✅ Badge_Renders_ExpectedBackground_Variant(variant: Danger, expectedClass: "bg-red-600")
✅ Badge_Renders_ExpectedBackground_Variant(variant: Info, expectedClass: "bg-blue-600")
✅ Badge_Renders_ExpectedBackground_Variant(variant: Primary, expectedClass: "bg-blue-600")
✅ Badge_Renders_ExpectedBackground_Variant(variant: Success, expectedClass: "bg-green-600")
✅ Badge_Renders_ExpectedBackground_Variant(variant: Warning, expectedClass: "bg-yellow-600")
✅ Badge_Renders_ExpectedText
✅ Badge_Renders_WhiteText(variant: Danger)
✅ Badge_Renders_WhiteText(variant: Info)
✅ Badge_Renders_WhiteText(variant: Primary)
✅ Badge_Renders_WhiteText(variant: Success)
✅ Badge_Renders_WhiteText(variant: Warning)

✅ AllApplicationPages_Inherit_BaseApplicationPage
✅ AllApplicationPages_Inherit_BaseApplicationPage_WhenPathMatches
✅ BaseApplicationPage_Has_HasAppHandler_AuthorizationPolicy

✅ LogPage_DoesRendersEmptyTable_WhenEventsIsEmpty

✅ RenderComponent_Renders_ExpectedId

✅ RenderComponent_Renders_ExpectedId

✅ AllowList_Renders_Nothing_WhenAllowListEmpty
✅ AllowList_Renders_SortedAlphabetically
✅ Authenticators_RedirectsTo_Settings_WhenAttestationIsNotAllowed

✅ ApiKeysSection_DoesNotRender_WhenApplicationIsPendingDeletion
✅ ApiKeysSection_Renders_ExpectedIcons_WhenApiKeyIsLocked
✅ ApiKeysSection_Renders_LockIcon_WhenApiKeyIsUnlocked
✅ ApiKeysSection_Renders_WhenApplicationIsNotPendingDeletion

✅ Color_Is_Serialized_As_Hex
✅ Enums_Are_Serialized_As_Strings
✅ Properties_Are_Serialized_With_CamelCase
✅ Properties_With_Null_Values_Are_Not_Serialized

✅ Write_ConvertsColorToHexFormat
✅ Write_ConvertsColorWithoutAlphaToHexFormat

✅ IsValid_ReturnsFalse_WhenLengthIsTooLong
✅ IsValid_ReturnsFalse_WhenLengthIsTooShort1
✅ IsValid_ReturnsFalse_WhenLengthIsTooShort2
✅ IsValid_ReturnsTrue_WhenLengthIs3
✅ IsValid_ReturnsTrue_WhenLengthIs4
✅ IsValid_ReturnsTrue_WhenLowercaseHexIsValid
✅ IsValid_ReturnsTrue_WhenRgbaHexIsValid
✅ IsValid_ReturnsTrue_WhenRgbHexIsValid
✅ IsValid_ReturnsTrue_WhenUppercaseHexIsValid

✅ BreadCrumb_Renders_AllMiddleItemsButAsLinks
✅ BreadCrumb_Renders_FirstElementAsLink
✅ BreadCrumb_Renders_LastItemAsText
✅ BreadCrumb_Renders_Nothing_WhenItemsIsNull
✅ BreadCrumb_Renders_Nothing_WhenNoItems
✅ BreadCrumb_Renders_Nothing_WhenOnlyOneItem

✅ NavMenu_Renders_EmptySidebar_WhenNotAuthenticated
✅ NavMenu_Renders_ExpectedApplicationLinks_ApplicationIsNotPendingDeletion
✅ NavMenu_Renders_ExpectedApplicationLinks_ApplicationIsPendingDeletion
✅ NavMenu_Renders_Sidebar_WhenAuthenticated

