Invalid words should be rejected with a 403 error

Home > Api > Playing the game > Invalid words should be rejected with a 403 error

Report generated 08-01-2026 10:13

Playing The Game

Under 1 Second (Duration) Gameplay

Invalid words should be rejected with a 403 error

Steps

Outcome

POST http://localhost:37655/wordle/api/auth/register

Response

URL: http://localhost:37655/wordle/api/auth/register

Status code: 201

Content Type: application/json

Request Headers

Accept=*/*
Content-Type=application/json

Content Body

{
    "id": null,
    "username": "kieth.cruickshank",
    "password": "xaew2817",
    "email": "tpur89@gmail.com",
    "role": "ROLE_PLAYER",
    "country": "GB",
    "receiveUpdates": false
}

Response Headers

Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: text/plain;charset=UTF-8
Content-Length: 17
Date: Thu, 08 Jan 2026 10:13:40 GMT
Keep-Alive: timeout=60
Connection: keep-alive

Response Body

kieth.cruickshank

SUCCESS

003ms

POST http://localhost:37655/wordle/api/auth/login

Response

URL: http://localhost:37655/wordle/api/auth/login

Status code: 200

Content Type: application/json

Request Headers

Accept=*/*
Content-Type=application/json

Content Body

{
    "username": "kieth.cruickshank",
    "password": "xaew2817"
}

Response Headers

Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: application/json
Transfer-Encoding: chunked
Date: Thu, 08 Jan 2026 10:13:40 GMT
Keep-Alive: timeout=60
Connection: keep-alive

Response Body

{
    "accessToken": "eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJraWV0aC5jcnVpY2tzaGFuayIsImlhdCI6MTc2Nzg2NzIyMSwiZXhwIjoxNzY3OTUzNjIxfQ.pjLa1aHkr6bFX635fLEKmb-c5_soBBf-YbIc7ec6Fx4"
}

SUCCESS

005ms

Create a new game

SUCCESS

066ms

POST http://localhost:37655/wordle/api/game

Response

URL: http://localhost:37655/wordle/api/game

Status code: 200

Content Type: application/x-www-form-urlencoded

Request Headers

Authorization=Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJraWV0aC5jcnVpY2tzaGFuayIsImlhdCI6MTc2Nzg2NzIyMSwiZXhwIjoxNzY3OTUzNjIxfQ.pjLa1aHkr6bFX635fLEKmb-c5_soBBf-YbIc7ec6Fx4
Accept=*/*
Content-Type=application/x-www-form-urlencoded; charset=ISO-8859-1

Response Headers

Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: application/json
Transfer-Encoding: chunked
Date: Thu, 08 Jan 2026 10:13:40 GMT
Keep-Alive: timeout=60
Connection: keep-alive

Response Body

SUCCESS

005ms

Play the word 'ABCDE'

SUCCESS

126ms

POST http://localhost:37655/wordle/api/game/12/word

Response

URL: http://localhost:37655/wordle/api/game/12/word

Status code: 403

Content Type: text/plain

Request Headers

Authorization=Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJraWV0aC5jcnVpY2tzaGFuayIsImlhdCI6MTc2Nzg2NzIyMSwiZXhwIjoxNzY3OTUzNjIxfQ.pjLa1aHkr6bFX635fLEKmb-c5_soBBf-YbIc7ec6Fx4
Accept=*/*
Content-Type=text/plain; charset=ISO-8859-1

Content Body

ABCDE

Response Headers

Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: application/json
Transfer-Encoding: chunked
Date: Thu, 08 Jan 2026 10:13:40 GMT
Keep-Alive: timeout=60
Connection: keep-alive

Response Body

{
    "timestamp": "2026-01-08T10:13:41.420+00:00",
    "status": 403,
    "error": "Forbidden",
    "path": "/wordle/api/game/12/word"
}

SUCCESS

002ms

SUCCESS

0.65s

Serenity BDD version 5.0.4