@nockdev/awf 6.2.0

package/.agent/skills/core/authentication/data/language-python.yaml

@@ -0,0 +1,215 @@
+metadata:
+  skill: authentication
+  domain: language_python
+  version: 6.2.0
+  updated: '2026-02-05'
+  migrated_from: language-python.csv
+  patterns_count: 25
+  columns:
+  - id
+  - pattern_name
+  - description
+  - library
+  - security_level
+  - keywords
+patterns:
+- id: PY-001
+  pattern_name: FastAPI OAuth2
+  description: Built-in OAuth2 password bearer flow
+  library: fastapi
+  security_level: high
+  keywords:
+  - fastapi
+  - oauth2
+- id: PY-002
+  pattern_name: OAuth2PasswordBearer
+  description: Token dependency injection
+  library: fastapi.security
+  security_level: high
+  keywords:
+  - bearer
+  - token
+- id: PY-003
+  pattern_name: OAuth2PasswordRequestForm
+  description: Login form handling
+  library: fastapi.security
+  security_level: medium
+  keywords:
+  - form
+  - login
+- id: PY-004
+  pattern_name: FastAPI HTTPBearer
+  description: Bearer token from Authorization header
+  library: fastapi.security
+  security_level: high
+  keywords:
+  - bearer
+  - header
+- id: PY-005
+  pattern_name: PyJWT Library
+  description: JWT encoding and decoding
+  library: pyjwt
+  security_level: high
+  keywords:
+  - jwt
+  - pyjwt
+- id: PY-006
+  pattern_name: python-jose
+  description: JOSE implementation with JWE
+  library: python-jose
+  security_level: high
+  keywords:
+  - jose
+  - jwe
+- id: PY-007
+  pattern_name: Flask-Login
+  description: Session-based user authentication
+  library: flask-login
+  security_level: high
+  keywords:
+  - flask
+  - session
+- id: PY-008
+  pattern_name: Flask User Mixin
+  description: User model interface
+  library: flask-login
+  security_level: medium
+  keywords:
+  - mixin
+  - user
+- id: PY-009
+  pattern_name: Flask Login Required
+  description: Route protection decorator
+  library: flask-login
+  security_level: high
+  keywords:
+  - decorator
+  - protect
+- id: PY-010
+  pattern_name: Flask-JWT-Extended
+  description: Full JWT support for Flask
+  library: flask-jwt-extended
+  security_level: high
+  keywords:
+  - flask
+  - jwt
+- id: PY-011
+  pattern_name: Django Authentication
+  description: Built-in auth framework
+  library: django.contrib.auth
+  security_level: high
+  keywords:
+  - django
+  - builtin
+- id: PY-012
+  pattern_name: Django User Model
+  description: Default user implementation
+  library: django.contrib.auth
+  security_level: high
+  keywords:
+  - user
+  - model
+- id: PY-013
+  pattern_name: Django Login Required
+  description: View protection decorator
+  library: django.contrib.auth
+  security_level: high
+  keywords:
+  - decorator
+  - view
+- id: PY-014
+  pattern_name: Django REST JWT
+  description: JWT for DRF applications
+  library: rest_framework_simplejwt
+  security_level: high
+  keywords:
+  - drf
+  - jwt
+- id: PY-015
+  pattern_name: Django Allauth
+  description: Social auth for Django
+  library: django-allauth
+  security_level: medium
+  keywords:
+  - social
+  - allauth
+- id: PY-016
+  pattern_name: Passlib Password Hash
+  description: Multi-algorithm password hashing
+  library: passlib
+  security_level: critical
+  keywords:
+  - passlib
+  - hash
+- id: PY-017
+  pattern_name: Bcrypt CryptContext
+  description: Recommended password context
+  library: passlib[bcrypt]
+  security_level: critical
+  keywords:
+  - bcrypt
+  - context
+- id: PY-018
+  pattern_name: Authlib OAuth Client
+  description: Full OAuth 1.0 and 2.0 client