✅ LocalDateTime_Applies_Nonce_OnScriptTag
✅ LocalDateTime_Renders_ExpectedMarkup

✅ SimpleAlert_Applies_HiddenClass_WhenIsHiddenIsTrue
✅ SimpleAlert_DoesNotApply_HiddenClass_WhenIsHiddenIsFalse
✅ SimpleAlert_Renders_Actions_WithDefaultText
✅ SimpleAlert_Renders_Actions_WithExpectedIdAttributes
✅ SimpleAlert_Renders_Description
✅ SimpleAlert_Renders_IdAttribute
✅ SimpleAlert_Renders_Title

✅ SecureScript_Renders_InlineScript
✅ SecureScript_Renders_NonceAttribute
✅ SecureScript_Renders_ScriptFile
✅ SecureScript_Renders_WithoutNonceAttribute

✅ SecureStylesheet_DoesNot_NonceAttributeForCssFile
✅ SecureStylesheet_Renders_LinkTag_ForFile
✅ SecureStylesheet_Renders_LinkTag_ForInlineCss
✅ SecureStylesheet_Renders_NonceAttributeForInlineCss

✅ SimpleCardsStats_Renders_3Cards
✅ SimpleCardsStats_Renders_ExpectedCardsWithExpectedClasses
✅ SimpleCardsStats_Renders_ExpectedCardsWithExpectedContent
✅ SimpleCardsStats_Renders_Nothing_WhenItemsAreEmpty

✅ TrendingCardsStats_Renders_3Cards
✅ TrendingCardsStats_Renders_ExpectedCardsWithExpectedClasses
✅ TrendingCardsStats_Renders_ExpectedCardsWithExpectedContent
✅ TrendingCardsStats_Renders_Nothing_WhenItemsAreEmpty

✅ Ctor_SetsExpectedAmountOfPages_WhenLastPageContainsLessItemsThanPageSize
✅ Ctor_ShouldSetCurrentIndex
✅ Ctor_ShouldSetPages
✅ Ctor_ShouldSetTotalPages

✅ Table_Renders_EmptyColumnHeaders
✅ Table_Renders_ExpectedColumnHeaders

✅ CustomValidationErrors_RendersNothing_WhenNoValidationMessages
✅ CustomValidationErrors_RendersValidationMessages_WhenValidationMessagesExist

✅ IsAppIdAvailableAsync_Returns_ExpectedResult_FromPasswordlessApiException
✅ IsAppIdAvailableAsync_Returns_Ok(isAvailable: False)
✅ IsAppIdAvailableAsync_Returns_Ok(isAvailable: True)

✅ ApiPublicGivesHelpfulAdviceAsync(input: "", details: "A valid 'ApiKey' header is required.")
✅ ApiPublicGivesHelpfulAdviceAsync(input: "missing", details: "A valid 'ApiKey' header is required.")
✅ ApiPublicGivesHelpfulAdviceAsync(input: "register_123", details: "A register token was supplied instead of your 'Api"···)
✅ ApiPublicGivesHelpfulAdviceAsync(input: "secret-header-instead", details: "A 'ApiSecret' header was supplied when a 'ApiKey' "···)
✅ ApiPublicGivesHelpfulAdviceAsync(input: "somethingrandom", details: "We don't recognize the value you supplied for your"···)
✅ ApiPublicGivesHelpfulAdviceAsync(input: "test:secret:123", details: "Your ApiKey header contained a ApiSecret instead o"···)
✅ ApiPublicGivesHelpfulAdviceAsync(input: "verify_123", details: "A verify token was supplied instead of your 'ApiKe"···)
✅ ApiSecretGivesHelpfulAdviceAsync(input: "", details: "A valid 'ApiSecret' header is required.")
✅ ApiSecretGivesHelpfulAdviceAsync(input: "missing", details: "A valid 'ApiSecret' header is required.")
✅ ApiSecretGivesHelpfulAdviceAsync(input: "public-header-instead", details: "A 'ApiKey' header was supplied when a 'ApiSecret' "···)
✅ ApiSecretGivesHelpfulAdviceAsync(input: "register_13", details: "A register token was supplied instead of your 'Api"···)
✅ ApiSecretGivesHelpfulAdviceAsync(input: "somethingrandom", details: "We don't recognize the value you supplied for your"···)
✅ ApiSecretGivesHelpfulAdviceAsync(input: "test:public:123", details: "Your ApiSecret header contained a public ApiKey in"···)
✅ ApiSecretGivesHelpfulAdviceAsync(input: "verify_123", details: "A verify token was supplied instead of your 'ApiSe"···)
✅ ValidateThatEndpointsHaveProtectionAsync
✅ ValidateThatInvalidApiSecretThrowsAsync
✅ ValidateThatMissingApiSecretThrowsAsync

