$client->
request('POST', '/api/oauth/token',
$authPayload);
static::
assertEquals(Response::HTTP_BAD_REQUEST,
$client->
getResponse()->
getStatusCode());
static::
assertNotFalse($client->
getResponse()->
getContent());
$response = \
json_decode($client->
getResponse()->
getContent(), true, 512, \JSON_THROW_ON_ERROR
);
static::
assertArrayHasKey('errors',
$response);
static::
assertCount(1,
$response['errors'
]);
static::
assertEquals(Response::HTTP_BAD_REQUEST,
$response['errors'
][0
]['status'
]);
static::
assertEquals(OAuthServerException::
invalidCredentials()->
getMessage(),
$response['errors'
][0
]['title'
]);
} public function testAccessWithInvalidToken(): void
{ $client =
$this->
getBrowser();
$client->
setServerParameters([ 'HTTP_Authorization' => 'Bearer invalid_token_provided',
]);
$client->
request('GET', '/api/tax'
);
static::
assertEquals(Response::HTTP_UNAUTHORIZED,
$client->
getResponse()->
getStatusCode());