id: api-npm

info:
  name: NPM API Test
  author: zzeitlin
  severity: info
  reference: https://docs.npmjs.com/creating-and-viewing-access-tokens
  tags: token-spray,node,npm

self-contained: true
requests:
  - method: GET
    path:
      - "https://registry.npmjs.org/-/whoami"
    headers:
      Authorization: Bearer {{token}}

    matchers:
      - type: status
        status:
          - 401
          - 403
        negative: true