Saleor Security Expert

•
32
•

Secures Saleor e-commerce applications by configuring JWT authentication, OIDC integrations, granular permissions, and robust security headers.

This skill provides specialized guidance for hardening Saleor commerce environments, covering everything from authentication flows and App token management to webhook signature verification and Django-level security settings. It enables Claude to implement best practices for OAuth/OIDC, manage complex permission models, and ensure that headless commerce deployments meet modern security standards like JWS verification and CORS restriction. It is an essential tool for developers building secure, enterprise-grade storefronts and third-party integrations within the Saleor ecosystem.

主な機能

01App token management and secure installation patterns
02Webhook payload signature verification (JWS/HMAC)
03JWT and OIDC authentication flow implementation
0432 GitHub stars
05Granular permission model and staff group configuration
06Production-ready CORS and security header hardening

ユースケース

01Implementing secure webhook handlers for third-party App integrations
02Configuring Single Sign-On (SSO) with external identity providers via OIDC
03Auditing and hardening a Saleor instance before production deployment