From d071e50e4011d478a1f011d65dda3866d9847a6c Mon Sep 17 00:00:00 2001 From: Roy Klooster <76492458+royklo@users.noreply.github.com> Date: Thu, 10 Sep 2026 10:45:33 +0200 Subject: [PATCH] docs: drop the dev host from two comments MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Both comments named the dev API host while describing measured 403 behaviour. The environment is incidental to what they document, and that host serves the unreleased OpenAPI spec unauthenticated, so the module's own denylist in InforcerCommunity-MCP already treats the string as one to keep out. Comment text only — no behaviour change. Consistency suite: 199/199. Co-Authored-By: Claude Opus 5 (1M context) --- Tests/Consistency.Tests.ps1 | 2 +- module/Public/Connect-Inforcer.ps1 | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Tests/Consistency.Tests.ps1 b/Tests/Consistency.Tests.ps1 index 1c1ce6f..de20567 100644 --- a/Tests/Consistency.Tests.ps1 +++ b/Tests/Consistency.Tests.ps1 @@ -1862,7 +1862,7 @@ Describe 'Private helpers (via module scope)' { } It 'Rejects an expired key even though it uses the Inforcer 403 envelope' { - # Verbatim body from api-uk.dev with an expired key. errorCode is 'forbidden' — + # Verbatim body from a live environment with an expired key. errorCode is 'forbidden' — # identical to a scope denial — so only errors[] distinguishes the two. # Must NOT report Connected. Mock -ModuleName InforcerCommunity Invoke-WebRequest { diff --git a/module/Public/Connect-Inforcer.ps1 b/module/Public/Connect-Inforcer.ps1 index 473fd7b..9c9472c 100644 --- a/module/Public/Connect-Inforcer.ps1 +++ b/module/Public/Connect-Inforcer.ps1 @@ -189,7 +189,7 @@ if ($probeStatusCode -ge 200 -and $probeStatusCode -lt 300) { } # An expired / revoked / disabled key comes back in the SAME Inforcer app envelope as a -# scope denial — measured against api-uk.dev with an expired key, right down to +# scope denial — measured against a live environment with an expired key, right down to # errorCode 'forbidden', which a scope denial also returns: # # 403 {"data":null,"errorCode":"forbidden","success":false,