Does this skill work with microservices?

Yes, it includes a standardized mapping for common service ports (Users, Projects, Forms, etc.) and guidance on how to construct full URLs using service-specific route prefixes.

How does the route-tester handle authentication?

The skill uses a script to automate the process of fetching a refresh token from Keycloak, signing it with the project's JWT secret, and attaching it as a cookie to the API request.

Which HTTP methods are supported by this skill?

It supports all standard HTTP methods including GET, POST, PUT, and DELETE, with specific patterns for handling JSON request bodies and multipart form data.

Can I test routes without a running Keycloak instance?

Yes, the skill supports a 'Mock Authentication' mode specifically for development and testing environments, allowing you to bypass Keycloak by sending specific mock headers.

Authenticated Route Tester

Name: Authenticated Route Tester
Author: moonklabs

bymoonklabs

•

Security & Testing

Automates the testing and validation of authenticated API routes using cookie-based JWT authentication and mock authentication patterns.

About

The Route Tester skill streamlines the process of verifying API endpoints within projects using the AIWF framework, specifically handling the complexities of cookie-based JWT authentication via Keycloak. It allows developers and AI agents to programmatically generate signed tokens, execute authenticated requests across GET, POST, PUT, and DELETE methods, and validate service responses across multiple microservices. By providing standardized patterns for script-based testing and development-only mock authentication, it ensures that security layers are correctly implemented without slowing down the development cycle.

Key Features

1 GitHub stars
Standardized service port mapping and route prefix discovery for microservices
Integrated database verification patterns to confirm the side effects of API calls
Automated cookie-based JWT token generation and signing via Keycloak integration
Development-only mock authentication patterns for bypassing Keycloak in local environments
Support for complex HTTP operations including POST/PUT with JSON payloads and file uploads

Use Cases

End-to-end testing of multi-service workflows such as form submissions and project approvals
Validating new API endpoints and route functionality after architectural changes
Debugging 401 Unauthorized or 403 Forbidden errors in local and staging environments

About

Key Features

1 GitHub stars
Standardized service port mapping and route prefix discovery for microservices
Integrated database verification patterns to confirm the side effects of API calls
Automated cookie-based JWT token generation and signing via Keycloak integration
Development-only mock authentication patterns for bypassing Keycloak in local environments
Support for complex HTTP operations including POST/PUT with JSON payloads and file uploads

Use Cases

End-to-end testing of multi-service workflows such as form submissions and project approvals
Validating new API endpoints and route functionality after architectural changes
Debugging 401 Unauthorized or 403 Forbidden errors in local and staging environments