route-tester

Name: route-tester
Availability: InStock
Author: chacha

Validate authenticated API routes using cookie-based JWT authentication.

51|39|Updated Dec 30, 2025

Search Tags:#testing #authorization #api #jwt #cookie #authenticate #mock-auth

Ready to run

npx skills add https://github.com/chacha95/claude-code-harness --skill route-tester-chacha95

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: route-tester
Source: https://github.com/chacha95/claude-code-harness/tree/main/.claude/skills/route-tester
Command: npx skills add https://github.com/chacha95/claude-code-harness --skill route-tester-chacha95

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides patterns and tooling to validate authenticated routes by simulating cookie-based JWT authentication against API endpoints, enabling reliable route testing and debugging.

Core Features & Use Cases

Test authentication for protected endpoints using cookie-based JWT tokens
Validate access control for GET/POST/PUT/DELETE operations
Debug route behavior in development with both real and mock authentication

Quick Start

Run the test-auth-route.js script to execute an authenticated request against a protected route.

Frequently Asked Questions about route-tester

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I test authenticated API routes that use cookie-based JWT tokens?▼

You can test authenticated API routes by simulating cookie-based JWT authentication against protected endpoints using a dedicated test script. This validates access control across GET, POST, PUT, and DELETE operations to ensure your route behavior is reliable.

What is the best way to debug route behavior for protected endpoints during development?▼

Debugging route behavior in development is best handled by simulating both real and mock authentication modes. This allows you to validate access control without relying entirely on a live authentication backend.

Do I need Keycloak to simulate JWT authentication for my API endpoints?▼

Yes, testing with real authentication requires a Keycloak backend and a configured JWT secret. However, you can bypass this setup during development by utilizing optional mock-auth modes to simulate the required tokens.

Can I validate access control for both GET and POST operations using a mock authentication mode?▼

Yes, you can validate access control for GET, POST, PUT, and DELETE operations using mock authentication modes. This allows you to test protected API endpoints without needing a fully configured Keycloak backend.

How do I execute an authenticated request against a protected route?▼

To execute an authenticated request, run the test-auth-route.js script against your protected route. You must ensure your service configurations define the appropriate route prefixes and JWT secret beforehand.