Add test for access outside of docs

guillett · guillett · commit 536fe899d92d · 2025-07-28T10:36:38.000+02:00
diff --git a/test/server/lib/AccessTokens.ts b/test/server/lib/AccessTokens.ts
@@ -116,6 +116,13 @@ describe('AccessTokens', function() {
     assert.equal(result.status, 401);
     result = await fetch(home.serverUrl + `/api/docs/${docId}/tables/Table1/records?auth=${token}`);
     assert.equal(result.status, 200);
+
+    // Token is not used outside of /api/docs/${docId}
+    // Anonymous access generates valid responses
+    result = await fetch(home.serverUrl + `/api/profile/user?auth=${token}`);
+    assert.equal(result.status, 200);
+    const payload = await result.json()
+    assert.equal(payload.anonymous, true);
   });
 
 });
