@Test
    void verifyAccessToEndpoints() throws Throwable {
        val endpoints = List.of("beans", "conditions", "info", "env", "health");
        for (val endpoint : endpoints) {
            mvc.perform(get("/cas/actuator/" + endpoint)
                    .with(httpBasic("casadmin", "pa$$w0rd")))
                .andExpect(status().isOk());
        }
        for (val endpoint : endpoints) {
            mvc.perform(get("/cas/actuator/" + endpoint)
                    .with(httpBasic("casuser", "pa$$w0rd")))
                .andExpect(status().isForbidden());
        }
    }
This is {@link CasWebSecurityJsonUserDetailsTests}.

@author Misagh Moayyed
@since 7.2.0
support/cas-server-support-webconfig/src/test/java/org/apereo/cas/web/security/CasWebSecurityJsonUserDetailsTests.java