返回 Skill 列表
extension
分类: 开发与工程无需 API Key

building-api-authentication

使用OAuth2、JWT、API密钥和会话管理构建安全的API认证系统。在实现安全认证流程时使用。可以通过诸如“构建认证”、“添加API认证”或“保护API”等短语触发。

person作者: jakexiaohubgithub

Building Api Authentication

Overview

This skill provides automated assistance for api authentication builder tasks. This skill provides automated assistance for the described functionality.

Prerequisites

Before using this skill, ensure you have:

  • API design specifications or requirements documented
  • Development environment with necessary frameworks installed
  • Database or backend services accessible for integration
  • Authentication and authorization strategies defined
  • Testing tools and environments configured

Instructions

  1. Use Read tool to examine existing API specifications from {baseDir}/api-specs/
  2. Define resource models, endpoints, and HTTP methods
  3. Document request/response schemas and data types
  4. Identify authentication and authorization requirements
  5. Plan error handling and validation strategies
  6. Generate boilerplate code using Bash(api:auth-*) with framework scaffolding
  7. Implement endpoint handlers with business logic
  8. Add input validation and schema enforcement
  9. Integrate authentication and authorization middleware
  10. Configure database connections and ORM models
  11. Write integration tests covering all endpoints

See {baseDir}/references/implementation.md for detailed implementation guide.

Output

  • {baseDir}/src/routes/ - Endpoint route definitions
  • {baseDir}/src/controllers/ - Business logic handlers
  • {baseDir}/src/models/ - Data models and schemas
  • {baseDir}/src/middleware/ - Authentication, validation, logging
  • {baseDir}/src/config/ - Configuration and environment variables
  • OpenAPI 3.0 specification with complete endpoint definitions

Error Handling

See {baseDir}/references/errors.md for comprehensive error handling.

Examples

See {baseDir}/references/examples.md for detailed examples.

Resources

  • Express.js and Fastify for Node.js APIs
  • Flask and FastAPI for Python APIs
  • Spring Boot for Java APIs
  • Gin and Echo for Go APIs
  • OpenAPI Specification 3.0+ for API documentation