secure-code-guardian

Custom security implementations for authentication, authorization, input validation, and OWASP Top 10 vulnerability prevention. After each implementation step, verify: Load detailed guidance based on context: When implementing security features, provide: OWASP Top 10, bcrypt/argon2, JWT, OAuth 2.0, OIDC, CSP, CORS, rate limiting, input validation, output encoding, encryption (AES, RSA), TLS, security headers Documentation - Covers password hashing (bcrypt/argon2), parameterized SQL queries, JWT validation, and rate limiting with explicit code examples - Includes validation checkpoints for authentication (brute-force, session fixation, token expiration), authorization (privilege escalation), input handling (SQL injection, XSS), and security headers - Enforces must-do constraints: hashed passwords, parameterized queries, input sanitization, security headers (CSP, HSTS), and environment-based secret storage - Provides reference guides for OWASP patterns, authentication flows, input validation with Zod, XSS/CSRF prevention, and Helmet configuration - Threat model — Identify attack surface and threats - Design — Plan security controls - Implement — Write secure code with defense in depth; see code examples below - Validate — Test security controls with explicit checkpoints (see below) - Document — Record security decisions - Authentication : Test brute-force protection...