@Test
    void verifyAuthenticationEndpoint() throws Throwable {
        executeRequest(WebAuthnController.WEBAUTHN_ENDPOINT_AUTHENTICATE, new MockHttpServletRequest(), new MockHttpServletResponse(), false, HttpStatus.SC_FORBIDDEN);
        executeRequest(WebAuthnController.WEBAUTHN_ENDPOINT_AUTHENTICATE, new MockHttpServletRequest(), new MockHttpServletResponse(), true, HttpStatus.SC_FORBIDDEN);

        val csrfResult = fetchAndStoreCsrfToken();
        /*
          Authentication should pass but the user is not registered.
         */
        executeRequest(WebAuthnController.WEBAUTHN_ENDPOINT_AUTHENTICATE, csrfResult.getRequest(), csrfResult.getResponse(), true, HttpStatus.SC_BAD_REQUEST);
    }
This is {@link WebAuthnControllerMvcTests}.

@author Misagh Moayyed
@since 7.0.0
support/cas-server-support-webauthn/src/test/java/org/apereo/cas/webauthn/web/WebAuthnControllerMvcTests.java