- Test password complexity requirements - Test account lockout mechanism - Test rate limiting functionality - Test JWT expiration (1 hour) - Test refresh token expiration (7 days) - Test password requirements list - Verify transaction manager and error handler types - All tests passing
86 lines
2.0 KiB
Plaintext
86 lines
2.0 KiB
Plaintext
{
|
|
"meta": {
|
|
"name": "Logout User",
|
|
"type": "http",
|
|
"seq": 1,
|
|
"auth": "Inherit"
|
|
},
|
|
"request": {
|
|
"method": "POST",
|
|
"header": [
|
|
{
|
|
"name": "Content-Type",
|
|
"value": "application/json"
|
|
}
|
|
],
|
|
"body": {
|
|
"type": "json",
|
|
"json": {
|
|
"refresh_token": "{{refreshToken}}"
|
|
}
|
|
},
|
|
"url": {
|
|
"raw": "{{baseUrl}}/api/auth/logout",
|
|
"host": ["{{baseUrl}}"],
|
|
"path": ["api", "auth", "logout"]
|
|
},
|
|
"description": "Logs out the user by revoking their refresh token. If no refresh token is provided, the request succeeds but no token is revoked."
|
|
},
|
|
"response": [
|
|
{
|
|
"name": "Success Response",
|
|
"originalRequest": {
|
|
"method": "POST",
|
|
"header": [],
|
|
"body": {
|
|
"type": "json",
|
|
"json": {
|
|
"refresh_token": "valid-refresh-token-uuid"
|
|
}
|
|
},
|
|
"url": {
|
|
"raw": "{{baseUrl}}/api/auth/logout",
|
|
"host": ["{{baseUrl}}"],
|
|
"path": ["api", "auth", "logout"]
|
|
}
|
|
},
|
|
"status": 200,
|
|
"code": 200,
|
|
"header": [
|
|
{
|
|
"name": "content-type",
|
|
"value": "application/json"
|
|
}
|
|
],
|
|
"body": "{\n \"message\": \"logged out successfully\"\n}",
|
|
"description": "Successfully logged out and refresh token revoked."
|
|
},
|
|
{
|
|
"name": "Logout Without Refresh Token",
|
|
"originalRequest": {
|
|
"method": "POST",
|
|
"header": [],
|
|
"body": {
|
|
"type": "json",
|
|
"json": {}
|
|
},
|
|
"url": {
|
|
"raw": "{{baseUrl}}/api/auth/logout",
|
|
"host": ["{{baseUrl}}"],
|
|
"path": ["api", "auth", "logout"]
|
|
}
|
|
},
|
|
"status": 200,
|
|
"code": 200,
|
|
"header": [
|
|
{
|
|
"name": "content-type",
|
|
"value": "application/json"
|
|
}
|
|
],
|
|
"body": "{\n \"message\": \"logged out successfully\"\n}",
|
|
"description": "Logout succeeds even without a refresh token."
|
|
}
|
|
]
|
|
}
|