+  library: authlib
+  security_level: high
+  keywords:
+  - authlib
+  - oauth
+- id: PY-019
+  pattern_name: Authlib OAuth Server
+  description: OAuth2 server implementation
+  library: authlib
+  security_level: high
+  keywords:
+  - server
+  - provider
+- id: PY-020
+  pattern_name: Social Auth
+  description: Multi-provider social login
+  library: python-social-auth
+  security_level: medium
+  keywords:
+  - social
+  - providers
+- id: PY-021
+  pattern_name: HTTPX OAuth
+  description: Async OAuth2 with HTTPX
+  library: httpx-oauth
+  security_level: high
+  keywords:
+  - async
+  - httpx
+- id: PY-022
+  pattern_name: Starlette Auth
+  description: Auth for Starlette apps
+  library: starlette
+  security_level: high
+  keywords:
+  - starlette
+  - auth
+- id: PY-023
+  pattern_name: itsdangerous Token
+  description: Signed token generation
+  library: itsdangerous
+  security_level: high
+  keywords:
+  - signed
+  - tokens
+- id: PY-024
+  pattern_name: py-webauthn
+  description: WebAuthn server library
+  library: py-webauthn
+  security_level: critical
+  keywords:
+  - webauthn
+  - passkey
+- id: PY-025
+  pattern_name: Duo Universal
+  description: Duo MFA integration
+  library: duo-universal-python
+  security_level: high
+  keywords:
+  - duo
+  - mfa

package/.agent/skills/core/authentication/data/language-rust.yaml

@@ -0,0 +1,215 @@
+metadata:
+  skill: authentication
+  domain: language_rust
+  version: 6.2.0
+  updated: '2026-02-05'
+  migrated_from: language-rust.csv
+  patterns_count: 25
+  columns:
+  - id
+  - pattern_name
+  - description
+  - library
+  - security_level
+  - keywords
+patterns:
+- id: RS-001
+  pattern_name: jsonwebtoken Crate
+  description: JWT creation and validation
+  library: jsonwebtoken
+  security_level: high
+  keywords:
+  - jwt
+  - crate
+- id: RS-002
+  pattern_name: JWT Signing RS256
+  description: RSA key pair signing
+  library: jsonwebtoken
+  security_level: high
+  keywords:
+  - rs256
+  - rsa
+- id: RS-003
+  pattern_name: JWT Claims Struct
+  description: Derive Serialize Deserialize claims
+  library: jsonwebtoken
+  security_level: medium
+  keywords:
+  - claims
+  - serde
+- id: RS-004
+  pattern_name: axum-jwt-auth
+  description: JWT middleware for Axum
+  library: axum-jwt-auth
+  security_level: high
+  keywords:
+  - axum
+  - jwt
+- id: RS-005
+  pattern_name: JWKS Fetching
+  description: Remote key set validation
+  library: axum-jwt-auth
+  security_level: high
+  keywords:
+  - jwks
+  - remote
+- id: RS-006
+  pattern_name: actix-jwt-auth-middleware
+  description: JWT for Actix-web
+  library: actix-jwt-auth-middleware
+  security_level: high
+  keywords:
+  - actix
+  - jwt
+- id: RS-007
+  pattern_name: oxide-auth
+  description: OAuth2 server framework
+  library: oxide-auth
+  security_level: high
+  keywords:
+  - oauth2
+  - server
+- id: RS-008
+  pattern_name: oxide-auth-axum
+  description: OAuth2 for Axum
+  library: oxide-auth-axum
+  security_level: high
+  keywords:
+  - axum
+  - oauth2
+- id: RS-009
+  pattern_name: oauth2-rs
+  description: OAuth2 client library
+  library: oauth2
+  security_level: high
+  keywords:
+  - oauth2
+  - client
+- id: RS-010
+  pattern_name: torii
+  description: Modular auth ecosystem
+  library: torii
+  security_level: high
+  keywords:
+  - modular
+  - auth
+- id: RS-011
+  pattern_name: Argon2 Hashing
+  description: Password hashing with argon2
+  library: argon2
+  security_level: critical
+  keywords:
+  - argon2
+  - password
+- id: RS-012
