Add: scenario for testing unauthorized access

1 files changed, 3 insertions, 2 deletions

diff --git a/yarns/300-workers.yarn b/yarns/300-workers.yarn
index 16bd108..c94f47c 100644
--- a/yarns/300-workers.yarn
+++ b/yarns/300-workers.yarn
@@ -66,7 +66,7 @@ controller API. It doesn't actually talk to the worker itself.
     THEN result has status code 200
     AND body matches { "workers": [] }
 
-    WHEN user makes request POST /workers
+    WHEN user makes request POST /workers with a valid token and body
     ... {
     ...     "worker": "obelix",
     ...     "protocol": "ssh",
@@ -121,7 +121,8 @@ controller API. It doesn't actually talk to the worker itself.
     ...     }
     ... }
 
-    WHEN user makes request PUT /workers/obelix
+    WHEN user makes request PUT /workers/obelix with a valid token 
+    ... and body
     ... {
     ...     "worker": "obelix",
     ...     "protocol": "local",