api-demo.http

# Obtain an OTP token (and send OTP)
POST http://localhost:8081/oauth/token
Authorization: Basic mobile-client secret
Content-Type: application/x-www-form-urlencoded

grant_type=otp&phone_number=123456789

> {%
  var otpToken = response.body.otp_token;
  client.global.set("otpToken", otpToken);

  client.test("Obtain a short-living token for OTP", function() {
    client.assert(response.status === 403, "Response status is 403");
  });
%}

###

# Exchange OTP for a regular tokens
POST http://localhost:8081/oauth/token
Authorization: Basic mobile-client secret
Content-Type: application/x-www-form-urlencoded

grant_type=otp&otp=123456&scope=api&otp_token={{otpToken}}

> {%
  var accessToken = response.body.access_token;
  client.global.set("accessToken", accessToken);
  var refreshToken = response.body.refresh_token;
  client.global.set("refreshToken", refreshToken);

  client.test("Exchange OTP for regular tokens", function() {
    client.assert(response.status === 200, "Response status is 200");
  });
%}

###

# Get some resources
GET http://localhost:8082/api/resources
Authorization: Bearer {{accessToken}}
Accept: application/json

> {%
  client.test("Get some resources", function() {
    client.assert(response.status === 200, "Response status is 200");
  });
%}

###

# Refresh regular tokens
POST http://localhost:8081/oauth/token
Authorization: Basic mobile-client secret
Content-Type: application/x-www-form-urlencoded

grant_type=refresh_token&scope=api&refresh_token={{refreshToken}}

> {%
  var accessToken = response.body.access_token;
  client.global.set("accessToken", accessToken);
  var refreshToken = response.body.refresh_token;
  client.global.set("refreshToken", refreshToken);

  client.test("Refresh regular tokens", function() {
    client.assert(response.status === 200, "Response status is 200");
  });
%}

###

# Auth-service health check
GET http://localhost:8081/actuator/health

> {%
  client.test("Auth-service health check", function() {
    client.assert(response.status === 200, "Response status is 200");
  });
%}

###

# Resource-service health check
GET http://localhost:8082/actuator/health

> {%
  client.test("Auth-service health check", function() {
    client.assert(response.status === 200, "Response status is 200");
  });
%}

###

# JWK set access
GET http://localhost:8081/.well-known/jwks.json

> {%
  client.test("Check JWK set endpoint access", function() {
    client.assert(response.status === 200, "Response status is 200");
  });
%}

###