quarkus-security
Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security. Use when reviewing Quarkus authn/authz, JWT or OIDC, RBAC, validation, or secrets.
- installs 8w
- 1,700
- 30-day movement
- starts with the next reading
- Related entries
- 3
- Connections
- 0
A SKILL.md that gives an AI coding agent Quarkus security best practices, covering authentication (JWT, OIDC, Basic Auth), authorization with @RolesAllowed and SecurityIdentity, input validation, SQL injection prevention, password hashing, CORS, secrets management, rate limiting, security headers, audit logging, and dependency scanning. It includes configuration examples in application.properties, Java code snippets, and bash commands, organised into when-to-use, requirements, and rules sections.
Reach for it when you want an agent to apply or review Quarkus-specific security practices rather than generic advice.
Use it to
- Set up JWT or OIDC authentication in a Quarkus app
- Add role-based authorization with @RolesAllowed
- Validate input with Bean Validation and custom validators
- Prevent SQL injection in Panache and native queries
- Review secrets management and dependency security
For Developers securing Quarkus applications with an AI agent
- Host repository
- affaan-m/ECC
- Installs, lifetime
- 2,800
- Installs, 8 weeks
- 1,700
- Host stars
- 259k
- Host language
- JavaScript