backstage-opa-plugins

Set up or modify the OPA Permissions Wrapper Module in a Backstage app. Use this skill whenever the user wants to integrate OPA with the Backstage Permission Framework, add or change permission rules, write a Rego policy for Backstage permissions, wire up the opa-wrapper module, or troubleshoot why a permission is being allowed or denied. Trigger on phrases like "add OPA permissions", "set up permission policy", "Rego policy for Backstage", "permission wrapper", "ALLOW/DENY/CONDITIONAL", or any time the user is working with `@parsifal-m/plugin-permission-backend-module-opa-wrapper`.

Add or modify frontend OPA authorization in a Backstage React plugin using RequireOpaAuthz or useOpaAuthz. Use this skill whenever the user wants to hide/show UI components based on OPA policy decisions, gate frontend elements behind an authorization check, use the useOpaAuthz hook for custom auth flows, wire up the OpaAuthzClientReact API factory, write a Rego policy for frontend authorization, or test OPA-gated components. Trigger on phrases like "hide component", "show button if allowed", "frontend OPA", "RequireOpaAuthz", "useOpaAuthz", "gate UI with OPA", or any time the user is working with `@parsifal-m/backstage-plugin-opa-authz-react`.

Integrate the OPA Node service into a Backstage backend plugin for route-level authorization. Use this skill whenever the user wants to secure backend plugin routes with OPA, add `opaService` as a dependency to a plugin, call `evaluatePolicy` in a router, write or update a Rego policy for a backend plugin, or mock OPA in tests. Trigger on phrases like "secure a route with OPA", "opaService", "evaluatePolicy", "add OPA to my plugin", "backend authorization with OPA", or any time the user is working with `@parsifal-m/backstage-plugin-opa-node`.