AuthProbe

AuthProbe is a web app (with a lightweight CLI agent) that continuously tests authentication and authorization behavior across your APIs. You define critical user roles, tokens, and flows (login, refresh, revoke, scope changes), then AuthProbe runs scheduled and on-deploy probes against staging and production. It detects silent failures like misconfigured JWT claims, broken refresh token rotation, unexpected 401/403 spikes, expired signing keys, and permission regressions after policy changes. Results are presented as a timeline of auth health, with reproducible curl snippets and CI-friendly pass/fail gates. This is a traditional app with targeted AI assistance: AI helps generate role-based test matrices from your OpenAPI plus a few examples, but execution and reporting are deterministic. It’s not glamorous, but auth outages and permission regressions are expensive, frequent, and hard to catch with unit tests alone.