Security

Use this skill when a Litestar service needs defense-in-depth security implementation, not only authentication wiring.

For full implementation patterns, open references/security-patterns.md.

Execution Workflow

1. Define public, authenticated, and privileged route classes first.
2. Choose the authentication mechanism and attach it once at app scope.
3. Keep request parsing concerns separate from identity establishment.
4. Consume authenticated context from request.user / request.auth only after auth runs.
5. Apply guards for authorization and ownership checks.
6. Normalize 401 and 403 behavior intentionally and document exclusions.
7. Store and compare secrets safely.

Implementation Rules