Does this skill help with database verification?

Yes, it provides integrated patterns for connecting to MySQL via Docker to verify that authenticated requests have correctly modified the underlying data.

What happens if a test returns a 401 Unauthorized error?

The skill provides a troubleshooting checklist to identify common causes like expired tokens, incorrect cookie formats, or JWT secret mismatches.

How does the route-tester skill handle authentication?

It utilizes a specialized script to retrieve a refresh token from Keycloak, sign it using a local JWT secret, and format it into a cookie-based header for authenticated requests.

Which HTTP methods are supported?

The skill supports all standard HTTP methods, including GET, POST, PUT, and DELETE, with specific patterns for handling JSON payloads and file uploads.

Can I test routes without a running Keycloak instance?

Yes, the skill includes patterns for Mock Authentication, which allows you to bypass Keycloak in development or test environments by setting specific environment variables.

Authenticated Route Tester

Name: Authenticated Route Tester
Author: Microck

byMicrock

•

Seguridad y Pruebas

Streamlines the testing of protected API endpoints using cookie-based JWT authentication and Keycloak integration.

Acerca de

The Authenticated Route Tester skill is designed to simplify the complex process of testing secured routes within a multi-service architecture. By automating the generation of cookie-based JWT tokens and providing pre-configured testing patterns, it allows developers to quickly validate API functionality, debug authentication flows, and verify database changes. Whether using the recommended test-auth-route script or local mock authentication, this skill ensures that testing POST, PUT, and DELETE operations is consistent, reproducible, and efficient across different service ports.

Características Principales

Automated Keycloak and JWT cookie token generation
Support for mock authentication in development environments
Pre-configured patterns for complex multi-service testing
81 GitHub stars
Comprehensive debugging guides for 401, 403, and 500 errors
Generates reproducible curl commands for manual verification

Casos de Uso

Debugging authentication issues related to Keycloak SSO or JWT signing
Verifying request/response data and backend database state updates
Validating new API endpoints and route functionality after code changes

Acerca de

Características Principales

Automated Keycloak and JWT cookie token generation
Support for mock authentication in development environments
Pre-configured patterns for complex multi-service testing
81 GitHub stars
Comprehensive debugging guides for 401, 403, and 500 errors
Generates reproducible curl commands for manual verification

Casos de Uso

Debugging authentication issues related to Keycloak SSO or JWT signing
Verifying request/response data and backend database state updates
Validating new API endpoints and route functionality after code changes