Operation POST /o/check_api_key is expected to check if an apiKey is valid or not. It should return an error whenever an apiKey is not valid or is expired.
Expected Behaviour
Returns a 401 Unauthorized when using an expired apiKey
Actual Behaviour
returns a 200 OK with exp field 0
e.g.
{ "user_name": "john.doe@example.com", "client_id": "song", **"exp": 0**, "scope": [ "song.READ", "song.WRITE" ] }
Description
Operation POST /o/check_api_key is expected to check if an apiKey is valid or not. It should return an error whenever an apiKey is not valid or is expired.
Expected Behaviour
Returns a 401 Unauthorized when using an expired apiKey
Actual Behaviour
returns a 200 OK with
exp
field0
e.g.{ "user_name": "john.doe@example.com", "client_id": "song", **"exp": 0**, "scope": [ "song.READ", "song.WRITE" ] }