route-tester

Test authenticated routes using cookie-based JWT tokens. Use test-auth-route.js or mock auth for development.

• Tests authenticated API routes with cookie-based JWT auth
• Uses Keycloak for SSO and refresh_token cookies
• Supports POST/PUT/DELETE and GET requests
• Includes mock auth for development only

• Automatically handles token retrieval and signing
• Outputs full curl command for manual testing
• Uses refresh_token cookie, not Bearer headers
• Mock auth bypasses Keycloak (dev only)
• Requires correct service port and route prefix
• Verifies response status and data
• Checks database changes post-test
• Critical: mock auth only in dev, not production

1. 1.Run test-auth-route.js with correct URL and method
2. 2.Use curl with -b refresh_token=<token> for manual testing
3. 3.Set MOCK_AUTH=true in .env for dev mock auth
4. 4.Verify response status and data
5. 5.Check database changes after data-modifying routes