Testing API

Creates a synthetic customer inside the selected test run. Email uniqueness is scoped to that run.

curl -X POST "/api/v1/auth/register" \
+  -H "Content-Type: application/json" -H "X-Test-Run-Id: poc-run-001" \
+  -d '{"firstName":"Taylor","lastName":"Reed","email":"taylor.reed@example.com","password":"Testing123!","confirm":"Testing123!"}'

{
  "id": "13d6e43b-409a-4fb3-846c-16b80a25c472",
  "email": "taylor.reed@example.com",
  "firstName": "Taylor",
  "lastName": "Reed"
}

Authenticates a synthetic customer for one hour and merges items from the matching anonymous client cart.

curl -X POST "/api/v1/auth/login" \
+  -H "Content-Type: application/json" -H "X-Test-Run-Id: poc-run-001" -H "X-Client-Id: browser-001" \
+  -d '{"email":"customer@example.com","password":"Password123!"}'

{
  "token": "550e8400-e29b-41d4-a716-446655440000",
  "expiresAt": 1789071000000,
  "user": {
    "id": "seed-poc-run-001",
    "email": "customer@example.com",
    "firstName": "Alex",
    "lastName": "Morgan"
  },
  "cartMerged": true
}

Deletes the supplied bearer session. Repeating the request is safe and still returns success.

curl -X POST "/api/v1/auth/logout" -H "Authorization: Bearer <token>"

{
  "signedOut": true
}

Adds the requested quantity to any existing quantity and records the current price snapshot.

curl -X POST "/api/v1/cart" -H "Content-Type: application/json" \
+  -H "X-Test-Run-Id: poc-run-001" -H "X-Client-Id: browser-001" -d '{"bookId":10,"quantity":1}'

{
  "ownerKey": "guest:browser-001",
  "items": [
    {
      "book": {
        "id": 10,
        "title": "The Quiet Algorithm",
        "price": 15.99
      },
      "quantity": 1,
      "priceSnapshot": 15.99
    }
  ],
  "itemCount": 1,
  "subtotal": 15.99,
  "discount": 0,
  "shipping": 4.99,
  "total": 20.98
}

Validates and attaches a promotion to the current cart. BOOK10 is valid; EXPIRED20 and unknown values exercise negative paths.

curl -X POST "/api/v1/promotions/validate" -H "Content-Type: application/json" \
+  -H "X-Test-Run-Id: poc-run-001" -H "X-Client-Id: browser-001" -d '{"code":"BOOK10"}'

{
  "code": "BOOK10",
  "valid": true,
  "discountPercent": 10,
  "message": "10% discount applied."
}

Checks delivery fields, current inventory and price snapshots, then creates one idempotent order and clears the cart.

curl -X POST "/api/v1/orders" -H "Content-Type: application/json" \
+  -H "Authorization: Bearer <token>" -H "X-Test-Run-Id: poc-run-001" -H "Idempotency-Key: checkout-001" \
+  -d '{"address":"10 Test Avenue","city":"Boston","postal":"02108"}'

{
  "id": "BN-2026-483921",
  "status": "Confirmed",
  "subtotal": 31.98,
  "discount": 3.2,
  "shipping": 4.99,
  "total": 33.77,
  "itemCount": 2,
  "idempotentReplay": false
}

Cancels an authenticated customer's order and restores its inventory. Repeating a successful cancellation is idempotent.

curl -X POST "/api/v1/orders/BN-2026-483921/cancel" \
+  -H "X-Test-Run-Id: poc-run-001" -H "Authorization: Bearer <token>"

{
  "id": "BN-2026-483921",
  "status": "Cancelled",
  "stockRestored": true
}

Sets one deterministic failure or data mode and resets its request counter for the selected run.

curl -X POST "/api/v1/test/scenario" -H "Content-Type: application/json" \
+  -H "X-Test-Run-Id: poc-run-001" -H "X-Test-Admin-Key: <test-admin-key>" -d '{"scenario":"slow-api","settings":{"delayMs":3500}}'

{
  "runId": "poc-run-001",
  "scenario": "slow-api",
  "settings": {
    "delayMs": 3500
  },
  "requestCount": 0,
  "updatedAt": 1789069000000
}

Deletes users, sessions, carts, inventory overrides, orders and scenario state only for the selected run.

curl -X POST "/api/v1/test/reset" -H "X-Test-Run-Id: poc-run-001" -H "X-Test-Admin-Key: <test-admin-key>"

{
  "reset": true,
  "runId": "poc-run-001",
  "scenario": "normal",
  "message": "All synthetic state for this test run was removed."
}