Security

# Basic authentication configuration
states:
  - id: auth_state
    type: tool
    tool: authenticate
    input:
      username: "${input.username}"
      password: "${input.password}"
    # Authentication result
    output:
      token: "${output.token}"
      expires: "${output.expires}"

# Advanced authentication configuration
states:
  - id: auth_state
    type: tool
    tool: authenticate
    input:
      username: "${input.username}"
      password: "${input.password}"
    security:
      mfa: required
      rate_limit:
        attempts: 5
        period: 300
      password_policy:
        min_length: 12
        require_special: true
        require_numbers: true
        require_uppercase: true
    # Authentication result
    output:
      token: "${output.token}"
      expires: "${output.expires}"
      refresh_token: "${output.refresh_token}"

# Basic authorization configuration
states:
  - id: authz_state
    type: tool
    tool: authorize
    input:
      token: "${input.token}"
      resource: "${input.resource}"
    # Authorization result
    output:
      allowed: "${output.allowed}"
      role: "${output.role}"

# Advanced authorization configuration
states:
  - id: authz_state
    type: tool
    tool: authorize
    input:
      token: "${input.token}"
      resource: "${input.resource}"
    security:
      rbac:
        roles:
          - name: "admin"
            permissions: ["read", "write", "delete"]
          - name: "user"
            permissions: ["read"]
      abac:
        rules:
          - condition: "${user.department} == 'IT'"
            permissions: ["read", "write"]
    # Authorization result
    output:
      allowed: "${output.allowed}"
      role: "${output.role}"
      permissions: "${output.permissions}"

# Basic data protection configuration
states:
  - id: protect_state
    type: tool
    tool: protect_data
    input:
      data: "${input.data}"
    # Protection result
    output:
      encrypted_data: "${output.encrypted_data}"

# Advanced data protection configuration
states:
  - id: protect_state
    type: tool
    tool: protect_data
    input:
      data: "${input.data}"
    security:
      encryption:
        algorithm: "AES-256-GCM"
        key_rotation: 86400
      masking:
        fields: ["ssn", "credit_card"]
        method: "partial"
      tokenization:
        fields: ["email", "phone"]
        format: "preserve_format"
    # Protection result
    output:
      encrypted_data: "${output.encrypted_data}"
      tokenized_data: "${output.tokenized_data}"

# Basic API security configuration
states:
  - id: api_state
    type: tool
    tool: secure_api
    input:
      endpoint: "${input.endpoint}"
    # Security configuration
    output:
      secured: "${output.secured}"

# Advanced API security configuration
states:
  - id: api_state
    type: tool
    tool: secure_api
    input:
      endpoint: "${input.endpoint}"
    security:
      cors:
        allowed_origins: ["https://example.com"]
        allowed_methods: ["GET", "POST"]
      rate_limiting:
        requests: 100
        period: 60
      waf:
        rules:
          - type: "sql_injection"
            action: "block"
          - type: "xss"
            action: "block"
    # Security configuration
    output:
      secured: "${output.secured}"
      rules: "${output.rules}"