setAuthToken(AuthKeysFixture::ADMIN_API_KEY); // to avoid $this->request->clientIp() to return null $_SERVER['REMOTE_ADDR'] = '::1'; $url = sprintf("%s/%s/%s", self::ENDPOINT, 'User', 'Registration'); $this->post( $url, [ 'email' => 'john@example.com', 'password' => 'Password12345!' ] ); $this->assertResponseOk(); $this->assertResponseContains('"email": "john@example.com"'); $this->assertDbRecordExists( 'Inbox', [ 'id' => 3, // hacky, but `data` is json string cannot verify the value because of the hashed password 'scope' => 'User', 'action' => 'Registration', ] ); //TODO: $this->assertRequestMatchesOpenApiSpec(); $this->assertResponseMatchesOpenApiSpec($url, 'post'); } public function testAddUserRegistrationInboxNotAllowedAsRegularUser(): void { $this->setAuthToken(AuthKeysFixture::REGULAR_USER_API_KEY); $url = sprintf("%s/%s/%s", self::ENDPOINT, 'User', 'Registration'); $this->post( $url, [ 'email' => 'john@example.com', 'password' => 'Password12345!' ] ); $this->assertResponseCode(405); $this->assertDbRecordNotExists('Inbox', ['id' => 3]); //TODO: $this->assertRequestMatchesOpenApiSpec(); $this->assertResponseMatchesOpenApiSpec($url, 'post'); } }