26 lines
626 B
PHP
26 lines
626 B
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace Tests\Integration;
|
|
|
|
use Tests\Support\ApiTestCase;
|
|
use Tests\Support\DatabaseFixture;
|
|
|
|
final class LogoutTest extends ApiTestCase
|
|
{
|
|
public function testLogoutRevokesToken(): void
|
|
{
|
|
$this->loginAs(DatabaseFixture::ADMIN_USERNAME);
|
|
$token = $this->bearerToken;
|
|
$this->assertNotNull($token);
|
|
|
|
$logout = $this->api('POST', 'logout');
|
|
$this->assertOk($logout);
|
|
|
|
$this->bearerToken = $token;
|
|
$after = $this->api('GET', 'questionnaires');
|
|
$this->assertLegacyAuthError($after, 403, 'Invalid or expired token');
|
|
}
|
|
}
|