+  pattern_name: bcrypt Crate
+  description: Bcrypt password hashing
+  library: bcrypt
+  security_level: critical
+  keywords:
+  - bcrypt
+  - hash
+- id: RS-013
+  pattern_name: Tower HTTP Auth
+  description: Auth extractors for Tower
+  library: tower-http
+  security_level: high
+  keywords:
+  - tower
+  - auth
+- id: RS-014
+  pattern_name: actix-identity
+  description: Identity management for Actix
+  library: actix-identity
+  security_level: high
+  keywords:
+  - actix
+  - identity
+- id: RS-015
+  pattern_name: actix-session
+  description: Session handling for Actix
+  library: actix-session
+  security_level: high
+  keywords:
+  - actix
+  - session
+- id: RS-016
+  pattern_name: axum-sessions
+  description: Session middleware for Axum
+  library: async-session
+  security_level: high
+  keywords:
+  - axum
+  - session
+- id: RS-017
+  pattern_name: Cookie Crate
+  description: Secure cookie handling
+  library: cookie
+  security_level: high
+  keywords:
+  - cookie
+  - secure
+- id: RS-018
+  pattern_name: CSRF Protection
+  description: CSRF tokens for Rust
+  library: csrf
+  security_level: critical
+  keywords:
+  - csrf
+  - token
+- id: RS-019
+  pattern_name: webauthn-rs
+  description: WebAuthn server library
+  library: webauthn-rs
+  security_level: critical
+  keywords:
+  - webauthn
+  - passkey
+- id: RS-020
+  pattern_name: oauth2-passkey-axum
+  description: Google OAuth and Passkeys
+  library: oauth2-passkey-axum
+  security_level: critical
+  keywords:
+  - passkey
+  - google
+- id: RS-021
+  pattern_name: Rocket Auth
+  description: Auth for Rocket framework
+  library: rocket_auth
+  security_level: high
+  keywords:
+  - rocket
+  - auth
+- id: RS-022
+  pattern_name: Ring Crypto
+  description: Low-level crypto primitives
+  library: ring
+  security_level: critical
+  keywords:
+  - crypto
+  - ring
+- id: RS-023
+  pattern_name: rustls TLS
+  description: Pure Rust TLS
+  library: rustls
+  security_level: high
+  keywords:
+  - tls
+  - https
+- id: RS-024
+  pattern_name: axum-extra Cookies
+  description: Cookie jar for Axum
+  library: axum-extra
+  security_level: medium
+  keywords:
+  - cookies
+  - jar
+- id: RS-025
+  pattern_name: Rate Limiting
+  description: Governor rate limiter
+  library: governor
+  security_level: high
+  keywords:
+  - ratelimit
+  - governor

package/.agent/skills/core/authentication/data/language-typescript.yaml

@@ -0,0 +1,215 @@
+metadata:
+  skill: authentication
+  domain: language_typescript
+  version: 6.2.0
+  updated: '2026-02-05'
+  migrated_from: language-typescript.csv
+  patterns_count: 25
+  columns:
+  - id
+  - pattern_name
+  - description
+  - library
+  - security_level
+  - keywords
+patterns:
+- id: TS-001
+  pattern_name: Auth.js (NextAuth)
+  description: Full-stack auth for Next.js
+  library: next-auth
+  security_level: high
+  keywords:
+  - nextauth
+  - authjs
+- id: TS-002
+  pattern_name: Auth.js Providers
+  description: OAuth provider configuration
+  library: next-auth/providers
+  security_level: high
+  keywords:
+  - providers
+  - oauth
+- id: TS-003
+  pattern_name: Auth.js Session
+  description: Session handling and callbacks
+  library: next-auth/jwt
+  security_level: high
+  keywords:
+  - session
+  - jwt
+- id: TS-004
+  pattern_name: Auth.js Middleware
+  description: Route protection in Next.js
+  library: next-auth/middleware
+  security_level: high
+  keywords:
+  - middleware
+  - protect
+- id: TS-005
+  pattern_name: Passport.js
+  description: Express authentication middleware
