From 9b4c053a3038d8e09feb8bc63137273278f0c77a Mon Sep 17 00:00:00 2001
From: Rob Winch <rwinch@users.noreply.github.com>
Date: Fri, 7 May 2021 13:58:56 -0500
Subject: [PATCH] invalidCredentials

---
 .../EmployeeServiceApplicationTest.java       | 20 +++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/samples/employee-service/src/test/java/io/spring/sample/graphql/EmployeeServiceApplicationTest.java b/samples/employee-service/src/test/java/io/spring/sample/graphql/EmployeeServiceApplicationTest.java
index 54a32006..e37caa49 100644
--- a/samples/employee-service/src/test/java/io/spring/sample/graphql/EmployeeServiceApplicationTest.java
+++ b/samples/employee-service/src/test/java/io/spring/sample/graphql/EmployeeServiceApplicationTest.java
@@ -94,4 +94,24 @@ class EmployeeServiceApplicationTest {
                 .jsonPath("data.employees[0].salary").isEqualTo("42");
 
     }
+
+    @Test
+    void invalidCredentials() {
+        String query = "{" +
+                "  employees{ " +
+                "    name" +
+                "    salary" +
+                "  }" +
+                "}";
+
+
+        client.post().uri("")
+                .headers(h -> h.setBasicAuth("admin", "INVALID"))
+                .bodyValue("{  \"query\": \"" + query + "\"}")
+                .exchange()
+                .expectStatus().isUnauthorized()
+                .expectBody()
+                .isEmpty();
+
+    }
 }
\ No newline at end of file