“authorization”的搜索结果

Use when you need to design, review, or improve security in Micronaut applications — including micronaut-security authentication, @Secured and intercept-url-map rules, JWT/session strategies, SecurityService checks, CORS, CSRF awareness for browser apps, rejection handlers, and sensitive-data-safe logging. This should trigger for requests such as Add Micronaut security support; Review Micronaut security configuration; Improve API authorization in Micronaut; Add JWT security in Micronaut; Harden Micronaut route authorization rules. Part of cursor-rules-java project

中文简介正在准备中。当前显示原文说明。

ペネトレーションテストを対話的に実行するスキル。認可確認(Authorization Gate)→カテゴリ選択（Methodology, Reconnaissance, Scanning, VulnerabilityScanning, WebAppTesting, APITesting, PasswordAttacks, Exploitation, PrivilegeEscalation, ActiveDirectory, PostExploitation, WirelessAttacks, NetworkAttacks, SocialEngineering, CloudPentesting, MobileAppTesting, ContainerK8s, BinaryExploitation, OWASPTop10, Reporting, EmailSecurity, DatabaseAttacks, VPNRemoteAccess の全23カテゴリ）→ツール選択→コマンド実行→発見記録(Finding)→レポート生成をステップバイステップで進行。スコープ/除外チェック・ガードレール付き。「ペンテスト実行」「pentest」「侵入テスト」「脆弱性診断」「セキュリティテスト」「pentest executor」で発火。

中文简介正在准备中。当前显示原文说明。

Detect and prevent API enumeration attacks including BOLA and IDOR exploitation by monitoring sequential identifier access patterns and authorization failures.

中文简介正在准备中。当前显示原文说明。

Conducts security testing of REST, GraphQL, and gRPC APIs to identify vulnerabilities in authentication, authorization, rate limiting, input validation, and business logic. The tester uses the OWASP API Security Top 10 as the testing framework, combining Burp Suite interception with Postman collections and custom scripts to test endpoint security at every privilege level. Activates for requests involving API security testing, REST API pentest, GraphQL security assessment, or API vulnerability testing.

中文简介正在准备中。当前显示原文说明。

Django access control and IDOR security review. Use when reviewing Django views, DRF viewsets, ORM queries, or any Python/Django code handling user authorization. Trigger keywords: "IDOR", "access control", "authorization", "Django permissions", "object permissions", "tenant isolation", "broken access".

中文简介正在准备中。当前显示原文说明。

Apple アプリサービス。StoreKit 2 / CloudKit / WidgetKit / ActivityKit / User Notifications / Core Location / MapKit / HealthKit / Sign in with Apple。 Product, Transaction, RequestReviewAction, CKRecord, CKUserIdentity, Widget, TimelineProvider, UNUserNotificationCenter, CLLocationManager, CLServiceSession, Map, MKGeocodingRequest, HKHealthStore, ASAuthorizationController, AuthorizationController。

中文简介正在准备中。当前显示原文说明。

Provides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based access control using Spring Security 6.x. Use when implementing authentication or authorization in Spring Boot applications.

中文简介正在准备中。当前显示原文说明。

Design or review a declared control-command profile and its verb/backend lifecycle matrix. Distinguish policy denial, unsupported capability, delivery acknowledgement, independently observed effect, and unknown outcome; bind authorization to principal, target, scope, current policy, expiry, and fencing epoch. NOT for claiming runtime correctness, proving an adapter from declarations, or approving a control-panel button without independent runtime evidence.

中文简介正在准备中。当前显示原文说明。

Build stateful Agents on Cloudflare Workers with current, source-verified SDK APIs. Covers durable state, RPC, chat, schedules, queues, fibers, Workflows, MCP, and channels while keeping authorization and external effects application-owned. NOT for assuming SDK helpers grant application authorization or effect approval.

中文简介正在准备中。当前显示原文说明。

Implement REST APIs in ABP Framework with AppServices, DTOs, pagination, filtering, and authorization. Use when building API endpoints for ABP applications.

