Kyoo/auth/tests/invalid-password.hurl
2025-04-05 00:46:22 +02:00

65 lines
1.1 KiB
Plaintext

# Register a user for invalid password test
POST {{host}}/users
{
"username": "login-user",
"password": "password-login-user",
"email": "invalid-password-user@zoriya.dev"
}
HTTP 201
[Captures]
token: jsonpath "$.token"
GET {{host}}/jwt
Authorization: Bearer {{token}}
HTTP 200
[Captures]
jwt: jsonpath "$.token"
GET {{host}}/users/me
Authorization: Bearer {{jwt}}
HTTP 200
[Captures]
register_info: body
[Asserts]
jsonpath "$.username" == "login-user"
DELETE {{host}}/sessions/current
Authorization: Bearer {{jwt}}
HTTP 200
# Ensure we can login again & /users/me is the same
POST {{host}}/sessions
{
"login": "login-user",
"password": "password-login-user"
}
HTTP 201
[Captures]
token: jsonpath "$.token"
GET {{host}}/jwt
Authorization: Bearer {{token}}
HTTP 200
[Captures]
jwt: jsonpath "$.token"
GET {{host}}/users/me
Authorization: Bearer {{jwt}}
HTTP 200
[Asserts]
jsonpath "$.username" == "login-user"
body == {{register_info}}
# Invalid password login
POST {{host}}/sessions
{
"login": "login-user",
"password": "pass-invalid"
}
HTTP 403
DELETE {{host}}/users/me
Authorization: Bearer {{jwt}}
HTTP 200