25 lines
707 B
YAML
25 lines
707 B
YAML
info:
|
|
name: Regenerate Device Token - Forbidden
|
|
type: http
|
|
seq: 3
|
|
http:
|
|
method: PUT
|
|
url: '{{base_url}}/api/devices/{{other_device_id}}/regenerate-token'
|
|
auth: inherit
|
|
body:
|
|
type: none
|
|
|
|
docs: |-
|
|
## Regenerate Device Token - Forbidden
|
|
|
|
Tests that users cannot regenerate tokens for devices belonging to other users.
|
|
|
|
**Expected Behavior:** Returns 403 Forbidden when trying to regenerate token for another user's device
|
|
|
|
**Status Codes:**
|
|
- 403: Forbidden (device belongs to different user)
|
|
|
|
**Use Case:** Verify authorization - users can only manage their own devices
|
|
|
|
**Setup:** Use Bearer token from user A, try to regenerate token for user B's device
|