<?php

use Tests\TestCase;

test('api v1 documentation is publicly available', function () {
    /** @var TestCase $this */
    $this->get('/docs/api/v1')
        ->assertOk()
        ->assertHeader('content-type', 'application/yaml; charset=UTF-8')
        ->assertSee('openapi: 3.1.0', false)
        ->assertSee('/press-releases:', false)
        ->assertSee('legacy API keys are no longer supported', false);
});

test('the public api page documents the real endpoints', function () {
    /** @var TestCase $this */
    $this->get('https://pressekonto.test/de/api')
        ->assertSuccessful()
        ->assertSeeText('API-Dokumentation')
        ->assertSee('/press-releases/{id}/submit', false)
        ->assertSee('press-releases:write', false)
        // Keine Fantasie-Features mehr (OAuth/SDKs/Webhooks gab es nie).
        ->assertDontSee('OAuth 2.0')
        ->assertDontSee('api.example.com');
});