The Agent Skills Directory

[SAFE]: The skill correctly implements JWT validation using the python-jose library, ensuring that tokens are verified against Keycloak's JSON Web Key Set (JWKS) with specific algorithm (RS256), audience, and issuer checks to prevent token spoofing or reuse attacks.- [SAFE]: Secret management follows industry best practices by utilizing pydantic-settings with an .env file configuration, avoiding the hardcoding of sensitive credentials like client secrets directly in the source code.- [SAFE]: The implementation of role-based access control (RBAC) via FastAPI dependencies provides a structured and secure method for authorizing requests based on claims extracted from verified identity tokens.- [SAFE]: Network operations are limited to standard OIDC discovery and token exchange flows targeting the configured Keycloak identity provider service.

Keycloak FastAPI Integration