You can test that the advice works correctly with cURL or Postman.
Issue a GET request to
https://localhost:7443/meme-game/api/v1/users/user.0/answers/2
as user.660. The following cURL command makes such a
request.
curl --insecure -X GET \
https://localhost:7443/meme-game/api/v1/users/user.0/answers/2 \
-H 'Authorization: Bearer {"active": true, "sub": "user.660"}'Expect a 451 Unavailable For Legal Reasons response with the
following body.
{
"errorMessage": "Restricted: Not permitted per regulation",
"status": 451
}