fastapi-expert_skill

Overview

This skill provides enterprise-grade FastAPI full-stack guidance for building scalable, secure APIs with a Next.js/React frontend, Neon serverless PostgreSQL, SQLModel ORM, and production deployment patterns. It covers authentication/authorization, payment integrations (Stripe, JazzCash, EasyPaisa), async patterns, real-time features, microservices, and security hardening. Use it to standardize project structure, database usage, API patterns, and deployable pipelines for production-ready applications.

How this skill works

The skill defines a recommended project layout, Pydantic-based configuration, and database connection patterns tuned for Neon serverless (NullPool). It includes SQLModel model examples with validation, JWT-based auth utilities, router and service layer patterns, middleware for security headers and logging, and webhook/payment route templates. Included patterns show how to integrate async services, real-time updates, and CI-friendly testing with pytest.

When to use it

• Building a new FastAPI backend paired with Next.js/React frontend
• Connecting to serverless PostgreSQL (Neon) with proper pooling
• Implementing secure JWT authentication and role-based access
• Adding payment processing and webhook handling (Stripe/JazzCash/EasyPaisa)
• Preparing an app for production deployment, monitoring, and testing

Best practices

• Use Pydantic BaseSettings for environment configuration and keep secrets in .env or a secrets manager
• Use NullPool for serverless Postgres to avoid persistent connections
• Separate concerns: routers for endpoints, services for business logic, dependencies for DI
• Validate and sanitize inputs at the schema/model layer and enforce password complexity
• Protect webhooks with signature verification and secure webhook endpoints
• Apply security headers, CORS rules, rate limiting, and HSTS in middleware

Example use cases

• Auth service with registration, access/refresh JWTs, and admin-only routes
• E-commerce backend handling checkout, Stripe webhooks, and transaction reconciliation
• Microservice that uses Neon serverless DB with proper pooling configuration
• Real-time notifications using async endpoints and background tasks for events
• CI pipeline testing with pytest and in-memory SQLite fixtures before deployment