メニュー
Custom Plug middleware patterns in landing_page_backend — authentication (JWT/Passport), authorization, permission checking, and rate limiting.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Phoenix Channel patterns in landing_page_backend — real-time collaboration, WebSocket topics, broadcasting, and channel structure.
Guide to Context module patterns in landing_page_backend — Ecto queries, dynamic query building, Ecto.Multi, and Outbox messaging.
Guide to Phoenix Controller structure in landing_page_backend using FallbackController, tuple responses, and permission plugs.
Patterns for creating Oban background workers in landing_page_backend — queue configuration, job arguments, retry strategies, and dynamic query processing.
Guidelines for creating Ecto Schemas in landing_page_backend, including binary UUID primary keys, virtual fields, custom json/1 function, and multiple changeset patterns.
Vue 2 Options API patterns for the Landing Page editor — Vuex namespaced stores, Ant Design Vue components, mixins, computed getters/setters, and axios API calls.
| name | landing_page-plugs |
| description | Custom Plug middleware patterns in landing_page_backend — authentication (JWT/Passport), authorization, permission checking, and rate limiting. |
| metadata | {"author":"Vũ Lưu","version":"2026.03.30","source":"Source code landing_page_backend"} |
Custom Plug middleware architecture for authentication, authorization, and permission control.
| Topic | Description | Reference |
|---|---|---|
| Authentication Plugs | JWT validation, Passport auth, Account lookup | core-auth |
| Permission Plugs | Role-based access control, page/org/team checks | core-permissions |
# Router pipeline — plugs chạy tuần tự
pipeline :passport do
plug LandingPageWeb.Plug.PassportPlug # 1. Validate token → assigns :token_claims
end
pipeline :account do
plug LandingPageWeb.Plug.AccountPlug # 2. Lookup account → assigns :account
end
pipeline :organization do
plug LandingPageWeb.Plug.OrganizationPlug # 3. Lookup org → assigns :organization
end
# Scope sử dụng pipelines
scope "/api/v1", LandingPageWeb.V1 do
pipe_through [:api, :passport, :account, :organization]
resources "/pages", PageController
end
defmodule LandingPageWeb.Plug.MyCustomPlug do
import Plug.Conn
def init(opts), do: opts
def call(conn, _opts) do
# 1. Lấy data từ conn (headers, assigns, params)
account = conn.assigns.account
# 2. Validate/process
case validate(account) do
:ok ->
# 3a. Success → assign data và pass conn tiếp
conn |> assign(:validated, true)
:error ->
# 3b. Fail → halt pipeline
conn |> send_resp(403, "Forbidden") |> halt()
end
end
end
# Trong controller — chỉ áp dụng cho specific actions
plug LandingPageWeb.Plug.PermissionCheck,
[role: :owner, type: :page]
when action in [:delete]
plug LandingPageWeb.Plug.PermissionCheck,
[role: :manager, type: :page]
when action in [:page_detail, :update_right]
plug LandingPageWeb.Plug.PermissionCheck,
[role: :organization_admin, type: :organization]
when action in [:bulk_update_rights]