summaryrefslogtreecommitdiff
path: root/features/unauthenticated.feature
blob: b810bea49ca63631be8aa2cd99d19ecb13eae6aa (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
Feature: Unauthenticated API endpoints

  Most of the LEAP Provider API requires authentication.
  However there are a few exceptions - mostly prerequisits of authenticating. This feature and the authentication feature document these.

  Background:
    Given I set headers:
      | Accept       | application/json |
      | Content-Type | application/json |

  @tempfile
  Scenario: Fetch provider config
    Given the provider config is:
      """
      {"config": "me"}
      """
    When I send a GET request to "/provider.json"
    Then the response status should be "200"
    And the response should be:
      """
      {"config": "me"}
      """

  Scenario: Authentication required for all other API endpoints
    When I send a GET request to "/1/configs"
    Then the response status should be "401"
    And the response should be:
      """
      {"error": "Please log in to perform that action."}
      """