Agent Skills › netalertx/NetAlertX › netalertx-authentication-tokens

netalertx-authentication-tokens

GitHub

用于管理、检索、轮换和排查 NetAlertX 的 API 令牌及认证密钥。提供通过 Python 或容器命令获取令牌的方法，指导处理 401/403 错误及安全最佳实践。

.github/skills/authentication/SKILL.md netalertx/NetAlertX

Trigger Scenarios

API Token 泄露需立即轮换客户端出现 401/403 认证失败错误需要验证当前 API_TOKEN 配置是否正确排查同步节点间的令牌不一致问题

Install

npx skills add netalertx/NetAlertX --skill netalertx-authentication-tokens -g -y

More Options

Non-standard path

npx skills add https://github.com/netalertx/NetAlertX/tree/main/.github/skills/authentication -g -y

Use without installing

npx skills use netalertx/NetAlertX@netalertx-authentication-tokens

指定 Agent (Claude Code)

npx skills add netalertx/NetAlertX --skill netalertx-authentication-tokens -a claude-code -g -y

安装 repo 全部 skill

npx skills add netalertx/NetAlertX --all -g -y

预览 repo 内 skill

npx skills add netalertx/NetAlertX --list

SKILL.md

Frontmatter

{
    "name": "netalertx-authentication-tokens",
    "description": "Manage and troubleshoot API tokens and authentication-related secrets. Use this when you need to find, rotate, verify, or debug authentication issues (401\/403) in NetAlertX."
}

Authentication

Purpose ✅

Explain how to locate, validate, rotate, and troubleshoot API tokens and related authentication settings used by NetAlertX.

Pre-Flight Check (MANDATORY) ⚠️

Ensure the backend is running (use devcontainer services or ps/systemd checks).
Verify the API_TOKEN setting can be read with Python (see below).
If a token-related error occurs, gather logs (/tmp/log/app.log, nginx logs) before changing secrets.

Retrieve the API token (Python — preferred) 🐍

Always use Python helpers to read secrets to avoid accidental exposure in shells or logs:

from helper import get_setting_value
token = get_setting_value("API_TOKEN")

If you must inspect from a running container (read-only), use:

docker exec <CONTAINER_ID> python3 -c "from helper import get_setting_value; print(get_setting_value('API_TOKEN'))"

You can also check the runtime config file:

docker exec <CONTAINER_ID> grep API_TOKEN /data/config/app.conf

Rotate / Generate a new token 🔁

Preferred: Use the web UI (Settings / System) and click Generate for the API_TOKEN field — this updates the value safely and immediately.
Manual: Edit /data/config/app.conf and restart the backend if required (use the existing devcontainer service tasks).
After rotation: verify the value with get_setting_value('API_TOKEN') and update any clients or sync nodes to use the new token.

Troubleshooting 401 / 403 Errors 🔍

Confirm backend is running and reachable.
Confirm get_setting_value('API_TOKEN') returns a non-empty value.
Ensure client requests send the header exactly: Authorization: Bearer <API_TOKEN>.
Check /tmp/log/app.log and plugin logs (e.g., sync plugin) for "Incorrect API Token" messages.
If using multiple nodes, ensure the token matches across nodes for sync operations.
If token appears missing or incorrect, rotate via UI or update app.conf and re-verify.

Best Practices & Security 🔐

Never commit tokens to source control or paste them in public issues. Redact tokens when sharing logs.
Rotate tokens when a secret leak is suspected or per your security policy.
Use get_setting_value() in tests and scripts — do not hardcode secrets.