Does this skill work with microservices?

Yes, it includes a standardized mapping for common service ports (Users, Projects, Forms, etc.) and guidance on how to construct full URLs using service-specific route prefixes.

How does the route-tester handle authentication?

The skill uses a script to automate the process of fetching a refresh token from Keycloak, signing it with the project's JWT secret, and attaching it as a cookie to the API request.

Which HTTP methods are supported by this skill?

It supports all standard HTTP methods including GET, POST, PUT, and DELETE, with specific patterns for handling JSON request bodies and multipart form data.

Can I test routes without a running Keycloak instance?

Yes, the skill supports a 'Mock Authentication' mode specifically for development and testing environments, allowing you to bypass Keycloak by sending specific mock headers.

Authenticated Route Tester

Name: Authenticated Route Tester
Author: moonklabs

bymoonklabs

•

セキュリティとテスト

Automates the testing and validation of authenticated API routes using cookie-based JWT authentication and mock authentication patterns.

The Route Tester skill streamlines the process of verifying API endpoints within projects using the AIWF framework, specifically handling the complexities of cookie-based JWT authentication via Keycloak. It allows developers and AI agents to programmatically generate signed tokens, execute authenticated requests across GET, POST, PUT, and DELETE methods, and validate service responses across multiple microservices. By providing standardized patterns for script-based testing and development-only mock authentication, it ensures that security layers are correctly implemented without slowing down the development cycle.

主な機能

011 GitHub stars

02Standardized service port mapping and route prefix discovery for microservices

03Integrated database verification patterns to confirm the side effects of API calls

04Automated cookie-based JWT token generation and signing via Keycloak integration

05Development-only mock authentication patterns for bypassing Keycloak in local environments

06Support for complex HTTP operations including POST/PUT with JSON payloads and file uploads

ユースケース

01End-to-end testing of multi-service workflows such as form submissions and project approvals

02Validating new API endpoints and route functionality after architectural changes

03Debugging 401 Unauthorized or 403 Forbidden errors in local and staging environments

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add moonklabs/aiwf route-tester

For use in Claude.ai and ChatGPT

Download Skill