# Make sure application enforces https

GET http://music-library.claudio-ortolina.org
HTTP 301
Location: https://music-library.claudio-ortolina.org/

# API requires a valid token

# GET latest record
GET https://music-library.claudio-ortolina.org/api/v1/collection/latest
Content-Type: application/json
HTTP 401

GET https://music-library.claudio-ortolina.org/api/v1/collection/latest
Content-Type: application/json
Authorization: Bearer {{api_token}}
HTTP 200

[Asserts]
# Record data is returned - one property is enough
jsonpath "$.title" != null

[Captures]
cover-url: jsonpath "$.cover_url"

# GET cover image
GET {{cover-url}}
HTTP 401

GET {{cover-url}}
Authorization: Bearer {{api_token}}
HTTP 200

# Dev routes are behind authentication

# Live Dashboard
GET https://music-library.claudio-ortolina.org/dev/dashboard
HTTP 302
Location: /login

# Oban
GET https://music-library.claudio-ortolina.org/dev/oban
HTTP 302
Location: /login

# Bot scanner paths are blocked

# WordPress admin
GET https://music-library.claudio-ortolina.org/wp-admin/
HTTP 404

# WordPress directory
GET https://music-library.claudio-ortolina.org/wordpress/
HTTP 404

# Dotenv file
GET https://music-library.claudio-ortolina.org/.env
HTTP 404

# XML-RPC
GET https://music-library.claudio-ortolina.org/xmlrpc.php
HTTP 404