Test authenticated HTTP routes using cookie-based refresh_token JWTs.
npx skills add https://github.com/joshka0/foxctl --skill route-tester-joshka0
Please help me install this Agent Skill. Skill: route-tester Source: https://github.com/joshka0/foxctl/tree/main/docs/knowledge/route-tester Command: npx skills add https://github.com/joshka0/foxctl --skill route-tester-joshka0
Route testing becomes slow and error-prone when endpoints require authenticated cookie-based JWTs, especially during debugging of 401/403 failures and verification of request/response behavior.
Use the route-tester skill to test an authenticated endpoint by running the provided test-auth-route.js command against your full route URL with the expected HTTP method and JSON body.
High-intent search queries and answers about installing and using this skill.
Testing cookie-based JWT authenticated HTTP routes involves generating a refresh token, signing it with your JWT secret, sending it as an authenticated cookie, and validating the request and response payloads. This Skill automates that exact workflow.
Yes, you can use development-only mock authentication headers for fast iteration during Keycloak route testing. This allows you to bypass the full Keycloak token generation process while still validating your endpoint logic.
Debugging 401 and 403 API failures on cookie authenticated routes is best handled by generating a valid refresh token, sending the authenticated cookie request, and reviewing the reported status, body, and reproduction instructions to identify the issue.
Yes, this route testing approach supports GET, POST, PUT, and DELETE testing scenarios. You can reproduce curl commands, handle query parameters, and validate request and response payloads across your service ports and route prefixes.
To generate a Keycloak refresh token for API route validation, you use the test-auth-route.js command against your route URL. This generates the token cookie required to authenticate your request and validate the response.
Route tests fail with Bearer headers when endpoints require a refresh_token cookie for authentication. You must sign a Keycloak-issued token with your configured JWT secret and send it as an authenticated cookie to match the real auth flow.
mwathibenAutomate authenticated route testing with cookie-based JWT and Keycloak tokens.
InverterNetworkDiagnose REST and GraphQL API failures through layered verification with curl and Python.
blencorpTest HTTP API routes across frameworks with authentication coverage.
diet103Test authenticated API routes using cookie-based JWT from Keycloak.