✅ I can check whether an app id is available
✅ I can check whether an app id is unavailable
✅ I can create a new public key
✅ I can create a new secret key
✅ I can create an account with a valid name
✅ I can create an app and its features will be set correctly
✅ I can delete an api key
✅ I can disable magic links
✅ I can disable the generate sign in token endpoint
✅ I can enable magic links
✅ I can enable the generate sign in token endpoint
✅ I can get all api keys for my application
✅ I can get an apps features
✅ I can lock an api key
✅ I can manage an apps features
✅ I can not set the event logging retention period to an invalid value(invalidRetentionPeriod: -1)
✅ I can not set the event logging retention period to an invalid value(invalidRetentionPeriod: 91)
✅ I can set event logging retention period
✅ I can unlock a locked api key
✅ I cannot create an account with an invalid name(name: "1")
✅ I cannot create an account with an invalid name(name: "a")

✅ I can delist authenticators when attestation is allowed
✅ I can retrieve configured authenticators when attestation is allowed
✅ I can retrieve configured authenticators with expected result
✅ I can whitelist authenticators when attestation is allowed
✅ I receive forbidden when delisting authenticators when attestation is not allowed
✅ I receive forbidden when retrieving configured authenticators when attestation is not allowed
✅ I receive forbidden when whitelisting authenticators when attestation is not allowed

✅ I am told to pass the user id when getting credential list using get with secret key
✅ I am told to pass the user id when getting credential list using post with secret key
✅ I can view a list of registered users credentials

✅ I can view the event for a user creating an api key
✅ I can view the event for a user retrieving the api keys
✅ I can view the event for deleting an api key
✅ I can view the event for disabling magic links
✅ I can view the event for disabling the generate sign in token endpoint
✅ I can view the event for enabling magic links
✅ I can view the event for enabling the generate sign in token endpoint
✅ I can view the event for locking an api key
✅ I can view the event for unlocking an api key
✅ I can view the event for using a disabled api secret
✅ I can view the event for using a disabled public key
✅ I can view the event for using a non existent api key
✅ I can view the event for using a non existent api secret

✅ I can send a magic link email
✅ I can send a magic link email after enough time passed since the monthly quota was exceeded
✅ I can send a magic link email to a non admin address if the application is old enough
✅ I can send a magic link email to an admin address even if the application is too new
✅ I cannot send a magic link email if the feature is disabled
✅ I cannot send a magic link email to a non admin address if the application is too new
✅ I cannot send too many magic link emails in a month
✅ I cannot send too many magic link emails in a short time
✅ I receive a validation error when an invalid url is sent
✅ I receive a validation error when the url does not contain the token template

✅ I can use supported attestation methods to register a new user when attestation is allowed(attestation: "direct", expectedAttestation: Direct)
✅ I can use supported attestation methods to register a new user when attestation is allowed(attestation: "indirect", expectedAttestation: Indirect)
✅ I can use supported attestation methods to register a new user when attestation is allowed(attestation: "none", expectedAttestation: None)
✅ I can use supported none attestation method to register a new user when attestation is disallowed(attestation: "none", expectedAttestation: None)
✅ I cannot use other than none attestation method to register a new user when attestation is disallowed(attestation: "direct")
✅ I cannot use other than none attestation method to register a new user when attestation is disallowed(attestation: "indirect")

✅ I can retrieve the credential create options and session token for creating a new user
✅ I can retrieve token to start registration
✅ I can use a passkey to register a new user

