後端身份驗證與身份
後端是身份與授權的最終邊界。
支援適用的機制:
- 會話 Cookie
- JWT 存取令牌
- OAuth/OIDC
- Google 身份
- Apple 身份
- 服務間身份驗證
- API 金鑰
- mTLS
- 通行鑰/WebAuthn 驗證
- MFA
參考資料:
引導後端身份驗證。在實作或審查登入、身份驗證、會話或令牌生命週期、帳戶復原以及後端應用程式中的授權邊界時使用。
此技能提供了一個詳盡的後端身份驗證與授權指南,強調後端是身份與授權的最終邊界。它支援多種常見機制,包括會話 Cookie、JWT 存取令牌、OAuth/OIDC、Google 與 Apple 身份、服務間身份驗證、API 金鑰、mTLS、Passkey/WebAuthn 驗證以及 MFA。在 Claude Code、Cursor、Codex 等 AI 代理平台上,此技能可協助開發者在實作或審查登入、身份驗證、令牌生命週期、帳戶復原及授權邊界時,快速參考最佳實踐。技能透過多個 Markdown 參考文件提供詳細的實作指引,涵蓋 Google 身份、Apple 身份、OAuth/OIDC、JWT、API 金鑰、服務間通訊與 WebAuthn 等主題,確保開發者能遵循標準且安全的做法。
npx skills add https://github.com/AlanWYChen/agent-skills/tree/HEAD/production-engineering-skills/backend/authenticationInstalled? Explore more 程式設計與開發 skills: steipete/bluebubbles, steipete/eightctl, steipete/blucli · View all 6 →
後端是身份與授權的最終邊界。
支援適用的機制:
參考資料:
This repo contains 3 individual skills — each has its own dedicated page.
Guide backend audit. Use when implementing or reviewing production readiness, security, reliability, testing, release configuration, and prioritized findings in backend applications.
Guide production backend development. Use for APIs, services, workers, queues, schedulers, and data systems; select the relevant backend guidance.
Guide production application development across web, mobile, and backend systems. Use when implementing or auditing production workflows; route to the applicable domain and supporting guidance.
Send and manage iMessages via BlueBubbles, including attachments, tapbacks, edits, replies, and groups.
Control Eight Sleep pods (status, temperature, alarms, schedules).
BluOS CLI (blu) for discovery, playback, grouping, and volume.
Create, search, and manage Bear notes via grizzly CLI.
Capture frames or clips from RTSP/ONVIF cameras.
Search GIF providers with CLI/TUI, download results, and extract stills/sheets.