https://praxis.fast/praxis/dev/examples/configs/security/Recent content in Security on PraxisHugoenhttps://praxis.fast/praxis/dev/examples/configs/security/basic-auth.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/security/basic-auth.yaml/Authenticate requests using HTTP Basic Authentication (RFC 7617)https://praxis.fast/praxis/dev/examples/configs/security/cors.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/security/cors.yaml/Spec-compliant CORS filter with preflight handling, origin validation, and credential supporthttps://praxis.fast/praxis/dev/examples/configs/security/credential-injection.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/security/credential-injection.yaml/Injects per-cluster API credentials into upstream requestshttps://praxis.fast/praxis/dev/examples/configs/security/credential-injection-env-vars.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/security/credential-injection-env-vars.yaml/Injects per-service API credentials read from environment variables, so no secret is written into the confighttps://praxis.fast/praxis/dev/examples/configs/security/csrf.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/security/csrf.yaml/Cross-site request forgery protection via origin validationhttps://praxis.fast/praxis/dev/examples/configs/security/downstream-read-timeout.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/security/downstream-read-timeout.yaml/Protects against slow client attacks by limiting how long the proxy waits for data from downstream clientshttps://praxis.fast/praxis/dev/examples/configs/security/forwarded-headers.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/security/forwarded-headers.yaml/Injects X-Forwarded-For, X-Forwarded-Proto, and X-Forwarded-Host into upstream requestshttps://praxis.fast/praxis/dev/examples/configs/security/guardrails.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/security/guardrails.yaml/Reject requests that match header or body inspection ruleshttps://praxis.fast/praxis/dev/examples/configs/security/guardrails-per-model.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/security/guardrails-per-model.yaml/Runs body-inspecting guardrails only for a model selected from the request bodyhttps://praxis.fast/praxis/dev/examples/configs/security/ip-acl.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/security/ip-acl.yaml/Allow or deny requests by source IP/CIDRhttps://praxis.fast/praxis/dev/examples/configs/security/peer-identity-trust.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/security/peer-identity-trust.yaml/Validates downstream mTLS peer identity against a set of trusted peershttps://praxis.fast/praxis/dev/examples/configs/security/policy.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/security/policy.yaml/Embeds the Praxis Policy Engine in-process to enforce multi-source identity, APL route policy, RFC 8693 OAuth 2.0 token exchange, field redaction, session taint, audit emission, and (under body_access: read_write) request / response body rewritinghttps://praxis.fast/praxis/dev/examples/configs/security/policy-api-key.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/security/policy-api-key.yaml/Authenticates generic HTTP traffic with API keys using the Praxis Policy Enginehttps://praxis.fast/praxis/dev/examples/configs/security/policy-assertions.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/security/policy-assertions.yaml/Projects policy-derived identity into request headers and removes credentials that should not reach the upstreamhttps://praxis.fast/praxis/dev/examples/configs/security/policy-context.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/security/policy-context.yaml/Demonstrates the host-supplied context surface: context_headers maps reserved-prefix HTTP headers to agent / framework extension fields so APL rules can reference them; context_meta stamps operator-defined scope, tags, and properties onto every policy evaluationhttps://praxis.fast/praxis/dev/examples/configs/security/policy-http.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/security/policy-http.yaml/Generic-HTTP authorization for non-MCP traffic using the Praxis Policy Enginehttps://praxis.fast/praxis/dev/examples/configs/security/policy-llm.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/security/policy-llm.yaml/Authorizes body-addressed inference requests against llm: policy routes