✅ InvalidUserIdReturnsError(userid: "")
✅ InvalidUserIdReturnsError(userid: null)
✅ InvalidUsernameReturnsError(input: "")
✅ InvalidUsernameReturnsError(input: null)
✅ NoneAssertionIsAccepted(attestation: "")
✅ NoneAssertionIsAccepted(attestation: "none")
✅ NoneAssertionIsAccepted(attestation: "None")
✅ OtherAssertionIsNotAccepted(attestation: "enterprise")
✅ OtherAssertionIsNotAccepted(attestation: "other")
✅ UserIdAndDisplayNameIsTheOnlyRequiredProperties

✅ An expired apps token keys should be removed when a request is made
✅ I can retrieve assertion options to begin sign in
✅ I can retrieve my passkey after registering and receive a sign in token
✅ I can retrieve my passkey after registering and receive a valid sign in token
✅ I receive a sign in token for a valid user id
✅ I receive an api exception when using an expired token
✅ I receive an error message when sending an unrecognized passkey

✅ I receive a 403 when i use a badly formatted api key with an existing endpoint
✅ I receive a 403 when i use a badly formatted api secret with an existing endpoint
✅ I receive a 403 when i use a invalid api key with an existing endpoint
✅ I receive a 403 when i use a invalid api secret with an existing endpoint

✅ I receive a 404 when i use a badly formatted api key with a non existing endpoint
✅ I receive a 404 when i use a badly formatted api secret with a non existing endpoint

✅ HandleAuthenticateAsync_HeaderDoesNotExist_ReturnsNoResult
✅ HandleAuthenticateAsync_HeaderIsEmpty_ReturnsNoResult
✅ HandleAuthenticateAsync_HeaderIsValid_Succeeds
✅ HandleChallengeAsync_WritesDetailError

✅ DeleteApplicationAsync_Returns_ExpectedResult
✅ GetApplicationsPendingDeletionAsync_Returns_ExpectedResult
✅ IsAppIdAvailableAsync_Returns_Ok_WhenAppIdIsAvailable
✅ IsAppIdAvailableAsync_Returns_Ok_WhenAppIdIsUnavailable
✅ ManageFeaturesAsync_Returns_ExpectedResult
✅ MarkDeleteApplicationAsync_Returns_ExpectedResult
✅ SetFeaturesAsync_Returns_ExpectedResult

✅ DelistAuthenticatorsAsync_LogsAuthenticatorsDelistedEvent
✅ DelistAuthenticatorsAsync_Returns_NoContent
✅ DelistAuthenticatorsAsync_Throws_Forbidden_WhenAttestationIsNotAllowed
✅ ListConfiguredAuthenticatorsAsync_Returns_Ok_WhenAttestationIsNotAllowed
✅ ListConfiguredAuthenticatorsAsync_Throws_Forbidden_WhenAttestationIsNotAllowed
✅ WhitelistAuthenticatorsAsync_LogsAuthenticatorsWhitelistedEvent
✅ WhitelistAuthenticatorsAsync_Returns_NoContent
✅ WhitelistAuthenticatorsAsync_Throws_Forbidden_WhenAttestationIsNotAllowed

✅ GetPeriodicActiveUserReportsAsync_Returns_ExpectedResult
✅ GetPeriodicCredentialReportsAsync_Returns_ExpectedResult

✅ GetApiSecret_GivenEmptyHeaderDictionary_WhenApiSecretIsNotPresent_ThenNullShouldReturn
✅ GetApiSecret_GivenHeaderDictionary_WhenApiSecretHeaderExists_ThenTenantSecretValueShouldReturn
✅ GetApiSecret_GivenHeaderDictionary_WhenApiSecretIsNotPresent_ThenNullShouldReturn
✅ GetPublicApiKey_GivenEmptyHeaderDictionary_WhenPublicKeyIsNotPresent_ThenNullShouldReturn
✅ GetPublicApiKey_GivenHeaderDictionary_WhenPublicKeyHeaderExists_ThenTenantSecretValueShouldReturn
✅ GetPublicApiKey_GivenHeaderDictionary_WhenPublicKeyIsNotPresent_ThenNullShouldReturn

