Function TestScope_UpdateAgentIsAccountOnly

internal/httpapi/scope_test.go:112–124

TestScope_UpdateAgentIsAccountOnly: mutating agent config is barred for an agent-scoped credential even on its own bound agent.

(t *testing.T)

// TestScope_UpdateAgentIsAccountOnly: mutating agent config is barred for an
// agent-scoped credential even on its own bound agent.
func TestScope_UpdateAgentIsAccountOnly(t *testing.T) {
	srv := scopeTestServer(t)
	body := map[string]any{"name": "Renamed"}

	code, _ := sendJSON(t, "PATCH", srv.URL+"/v1/agents/support%40acme.com", "acct", body)
	if code != 200 {
		t.Errorf("account key PATCH agent: status %d, want 200", code)
	}
	code, resp := sendJSON(t, "PATCH", srv.URL+"/v1/agents/support%40acme.com", "agtSupport", body)
	if code != 403 || errCode(resp) != "forbidden" {
		t.Errorf("agent key PATCH own agent: status %d body %v, want 403 forbidden", code, resp)
	}
}

// TestScope_ProtectionPutIsAccountOnly: writing protection config is barred for
// an agent-scoped credential even on its own bound agent (#13). A valid body is