info: name: Regenerate Device Token - Forbidden type: http seq: 3 http: method: PUT url: '{{base_url}}/api/devices/{{other_device_id}}/regenerate-token' auth: inherit body: type: none docs: |- ## Regenerate Device Token - Forbidden Tests that users cannot regenerate tokens for devices belonging to other users. **Expected Behavior:** Returns 403 Forbidden when trying to regenerate token for another user's device **Status Codes:** - 403: Forbidden (device belongs to different user) **Use Case:** Verify authorization - users can only manage their own devices **Setup:** Use Bearer token from user A, try to regenerate token for user B's device