getJson('/open-banking/institutions?country=ES') ->assertUnauthorized(); }); test('guests cannot access authorize route', function () { $this->postJson('/open-banking/authorize', [ 'aspsp_name' => 'Test Bank', 'country' => 'ES', ])->assertUnauthorized(); }); test('guests are redirected away from callback route', function () { $this->get('/open-banking/callback?code=test') ->assertRedirect(route('login')); }); test('guests are redirected away from connections index', function () { $this->get('/settings/connections') ->assertRedirect(route('login')); });