diff --git a/code/Test_Definitions/NumberVerification_device_phone_number_share.feature b/code/Test_Definitions/NumberVerification_device_phone_number_share.feature index a3bb727..4d81091 100644 --- a/code/Test_Definitions/NumberVerification_device_phone_number_share.feature +++ b/code/Test_Definitions/NumberVerification_device_phone_number_share.feature @@ -87,4 +87,18 @@ Feature: Camara Number Verification API device phone number share And the response property "$.code" is "INVALID_TOKEN_CONTEXT" And the response property "$.message" is "Phone number cannot be deducted from access token context." - + @NumberVerification_phone_number_share205_must_have_used_network_authentication + Scenario: share phone number with valid access token but network authentication was not used + Given they use the base url + And the resource is "/device-phone-number" + And one of the scopes associated with the access token is number-verification:verify + When the HTTPS "GET" request is sent + And the connection the request is sent over originates from a device with NUMBERVERIFY_VERIFY_MATCH_PHONENUMBER1 + And the information, e.g. authentication method reference, associated with the access token indicates that network authentication was NOT used + And the response header "x-correlator" has same value as the request header "x-correlator" + And the response header "Content-Type" is "application/json" + And the response body complies with the OAS schema at "/components/schemas/ErrorInfo" + Then the response status code is 403 + And the response property "$.status" is 403 + And the response property "$.code" is "NUMBER_VERIFICATION.USER_NOT_AUTHENTICATED_BY_MOBILE_NETWORK" + And the response property "$.message" is "The subscription must be identified via the mobile network to use this servicet."