fix unit tests as well as missing code

2026-06-25 14:26:32 -04:00
parent fdfcd1f0e2
commit 940afe9319
115 changed files with 4554 additions and 290 deletions
@@ -49,7 +49,11 @@ class ApiBatch13AccountRecoveryCredentialChangeContractTest extends FullSurfaceE
            ]);

            $this->assertControlled($response, $method, $route->uri());
-            $this->assertNotContains($response->getStatusCode(), [200, 201]);
+            $this->assertNotContains(
+                $response->getStatusCode(),
+                [200, 201],
+                sprintf('%s %s unexpectedly allowed low-privilege credential mutation.', $method, $route->uri())
+            );
        }
    }
 }