algorithm from asymmetric (RS256) to symmetric (HS256) and using the public key as the symmetric secret.

中文简介正在准备中。当前显示原文说明。

Exploit implementations of JSON Web Tokens (JWT) through algorithmic confusion (e.g., RS256 to HS256), "none" algorithm attacks, and signature stripping. Use this skill to forge administration tokens and achieve unauthenticated Account Takeover (ATO) on REST APIs and modern web applications.

中文简介正在准备中。当前显示原文说明。

Test APIs for authentication and authorization bypass vulnerabilities including JWT manipulation, OAuth2 flaws, API key leakage, broken authentication, and token forgery. Use this skill when assessing REST/GraphQL APIs for access control weaknesses, session management flaws, or credential handling issues. Covers JWT algorithm confusion, OAuth redirect manipulation, and rate limit bypass.

中文简介正在准备中。当前显示原文说明。

JWT saldırıları — alg:none, HMAC brute-force, floating point bypass, CVE-2022-39227

中文简介正在准备中。当前显示原文说明。

Rust 製バックエンド HTTP サーバーフレームワーク fandhe-backend のリファレンス。 fandhe-backend-core / -http / -routes。Server, BoundServer, Router（merge）, Handler。 拡張点 Middleware（on_response_with_status）/ UpgradeHandler / RequestGate / Interceptor。 Diagnostics, StreamingResponse, SetCookie session（__Host-）, sans-IO HTTP/1.1, graceful shutdown。 プラグイン cors, websocket（WsSender）, graphql, openapi, webrtc, jwt（JwtGate, JwtPolicy）, csrf（CsrfGate）。

中文简介正在准备中。当前显示原文说明。

Provides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based access control using Spring Security 6.x. Use when implementing authentication or authorization in Spring Boot applications.

中文简介正在准备中。当前显示原文说明。

Use when implementing authentication, authorization, JWT tokens, security filters, password encoding, or any Spring Security configuration. Covers stateless JWT auth, token rotation, RBAC, and method-level security.

中文简介正在准备中。当前显示原文说明。

Implement secure authentication and authorization systems with JWT, OAuth2, Session-based auth, and RBAC. Use when: (1) implementing user login/signup, (2) setting up JWT tokens, (3) OAuth2 integration (Google, GitHub, etc.), (4) role-based access control (RBAC), (5) password hashing and validation, (6) session management, (7) API authentication middleware, (8) 2FA/MFA setup. Triggers: "authentication", "login", "JWT", "OAuth", "session", "password hash", "RBAC", "permissions", "2FA".

中文简介正在准备中。当前显示原文说明。

检查Java Spring Boot服务的身份认证、访问权限和输入验证等安全措施，涵盖秘密信息管理、日志、API调用频率限制及依赖库漏洞。

• 添加身份认证和访问权限
• 检查API输入验证和SQL构造
• 核查CSRF和CORS配置

Implement or review login and access controls for applications and APIs. Helps define token lifetimes, session handling, and permissions for specific resources, with checks for user identity, organization boundaries, credential storage, and authentication failures.

中文简介正在准备中。当前显示英语简介。

• Implement login and session management
• Review access controls for REST or GraphQL APIs
• Design social login or single sign-on

Trace OAuth and OIDC sign-in flows in a CTF sandbox, from redirects through token exchange to application acceptance. Show where tokens become a recognized identity or permission, and preserve the smallest reproducible flow.

中文简介正在准备中。当前显示英语简介。

• Trace sign-in redirects and callback parameters
• Inspect state, nonce, and PKCE validation
• Check how tokens become application identity or permissions

Design and improve server-side applications using patterns for Node.js, Express, and Next.js API routes. Code examples cover API structure, database access, caching, authentication, error handling, and background jobs to guide implementation choices.

中文简介正在准备中。当前显示英语简介。

• Organize API endpoints and application logic
• Reduce unnecessary database queries
• Add authentication and permission checks

Use prebuilt Zoom Video SDK interfaces to add video sessions to web applications. This reference covers framework integration, server-generated authentication tokens, chat and screen sharing settings, session cleanup, and troubleshooting for common installation and connection issues.

中文简介正在准备中。当前显示英语简介。

• Adding a prebuilt video interface to a React or Next.js application
• Configuring chat and screen sharing for video sessions
• Implementing server-side authentication token generation

Build custom real-time video sessions in Flutter using flutter_zoom_videosdk. The skill guides package setup, session joining and leaving, event listeners that respond to SDK activity, and mobile platform integration.

中文简介正在准备中。当前显示英语简介。

• Build custom video sessions in a Flutter app
• Implement session joining, leaving, and cleanup
• Connect SDK events to app actions

Embed Zoom meetings in native Android apps with guidance on authentication, joining and starting meetings, and SDK integration. Begin with the default interface, then move to a custom interface once authentication, permissions, and meeting state changes are stable.

中文简介正在准备中。当前显示英语简介。

• Embedding Zoom meetings in an Android app
• Validating meeting join and start flows with the default interface
• Moving from the default interface to a custom interface

Plan encryption, TLS connections, digital signatures, and key management using established cryptographic libraries. Get guidance on choosing algorithms, storing passwords, rotating keys, and avoiding implementation mistakes such as reused nonces or comparisons that reveal information through timing.

中文简介正在准备中。当前显示英语简介。

• Choosing encryption methods for stored data
• Reviewing TLS settings for encrypted connections
• Designing password storage and token signatures

Set up login, user management, and access rules in a Convex app. The skill connects the chosen authentication provider, links signed-in identities to app users when needed, and protects backend functions with identity and permission checks.

中文简介正在准备中。当前显示英语简介。

• Adding login to a new Convex app
• Connecting an existing authentication provider
• Linking signed-in identities to app user records

Quickly find test input families, checks, and validation priorities once a security testing direction is known. Covers web vulnerabilities, authentication, AI, and MCP, with pointers to specialist skills and reference material.

中文简介正在准备中。当前显示英语简介。

• Recall initial checks for a known vulnerability type
• Choose test input families and validation priorities
• Find reference cards for AI and MCP testing

Migrate Adobe integrations away from Service Account JWT, Photoshop v1, retired Lightroom Firefly Services, or drifting SDK/API contracts with canaries and rollback. Use when the task requires adobe end-of-life and contract migration. Trigger with "upgrade Adobe integration", "migrate Adobe JWT", or "Photoshop v2 migration".

中文简介正在准备中。当前显示原文说明。

JWT and OAuth token attack playbook. Use when validating token trust, signing algorithms, key handling, claim abuse, bearer flows, and OAuth account-binding weaknesses.

中文简介正在准备中。当前显示原文说明。