Loading...
Loading...
Found 7 Skills
Sa-Token microservice authentication skill. Covers the Same-Token mechanism for isolating internal services from the public network, centralized authentication through SpringCloud Gateway (Reactor reactive), authentication for internal RPC calls via Feign/Dubbo/gRPC, distributed session solutions (Redis Session center/JWT stateless), Reactor/WebFlux framework integration, and SpringBoot 3/4 dependency compatibility. Use this skill when users need inter-service authentication in a microservice architecture, gateway Token forwarding and validation, isolation of internal services from the public network, or distributed session sharing. For basic login authentication, use the `sa-token` skill first.
Sa-Token OAuth2.0 server-side skill. Covers four grant modes: Authorization Code, Implicit, Password, and Client Credentials. Includes complete OAuth2-Server setup, the SaOAuth2DataLoader data loader, custom and tiered Scope permissions, the OIDC protocol, OpenId/UnionId, custom grant_type, custom login and authorization pages, annotation-based Access-Token validation, login session interoperability, Scope level control, and custom API routes. Use this skill when building an OAuth2.0 authentication server, developing an open platform, or implementing third-party application authorization. For basic login authentication, use the sa-token skill first.
Sa-Token SSO single sign-on specialized skill. Covers complete solutions for all three SSO modes: Mode 1 (same domain + shared Redis/Cookie), Mode 2 (cross-domain + shared Redis/URL redirect), and Mode 3 (cross-domain + separate Redis/HTTP ticket). Includes SSO-Server authentication center setup, SSO-Client integration, single logout, custom login pages, front-end/back-end separated SSO (H5 solution), message push, anonymous Client, domain validation, NoSdk non-Java integration, custom API routes, and platform center redirection. Use this skill when unified login/logout across multiple systems, a single sign-on authentication center, or cross-domain SSO integration is required. For basic login authentication, use the sa-token skill first.
Sa-Token integration extension skill. Covers JWT integration (a comparison table of the Simple, Mixin, and Stateless modes), Redis persistence (JDK serialization and JSON serialization), standalone Redis through Alone-Redis (isolation between authentication and business caches), AOP annotation-based authorization (using annotations at the Service layer), SpEL expression annotations (@SaCheckEL), Quick-Login rapid login (zero-code login page), JSON serialization extensions (Jackson/Fastjson/Fastjson2/Snack3), template engine integrations (Thymeleaf/Freemarker tag dialects), and RPC integrations (context propagation across Dubbo/Dubbo3/gRPC). Use this skill when users need to integrate JWT for stateless authentication, configure Redis distributed sessions, isolate caches, implement Service-layer annotation-based authorization, or quickly build a login page. For basic login authentication, use the sa-token skill first.
Core skill for Sa-Token, a lightweight Java authentication and authorization framework. It covers login authentication, permission/role authentication, annotation-based authorization, route-interceptor authorization, Session management, forced logout, Token expiration strategies, framework configuration, Token styles and submission prefixes, frontend-backend separation, remember-me mode, mutually exclusive login on the same device, and handling NotLoginException scene values. StpUtil is the core facade utility class and provides a complete suite of authentication APIs, including login/checkLogin/logout/isLogin/getLoginId/getTokenValue. Use this skill when users need to integrate permission authentication into Java Web projects, use StpUtil for login and permission validation, configure route interceptors, or implement annotation-based authorization. It does not cover advanced features such as secondary authentication, account banning, multi-account support, SSO, OAuth2, microservices, API security, JWT, or Redis; use the corresponding specialized skills for those.
Sa-Token advanced security features skill. Covers secondary authentication (`safe-auth` re-verification), account banning (full bans/category-specific bans/tiered bans), impersonation and identity switching, multi-account authentication (`StpUserUtil`/`StpKit`), global listeners (login/logout/kick/ban/token renewal events), global filters (`SaServletFilter`/`SaReactorFilter`), password encryption (MD5/SHA1/SHA256/AES/RSA/BCrypt/TOTP), session queries (terminal lists/global Token searches), HTTP Basic/Digest authentication, firewalls (IP allowlists and blocklists/rate limiting), custom authorization annotations, dynamic route authorization, reverse-proxy URI repair, asynchronous Mock contexts, and Redis key-value data architecture design. Use when the user needs to implement secondary verification for sensitive operations, tiered account bans, user impersonation, multi-account systems (User/Admin separation), global event monitoring, or password encryption utilities. For basic login authentication, use the sa-token skill.
Hunt Kubernetes & Docker — API anonymous access, kubelet 10250 exec (SPDY/WebSocket, NOT plain POST) and the simpler /run primitive, etcd 2379 unauth, dashboard skip-login, RBAC misconfig, secret/SA-token abuse, docker.sock host escape, runc/container-escape (Leaky Vessels CVE-2024-21626), API-server-mediated nodes/proxy RCE, EphemeralContainers node-shell, bound/projected SA-token audience+expiry abuse, admission-controller bypass, Helm/Tiller remnants. Use when target runs containerized infra, exposes K8s ports (6443/10250/10255/2379/8443), or cloud metadata reveals K8s service accounts.