7b80a7408d
Squashed commits: [d5001fe] Refactor [8d8a23f] Add test for when authorization is denied [659fc56] Adjust password flow integration test
20 lines
940 B
Gherkin
20 lines
940 B
Gherkin
Feature: Access protected resources using password flow
|
|
Background:
|
|
Given a user with username "kent"
|
|
|
|
Scenario: Invalid credentials to token endpoint
|
|
When I register a new client
|
|
And I send a post request from that client to the password flow token endpoint using invalid credentials
|
|
Then I should receive an "invalid_grant" error
|
|
|
|
Scenario: Invalid bearer tokens sent
|
|
When I register a new client
|
|
And I send a post request from that client to the password flow token endpoint using "kent"'s credentials
|
|
And I use invalid bearer tokens to access user info
|
|
Then I should receive an "invalid_token" error
|
|
|
|
Scenario: Valid password flow
|
|
When I register a new client
|
|
And I send a post request from that client to the password flow token endpoint using "kent"'s credentials
|
|
And I use received valid bearer tokens to access user info
|
|
Then I should receive "kent"'s id, username, and email
|