+  library: passport
+  security_level: high
+  keywords:
+  - passport
+  - express
+- id: TS-006
+  pattern_name: Passport Local
+  description: Username password strategy
+  library: passport-local
+  security_level: high
+  keywords:
+  - local
+  - password
+- id: TS-007
+  pattern_name: Passport JWT
+  description: JWT authentication strategy
+  library: passport-jwt
+  security_level: high
+  keywords:
+  - jwt
+  - strategy
+- id: TS-008
+  pattern_name: Passport OAuth2
+  description: Generic OAuth2 strategy
+  library: passport-oauth2
+  security_level: high
+  keywords:
+  - oauth2
+  - strategy
+- id: TS-009
+  pattern_name: jose Library
+  description: JOSE JWT JWE JWK implementation
+  library: jose
+  security_level: high
+  keywords:
+  - jose
+  - jwt
+- id: TS-010
+  pattern_name: jsonwebtoken
+  description: Simple JWT signing verification
+  library: jsonwebtoken
+  security_level: high
+  keywords:
+  - jwt
+  - simple
+- id: TS-011
+  pattern_name: Better Auth
+  description: Type-safe auth framework
+  library: better-auth
+  security_level: high
+  keywords:
+  - typesafe
+  - auth
+- id: TS-012
+  pattern_name: Lucia Auth
+  description: Session-based auth library
+  library: lucia
+  security_level: high
+  keywords:
+  - lucia
+  - session
+- id: TS-013
+  pattern_name: Oslo Crypto
+  description: Utilities for auth implementations
+  library: oslo
+  security_level: medium
+  keywords:
+  - crypto
+  - utils
+- id: TS-014
+  pattern_name: express-session
+  description: Session middleware for Express
+  library: express-session
+  security_level: high
+  keywords:
+  - session
+  - express
+- id: TS-015
+  pattern_name: cookie-session
+  description: Signed cookie sessions
+  library: cookie-session
+  security_level: medium
+  keywords:
+  - cookie
+  - signed
+- id: TS-016
+  pattern_name: bcryptjs
+  description: Pure JS bcrypt implementation
+  library: bcryptjs
+  security_level: critical
+  keywords:
+  - bcrypt
+  - hash
+- id: TS-017
+  pattern_name: argon2
+  description: Node argon2 bindings
+  library: argon2
+  security_level: critical
+  keywords:
+  - argon2
+  - hash
+- id: TS-018
+  pattern_name: CSRF Protection
+  description: csurf or lusca middleware
+  library: csurf
+  security_level: critical
+  keywords:
+  - csrf
+  - token
+- id: TS-019
+  pattern_name: Helmet Security
+  description: Security headers middleware
+  library: helmet
+  security_level: high
+  keywords:
+  - headers
+  - helmet
+- id: TS-020
+  pattern_name: Rate Limiter
+  description: express-rate-limit for logins
+  library: express-rate-limit
+  security_level: high
+  keywords:
+  - ratelimit
+  - login
+- id: TS-021
+  pattern_name: Zod Validation
+  description: Schema validation for auth
+  library: zod
+  security_level: medium
+  keywords:
+  - zod
+  - validation
+- id: TS-022
+  pattern_name: SimpleWebAuthn Server
+  description: WebAuthn for Node.js
+  library: '@simplewebauthn/server'
+  security_level: critical
+  keywords:
+  - webauthn
+  - passkey
+- id: TS-023
+  pattern_name: SimpleWebAuthn Browser
+  description: WebAuthn client library
+  library: '@simplewebauthn/browser'
+  security_level: critical
+  keywords:
+  - webauthn
+  - client
+- id: TS-024
+  pattern_name: OTPAuth
+  description: TOTP HOTP generation
+  library: otpauth
+  security_level: high
+  keywords:
+  - totp
+  - otp
+- id: TS-025
+  pattern_name: Speakeasy
+  description: Two-factor authentication
+  library: speakeasy
+  security_level: high
+  keywords:
+  - 2fa
+  - totp