中文简介正在准备中。当前显示原文说明。

Authentication and authorization patterns - JWT, OAuth2, sessions, RBAC, ABAC, passkeys, and MFA. Use for: authentication, authorization, jwt, oauth, oauth2, session, login, rbac, abac, passkey, mfa, totp, api key, token, auth, cookie, csrf, cors credentials, bearer token, refresh token, oidc.

中文简介正在准备中。当前显示原文说明。

Security hardening and best practices for .NET applications. Navigation skill covering OWASP Top 10, authentication, authorization, cryptography, secrets management, and secure coding. For building secure applications. Keywords: security, owasp, authentication, authorization, cryptography, jwt, oauth, secrets, hardening

中文简介正在准备中。当前显示原文说明。

Identifying and exploiting OAuth 2.0 and OpenID Connect misconfigurations including redirect URI manipulation, token leakage, and authorization code theft during security assessments.

中文简介正在准备中。当前显示原文说明。

Detect and prevent API enumeration attacks including BOLA and IDOR exploitation by monitoring sequential identifier access patterns and authorization failures.

中文简介正在准备中。当前显示原文说明。

Conducts security testing of REST, GraphQL, and gRPC APIs to identify vulnerabilities in authentication, authorization, rate limiting, input validation, and business logic. The tester uses the OWASP API Security Top 10 as the testing framework, combining Burp Suite interception with Postman collections and custom scripts to test endpoint security at every privilege level. Activates for requests involving API security testing, REST API pentest, GraphQL security assessment, or API vulnerability testing.

中文简介正在准备中。当前显示原文说明。

Creates comprehensive permission tests ensuring RBAC doesn't regress with test matrices, CI gating, and authorization coverage. Use for "RBAC testing", "permission tests", "authorization testing", or "access control tests".

中文简介正在准备中。当前显示原文说明。

运用ClawSweeper维护机器人检查OpenClaw的Issue和PR，查看报告、创建修复任务、调查GitHub Actions失败，并按授权和验证条件自动修复或合并。

• 查看Issue和PR检查报告
• 根据现有报告创建修复任务
• 调查GitHub Actions失败原因

梳理AI智能体读取外部信息并操作工具或文件时的安全措施，检查权限、保存路径、连接目标及凭据处理，并通过实际执行验证防护是否生效。

• 检查智能体的安全措施
• 验证用户与工作区之间的数据隔离
• 验证凭据清理和输出限制

支持从退货受理、验货到退款及转售、报废决策的处理，结合欺诈迹象、保修索赔和供应商费用追偿，整理退货应对方案。

• 确认退货受理条件与退款政策
• 评估退货商品状态并决定去向
• 调查异常退货模式

为 Quarkus 应用实现并检查身份认证、访问权限和输入验证，同时涵盖机密信息管理、密码哈希、请求限制、审计日志及依赖项已知漏洞检查。

• 为 Quarkus API 添加 JWT 或 OIDC 认证
• 检查角色权限与数据归属验证
• 审查输入验证与数据库查询

从认证与权限管理到数据操作、表单、API和生产配置，检查Laravel应用的安全性，并参考实现示例，避免常见漏洞，梳理需要检查的环节。

• 检查登录与权限管理
• 检查查询和输入验证
• 检查表单的CSRF与XSS防护

为FastAPI应用开发与审查提供支持，涵盖项目结构、输入验证、身份验证、权限检查、异步处理、数据库更新及测试的设计与实现。

• 规划FastAPI应用结构
• 定义并验证输入输出数据格式
• 审查身份验证和操作权限

Prepare selected pull requests for maintainer review by comparing failures with their current base, fixing authorized defects, and preserving contributor credit. Report complete or partial validation with evidence and outstanding checks before any separately authorized merge.

中文简介正在准备中。当前显示英语简介。

• Preparing selected pull requests before merging
• Distinguishing base failures from PR defects
• Fixing authorized defects while preserving contributor credit

Manage payment permissions for AI agents with spending caps, expiration dates, and merchant rules. Use cryptographic signatures to verify authorization, coordinate approval from multiple agents for high-value purchases, and track or revoke payment permissions.

中文简介正在准备中。当前显示英语简介。

• Set shopping budgets and permitted merchants for AI agents
• Require multiple agents to approve high-value purchases
• Manage subscription renewals with spending caps