}
    assertThat(response.code).isEqualTo(responseCode)
    response.body.byteStream().close()
    return authenticator.calls
  }

  @Test
  fun setValidRequestMethod() {
    assertMethodForbidsRequestBody("GET")
    assertMethodPermitsRequestBody("DELETE")
    assertMethodForbidsRequestBody("HEAD")
    assertMethodPermitsRequestBody("OPTIONS")