{
  "cases": [
    {
      "id": "wrong_name",
      "context": "internal_api",
      "mutate": {
        "presented_server_identity": "admin.internal.example"
      },
      "expected": "DENY_SERVER_IDENTITY_MISMATCH"
    },
    {
      "id": "expired_server",
      "context": "internal_api",
      "mutate": {
        "server_identity_status": "expired"
      },
      "expected": "DENY_SERVER_IDENTITY_EXPIRED"
    },
    {
      "id": "wrong_trust_domain",
      "context": "internal_api",
      "client_trust_domain": "dev.example",
      "expected": "DENY_CLIENT_TRUST_DOMAIN"
    },
    {
      "id": "expired_client",
      "context": "internal_api",
      "client_identity_status": "expired",
      "expected": "DENY_CLIENT_IDENTITY_EXPIRED"
    },
    {
      "id": "unauthorized_action",
      "context": "internal_api",
      "action": "admin.read",
      "expected": "DENY_ACTION_UNAUTHORIZED"
    }
  ]
}