Security Rules

What problem does it solve?

This Skill ensures the api.audace backend adheres to critical security standards, protecting sensitive data and preventing unauthorized access.

Core Features & Use Cases

• Authentication: Implements JWT Bearer Token authentication for all protected routes.
• Authorization: Enforces granular Role-Based Access Control (RBAC) with over 40 distinct permissions.
• Data Protection: Mandates password hashing, input validation via Pydantic, and prevents sensitive data exposure in responses and logs.
• Audit Trail: Requires logging of all sensitive actions for traceability.
• Use Case: When a user attempts to access a restricted endpoint, this Skill verifies their JWT, checks if their role has the necessary permission (e.g., can_edit_showplan), and logs the attempt, ensuring only authorized actions are permitted.

Quick Start

Ensure all API routes requiring authentication include current_user: User = Depends(get_current_user) and verify necessary permissions before executing actions.