Guidewire Security Basics

---
name: guidewire-security-basics
description: |
  Implement security best practices for Guidewire InsuranceSuite including OAuth2,
  JWT handling, API roles, secure Gosu coding, and data protection.
  Trigger with phrases like "guidewire security", "oauth2 guidewire",
  "jwt token", "api roles", "secure gosu code", "guidewire authentication". Use when working with guidewire security basics.
allowed-tools: Read, Write, Edit, Bash(curl:*), Grep
version: 1.0.0
license: MIT
author: Jeremy Longshore <jeremy@intentsolutions.io>
compatible-with: claude-code, codex, openclaw
---
# Guidewire Security Basics

## Overview
Implement comprehensive security for Guidewire InsuranceSuite including OAuth2 authentication, JWT token management, API role configuration, and secure Gosu coding practices.

## Prerequisites
- Access to Guidewire Cloud Console (GCC)
- Understanding of OAuth2 and JWT concepts
- Familiarity with Gosu programming

## Instructions

### Step 1: Authentication Architecture
+------------------+      +------------------+      +------------------+
### Step 2: Instructions
// Secure token management
### Step 3: Security Checklist
Implement security checklist.

For detailed implementation code and configurations, load the reference guide:
`Read(${CLAUDE_SKILL_DIR}/references/implementation-guide.md)`

## Output
- Authentication Architecture
- Instructions
- Security Checklist

## Error Handling
| Issue | Solution |
|-------|----------|
| Configuration error | Check settings |

## Resources
- [Guidewire Security Documentation](https://docs.guidewire.com/security/)
- [Gosu Secure Coding Guidelines](https://docs.guidewire.com/security/gosu-secure-coding-guidelines/)
- [Cloud API Authentication](https://docs.guidewire.com/cloud/pc/202503/cloudapica/)

## Next Steps
For production readiness, see `guidewire-prod-checklist`.

## Examples

**Basic usage**: Apply guidewire security basics to a standard project setup with default configuration options.

**Advanced scenario**: Customize guidewire security basics for production environments with multiple constraints and team-specific requirements.