john-okeefe
8321149957
- Device token regeneration tests (success, forbidden, not found, unauthorized) - OPDS authentication tests (Bearer token, query token) - Kobo sync tests with token authentication - Test various authentication methods and error cases
27 lines
665 B
Plaintext
27 lines
665 B
Plaintext
meta {
|
|
name: Regenerate Device Token - Forbidden
|
|
type: http
|
|
seq: 3
|
|
}
|
|
|
|
put {
|
|
url: {{base_url}}/api/devices/{{other_device_id}}/regenerate-token
|
|
body: none
|
|
auth: inherit
|
|
}
|
|
|
|
docs {
|
|
## Regenerate Device Token - Forbidden
|
|
|
|
Tests that users cannot regenerate tokens for devices belonging to other users.
|
|
|
|
**Expected Behavior:** Returns 403 Forbidden when trying to regenerate token for another user's device
|
|
|
|
**Status Codes:**
|
|
- 403: Forbidden (device belongs to different user)
|
|
|
|
**Use Case:** Verify authorization - users can only manage their own devices
|
|
|
|
**Setup:** Use Bearer token from user A, try to regenerate token for user B's device
|
|
}
|