Exchange tokens with TokenX for secure service-to-service authentication on NAIS.
npx skills add https://github.com/navikt/watson-sak-frontend --skill tokenx-auth
Please help me install this Agent Skill. Skill: tokenx-auth Source: https://github.com/navikt/watson-sak-frontend/tree/main/.opencode/skills/tokenx-auth Command: npx skills add https://github.com/navikt/watson-sak-frontend --skill tokenx-auth
TokenX-based service-to-service authentication eliminates the need to manage long-lived credentials by enabling a token exchange pattern to obtain downstream tokens for inter-service calls in a NAIS environment.
Configure the NAIS manifest to enable TokenX, generate a private JWK, and deploy a sample service that uses TokenX to request a downstream token before calling another service.
High-intent search queries and answers about installing and using this skill.
Service-to-service authentication eliminates long-lived credentials by using a token exchange pattern to obtain downstream tokens for inter-service calls. This approach secures backend services without exposing static secrets.
Token exchange works by generating a client assertion signed with a private JWK and trading it for a downstream token. The exchanged token is then attached to requests when calling other backend services.
To enable TokenX, you must configure your NAIS manifest to provision the necessary settings and generate a private JWK. This setup allows your service to securely request tokens for downstream calls.
Yes, TokenX integrates with Ktor to secure protected endpoints using inbound JWT validation. The integration patterns include testing guidance with MockOAuth2Server for end-to-end validation.
The best way to test JWT validation and token exchange locally is by using MockOAuth2Server. It provides end-to-end testing guidance to ensure your Ktor integration patterns function correctly before deployment.
Yes, you can cache exchanged tokens to improve both performance and resilience. Caching prevents redundant token exchange requests during frequent service-to-service calls.
naviktImplement Azure AD JWT validation and TokenX exchange for Nav applications.
ZeroGravitySkin-RonTest authenticated API routes with cookie-based JWT authentication.
KrismithReddy12Automates Playwright-based UI tests for local web applications and captures debugging artifacts.
psdjungpulzzeManage OAuth tokens and API keys for external services with Interactor.
