=== RUN   TestAPI_AccessTokenIsRefusedEverywhere
    routes_test.go:174: POST /report with an access token: 401 "Unauthorized"
    routes_test.go:174: GET /wait with an access token: 401 "Unauthorized"
    routes_test.go:174: POST /appliance/register with an access token: 400 "uuid and at least one MAC are required"
    routes_test.go:174: GET /appliance/poll with an access token: 404 "not found"
    routes_test.go:174: POST /host-report with an access token: 401 "Unauthorized"
    routes_test.go:174: POST /host-enroll with an access token: 400 "Invalid payload: customer_id required"
    routes_test.go:174: POST /admin/hosts with an access token: 403 "Forbidden: global key required"
    routes_test.go:174: PUT /hosts/h1/escrow with an access token: 401 "Unauthorized"
    routes_test.go:174: GET /hosts/h1/escrow with an access token: 401 "Unauthorized"
    routes_test.go:174: GET /hosts/h1/escrow/retained with an access token: 401 "Unauthorized"
    routes_test.go:174: PUT /hosts/h1/recovery-credential with an access token: 401 "Unauthorized"
    routes_test.go:174: GET /admin/hosts/h1/recovery-credential with an access token: 401 "Unauthorized"
    routes_test.go:174: PUT /admin/hosts/h1/recovery-mode with an access token: 403 "Forbidden: global key required"
    routes_test.go:174: DELETE /admin/hosts/h1/recovery-mode with an access token: 403 "Forbidden: global key required"
    routes_test.go:174: POST /hosts/h1/re-enroll with an access token: 403 "Forbidden: host not in recovery mode (operator must arm it)"
    routes_test.go:174: GET /hosts/h1/restore-directive with an access token: 401 "Unauthorized"
    routes_test.go:174: POST /hosts/h1/wg with an access token: 401 "Unauthorized"
    routes_test.go:174: POST /hosts/h1/pbs/consume-token with an access token: 401 "Unauthorized"
    routes_test.go:174: POST /hosts/h1/os-report with an access token: 401 "Unauthorized"
    routes_test.go:174: GET /hosts/h1/desired-state with an access token: 401 "Unauthorized"
    routes_test.go:174: GET /hosts/h1/jobs with an access token: 401 "Unauthorized"
    routes_test.go:174: DELETE /hosts/h1/jobs/j1 with an access token: 401 "Unauthorized"
    routes_test.go:174: PUT /admin/hosts/h1/desired-state with an access token: 403 "Forbidden: global key required"
    routes_test.go:174: POST /admin/hosts/h1/jobs with an access token: 403 "Forbidden: global key required"
    routes_test.go:174: PUT /admin/wg/endpoint with an access token: 403 "Forbidden: global key required"
    routes_test.go:174: GET /admin/wg/endpoint with an access token: 403 "Forbidden: global key required"
    routes_test.go:174: POST /admin/wg/peers with an access token: 403 "Forbidden: global key required"
    routes_test.go:174: DELETE /admin/wg/peers with an access token: 403 "Forbidden: global key required"
    routes_test.go:174: GET /admin/wg/peers with an access token: 403 "Forbidden: global key required"
    routes_test.go:174: PUT /admin/wg/operator-peer with an access token: 403 "Forbidden: global key required"
    routes_test.go:174: GET /admin/wg/operator-peer with an access token: 403 "Forbidden: global key required"
    routes_test.go:174: POST /claim/reset-request with an access token: 401 "Unauthorized"
    routes_test.go:174: POST /event with an access token: 401 "Unauthorized"
    routes_test.go:174: POST /mail with an access token: 401 "Unauthorized"
    routes_test.go:174: POST /notify with an access token: 401 "Unauthorized"
    routes_test.go:174: POST /preferences with an access token: 401 "Unauthorized"
    routes_test.go:174: GET /customers with an access token: 403 "Forbidden: global key required"
    routes_test.go:174: GET /customers/c1 with an access token: 403 "Forbidden: global key required"
    routes_test.go:174: GET /recovery/c1 with an access token: 401 "Unauthorized: X-Retrieval-Password header required"
    routes_test.go:174: GET /config/c1 with an access token: 401 "Unauthorized: X-Retrieval-Password header required"
    routes_test.go:174: POST /offsite/consume-password/c1 with an access token: 401 "unauthorized"
    routes_test.go:174: POST /offsite/register-key/c1 with an access token: 401 "unauthorized"
    routes_test.go:174: POST /offsite/confirm-key/c1 with an access token: 401 "unauthorized"
    routes_test.go:174: POST /offsite/move-aside/c1 with an access token: 401 "unauthorized"
    routes_test.go:174: POST /offsite/window-open/c1 with an access token: 401 "unauthorized"
    routes_test.go:174: POST /offsite/window-close/c1 with an access token: 401 "unauthorized"
    routes_test.go:174: POST /offsite/abandon-request/c1 with an access token: 401 "unauthorized"
    routes_test.go:174: POST /offsite/abandon-cancel/c1 with an access token: 401 "unauthorized"
    routes_test.go:174: POST /offsite/abandon-status/c1 with an access token: 401 "unauthorized"
    routes_test.go:174: GET /artifacts/c1 with an access token: 401 "Unauthorized: X-Retrieval-Password header required"
    routes_test.go:174: GET /assets/manifest with an access token: 401 "Unauthorized"
    routes_test.go:174: GET /assets/file/c1 with an access token: 401 "Unauthorized"
--- FAIL: TestAPI_AccessTokenIsRefusedEverywhere (0.04s)
FAIL
FAIL	gitea.dooplex.hu/admin/felhom-hub/internal/api	0.064s
FAIL
