diff --git a/lib/__tests__/plugin-http-post-denied-paths.test.ts b/lib/__tests__/plugin-http-post-denied-paths.test.ts index b9d9cadda..38faa20e3 100644 --- a/lib/__tests__/plugin-http-post-denied-paths.test.ts +++ b/lib/__tests__/plugin-http-post-denied-paths.test.ts @@ -61,7 +61,9 @@ describe('plugin http.post denied paths', () => { }); it('still reaches a plugin sidecar route', async () => { - await dispatchApiCall(plugin(['/api/translate']), 'http.post', ['/api/translate', { text: 'hi' }]); + // /api/translate used to be the example here; it is a third-party relay + // with the user's cookies and is denied now like the other app routes. + await dispatchApiCall(plugin(['/api/my-plugin/translate']), 'http.post', ['/api/my-plugin/translate', { text: 'hi' }]); expect(fetchSpy).toHaveBeenCalledTimes(1); });