Implement Azure AD JWT validation and TokenX exchange for Nav applications.
npx skills add https://github.com/navikt/copilot --skill nav-auth
Please help me install this Agent Skill. Skill: nav-auth Source: https://github.com/navikt/copilot/tree/main/.github/skills/nav-auth Command: npx skills add https://github.com/navikt/copilot --skill nav-auth
Prevents broken or insecure authentication and authorization in Nav applications by providing correct patterns for Azure AD, TokenX, ID-porten, Maskinporten, and JWT validation.
Configure your Nais app for Azure AD and validate incoming JWTs using the nav-auth skill patterns for issuer, JWKS, audience checks, and TokenX OBO exchange.
High-intent search queries and answers about installing and using this skill.
To validate Azure AD JWT tokens in a NAIS application, enforce strict checks for the token issuer, audience, signature, and expiration. The nav-auth patterns provide the correct configuration wiring to ensure incoming tokens are securely verified.
TokenX enables secure service-to-service authentication through token exchange flows. You configure access policies and perform On-Behalf-Of (OBO) exchange to allow your NAIS app to securely call other services.
ID-porten secures citizen access via sidecar configuration, while Maskinporten handles external organization access using scoped tokens. Both require aligned NAIS application configuration to properly route and validate incoming requests.
JWT validation fails with audience mismatch or JWKS retrieval issues when the token's audience claim does not match your app or the JWKS endpoint is unreachable. Debug by verifying the issuer, audience, and access-policy alignment in your NAIS configuration.
To secure machine-to-machine callers, validate that the incoming token originates from a pre-authorized app by matching the azp claim. This guarded M2M validation ensures only explicitly allowed services can access your application endpoints.
naviktExchange tokens with TokenX for secure service-to-service authentication on NAIS.
team-telnyxImplement OAuth 2.0 authentication flows for the Telnyx API with Python SDK examples.
BlackBeltTechnologyIntegrate JUDO applications with Apache CXF for JAX-RS RESTful services.
ryan-nguyen-01Implement OAuth2 and OpenID Connect authorization code flows with PKCE and JWKS token validation.