✅ GetExecutionPlan_WhenExecutionTimeIsAfterCurrentTime_ReturnsCorrectInitialDelay
✅ GetExecutionPlan_WhenExecutionTimeIsAfterCurrentTime_ReturnsCorrectInitialDelay2
✅ GetExecutionPlan_WhenExecutionTimeIsBeforeCurrentTime_ReturnsCorrectInitialDelay
✅ GetExecutionPlan_WhenExecutionTimeIsSameAsCurrentTime_ReturnsCorrectInitialDelay

✅ AsPublicKeyScope_GivenDescription_ReturnsPublicKeyScope
✅ AsPublicKeyScope_GivenInvalidDescription_ThrowsArgumentException
✅ GetValue_GivenPublicKeyScope_ReturnsDescription

✅ AsSecretKeyScope_GivenDescription_ReturnsSecretKeyScope
✅ AsSecretKeyScope_GivenInvalidDescription_ThrowsArgumentException
✅ GetValue_GivenSecretKeyScope_ReturnsDescription

✅ GetLast_GivenStringAndAnyNumberOfCharactersToReturn_WhenStringIsEmpty_ThenShouldBeAnEmptyString
✅ GetLast_GivenStringAndAnyNumberOfCharactersToReturn_WhenStringIsNull_ThenResultShouldBeNull
✅ GetLast_GivenStringOfTwoCharacters_WhenLastThreeCharactersAreRequested_ThenShouldReturnFullString
✅ GetLast_GivenStringOfTwoCharacters_WhenLastTwoCharactersAreRequested_ThenShouldReturnFullString

✅ InvokeAsync_DoesNotModify_Scheme_WhenXForwardedProtoHeaderNotPresent
✅ InvokeAsync_Modifies_Scheme_WhenXForwardedProtoHeaderNotPresent

✅ Sanitize_WhenGivenHtml_ShouldReturnSanitizedHtml
✅ Sanitize_WhenGivenHtmlWithAllowedTags_ShouldReturnSanitizedHtml(input: "<a href='https://example.com'>hello</a>")
✅ Sanitize_WhenGivenHtmlWithAllowedTags_ShouldReturnSanitizedHtml(input: "<a><a>hello</a></a>")
✅ Sanitize_WhenGivenHtmlWithAllowedTags_ShouldReturnSanitizedHtml(input: "<p>hello</p>")
✅ Sanitize_WhenGivenHtmlWithAllowedTags_ShouldReturnSanitizedHtml(input: "<strong>hello</strong>")
✅ Sanitize_WhenGivenStringContainingScheme_ShouldReturnSanitizedHtml(input: "http://hello")
✅ Sanitize_WhenGivenStringContainingScheme_ShouldReturnSanitizedHtml(input: "https://hello")

✅ SendAsync_GivenMessageWithMessageType_WhenCorrespondingClientDoesNotExist_ThenWarningShouldBeLogged

✅ GetAppId_Returns_AppId_ForAValidApiKey
✅ GetAppId_Returns_AppId_ForAValidApiSecret
✅ GetAppId_Throws_ArgumentException_ForAnInvalidApiKey
✅ GetAppId_Throws_ArgumentException_ForAnInvalidApiSecret
✅ HashPrivateApiKey_Returns_ExpectedResult
✅ Validate_Returns_False_ForBadHash
✅ Validate_Returns_False_ForBadHash2
✅ Validate_Returns_False_ForInvalidApiKey
✅ Validate_Returns_True_ForValidApiKey

✅ IsValid_WhenValueContainsHtmlTags_ReturnsFalse(value: "<a>alert</a>")
✅ IsValid_WhenValueContainsHtmlTags_ReturnsFalse(value: "<div>alert</div>")
✅ IsValid_WhenValueContainsHtmlTags_ReturnsFalse(value: "<script>alert('XSS')</script>")
✅ IsValid_WhenValueContainsSchemes_ReturnsFalse(value: "http://")
✅ IsValid_WhenValueContainsSchemes_ReturnsFalse(value: "https://")
✅ IsValid_WhenValueDoesNotContainHtmlTags_ReturnsTrue
✅ IsValid_WhenValueIsNotString_ThrowsArgumentException
✅ IsValid_WhenValueIsNull_ReturnsTrue

