info:
  name: Register - Weak Password (400)
  type: http
  seq: 3

http:
  method: POST
  url: '{{base_url}}/api/auth/register'
  auth: inherit
  body:
    type: json
    data: |-
      {
        "email": "smoke-weak-attempts@tests.bookhoard.internal",
        "username": "smokeweakattempts",
        "password": "weak"
      }
settings:
  encodeUrl: true
  timeout: 0
  followRedirects: true
  maxRedirects: 5

runtime:
  scripts:
    - type: tests
      code: |-
        test("status is 400", function() {
          expect(res.status).to.eql(400);
        });

docs:
  content: |-
    # Register - Weak Password (400)

    Passwords below the configured complexity rules (see
    GET /api/auth/password-rules) must be rejected with 400. Repeats safely.
  type: text/markdown