Development User Injection

During local dev, c8y-nitro can inject the configured development user into requests so role checks and tenant checks behave like a real authenticated call.

Setup

The module uses the development credentials from your .env file:

C8Y_DEVELOPMENT_TENANT=t12345
C8Y_DEVELOPMENT_USER=your-username
C8Y_DEVELOPMENT_PASSWORD=your-password

This enables testing of access control middlewares like hasUserRequiredRole() and isUserFromAllowedTenant() without needing to manually set authorization headers.

When To Turn It Off

Disable this when another local layer already provides the real auth context, for example a local proxy or gateway setup that forwards the incoming user session.

Disabling

If you run a local proxy that already forwards a user session or authorization header, disable this middleware:

export default defineNitroConfig({
  c8y: {
    dev: {
      injectUser: false,
    },
  },
  modules: [c8y()],
})

When disabled, c8y-nitro does not register the development user injection middleware, so incoming auth headers stay untouched.

Managing Development User Roles

Use the CLI roles command to assign or remove your microservice's custom roles to your development user:

pnpm dlx c8y-nitro roles

This interactive command lets you select which roles from your manifest to assign to your development user for testing.