✅ IsValid_Returns_False_WhenRegularExpressionDoesNotMatch
✅ IsValid_Returns_True_WhenInputIsNull
✅ IsValid_Returns_True_WhenRegularExpressionMatches

✅ AddAuthenticatorsAsync_Returns_ExpectedResult
✅ AddAuthenticatorsAsync_Throws_ApiException_WhenAuthenticatorDoesNotExist(isAllowed: False)
✅ AddAuthenticatorsAsync_Throws_ApiException_WhenAuthenticatorDoesNotExist(isAllowed: True)
✅ SetFeaturesAsync_Returns_ExpectedResult
✅ SetFeaturesAsync_Throws_ApiException_WhenPayloadIsNull

✅ CreateRegisterToken_Throws_ApiException_WhenMaxUsersExceededForNewUser
✅ CreateRegisterToken_Works_WhenMaxUsersExceededForExistingUser
✅ CreateRegisterToken_Works_WhenMaxUsersNotExceeded

✅ DeleteApplicationAsync_Deletes_Immediately_WhenDeletedAtIsSetInThePast
✅ DeleteApplicationAsync_Throws_ApiException_WhenAppNotFound
✅ DeleteApplicationAsync_Throws_ApiException_WhenDeletedAtIsSetInTheFuture
✅ ListApiKeysAsync_Returns_ExpectedResult
✅ ListApplicationsPendingDeletionAsync_Returns_ExpectedResult
✅ MarkDeleteApplicationAsync_Deletes_Immediately_WhenLessThan3DaysOld
✅ MarkDeleteApplicationAsync_Deletes_Immediately_WhenNoUsers
✅ MarkDeleteApplicationAsync_Deletes_Scheduled_WhenMoreThan3DaysOld
✅ MarkDeleteApplicationAsync_Deletes_Scheduled_WhenUsers
✅ MarkDeleteApplicationAsync_Throws_ApiException_WhenAppNotFound
✅ SetFeaturesAsync_Returns_ExpectedResult
✅ SetFeaturesAsync_Throws_ApiException_WhenAppIdIsNull
✅ SetFeaturesAsync_Throws_ApiException_WhenPayloadIsNull
✅ SetFeaturesAsync_Throws_ApiException_WhenTenantsIsEmpty

✅ Test

✅ CacheHandler_Returns_ContentFromFile_WhenHttpRequestExceptionWasThrown
✅ CacheHandler_Returns_ContentFromFile_WhenReceivingUnsuccessfulStatusCode
✅ CacheHandler_Returns_ContentFromMDS_WhenReceivingSuccessfulStatusCode

✅ MaskedApiKey_Returns_ExpectedResultForPublicKey
✅ MaskedApiKey_Returns_ExpectedResultForSecretKey

✅ NullableArrayValueComparer_ComparingDifferentArrays_ReturnsExpectedResult
✅ NullableArrayValueComparer_ComparingSameArrays_ReturnsExpectedResult

✅ NullableArrayValueComparer_ComparingDifferentArrays_ReturnsExpectedResult
✅ NullableArrayValueComparer_ComparingSameArrays_ReturnsExpectedResult
✅ NullableArrayValueComparer_Should_Compare_Nullable_Arrays

✅ Validate_GivenUtcNow_WhenTokenExpiredNow_ThenShouldNotThrow
✅ Validate_GivenUtcNow_WhenTokenExpiredThirtySecondsAgo_ThenApiExceptionThrowsWithMessage
✅ Validate_GivenUtcNow_WhenTokenIsNotExpired_ThenShouldNotThrow
✅ ValidateAttestation_Throws_ApiException_WhenAttestationNotAllowedForPlan
✅ ValidateAttestation_Throws_ApiException_WhenAttestationTypeIsEnterprise