Directus Integration
Using Impersona with Directus for JWT-based API testing.
Auth model
Directus supports JWT access tokens sent via Authorization: Bearer <token> for API requests.
Recommended strategy
Use Authorization header swap.
What to test
- Impersonated requests hit protected endpoints and return data based on the impersonated role
- Role changes in Directus update the access decisions you observe
- Token refresh flows still work (if your app uses them)
Notes
If your app also uses a custom auth header, ensure the Impersona swap targets the correct header.