blob: a135f145b385d9819158f6d481bcea5b27b5a687 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
|
Feature: Unauthenticated API endpoints
Most of the LEAP Provider API requires authentication.
However there are a few exceptions - mostly prerequisits of authenticating. This feature and the authentication feature document these.
Background:
Given I set headers:
| Accept | application/json |
| Content-Type | application/json |
@tempfile
Scenario: Fetch provider config
Given there is a config for the provider
When I send a GET request to "/provider.json"
Then the response status should be "200"
And the response should be that config
Scenario: Authentication required response
When I send a GET request to "/1/configs/config_id.json"
Then the response status should be "401"
And the response should have "error" with "not_authorized_login"
And the response should have "message"
Scenario: Authentication required for all other API endpoints (incomplete)
Given I am not logged in
When I send requests to these endpoints:
| GET | /1/configs/config_id.json |
| GET | /1/service |
| DELETE | /1/logout |
Then they should require authentication
|
