nav-auth

What problem does it solve?

Prevents broken or insecure authentication and authorization in Nav applications by providing correct patterns for Azure AD, TokenX, ID-porten, Maskinporten, and JWT validation.

Core Features & Use Cases

• Correct authentication wiring for Nav stacks: Implements Azure AD JWT validation (issuer, audience, signature) and service-to-service TokenX exchange flows.
• Machine-to-machine and citizen access models: Covers Maskinporten scopes for external organizations and ID-porten sidecar configuration for citizens.
• Practical debugging guidance: Includes commands and testing approaches to diagnose auth failures like audience mismatches, JWKS retrieval issues, and TokenX access-policy drift.

Quick Start

Configure your Nais app for Azure AD and validate incoming JWTs using the nav-auth skill patterns for issuer, JWKS, audience checks, and TokenX OBO exchange.