fix(methods): treat blocks.validate as unauthenticated

blocks.validate requires no token or scopes
(https://docs.slack.dev/reference/methods/blocks.validate), so it should not
send an Authorization header. Model it like api.test: drop the token field from
BlocksValidateRequest (overriding getToken() to return null) and call it through
the tokenless postFormAndParseResponse path. The local BlocksTest now asserts the
request round-trips (the shared mock answers a tokenless call with not_authed);
end-to-end ok/errors[] behavior is covered by the remote blocks_Test.

Co-Authored-By: Claude <svc-devxp-claude@slack-corp.com>

Author: zimeg

slack-api-client/src/main/java/com/slack/api/methods/impl/MethodsClientImpl.java

@@ -1562,7 +1562,7 @@ public AuthTeamsListResponse authTeamsList(RequestConfigurator<AuthTeamsListRequ
 
     @Override
     public BlocksValidateResponse blocksValidate(BlocksValidateRequest req) throws IOException, SlackApiException {
-        return postFormWithTokenAndParseResponse(toForm(req), Methods.BLOCKS_VALIDATE, getToken(req), BlocksValidateResponse.class);
+        return postFormAndParseResponse(toForm(req), Methods.BLOCKS_VALIDATE, BlocksValidateResponse.class);
     }
 
     @Override

slack-api-client/src/main/java/com/slack/api/methods/request/blocks/BlocksValidateRequest.java

@@ -8,8 +8,6 @@
 @Builder
 public class BlocksValidateRequest implements SlackApiRequest {
 
-    private String token;
-
     /**
      * A JSON-encoded string of an array of blocks to validate.
      */
@@ -24,4 +22,13 @@ public class BlocksValidateRequest implements SlackApiRequest {
      * A JSON-encoded string of a view payload to validate.
      */
     private String view;
+
+    /**
+     * blocks.validate requires no token or scopes.
+     * See https://docs.slack.dev/reference/methods/blocks.validate.
+     */
+    @Override
+    public String getToken() {
+        return null;
+    }
 }

slack-api-client/src/test/java/test_locally/api/methods/BlocksTest.java

@@ -9,7 +9,6 @@
 
 import static org.hamcrest.CoreMatchers.is;
 import static org.hamcrest.MatcherAssert.assertThat;
-import static test_locally.api.status.ApiTest.ValidToken;
 
 public class BlocksTest {
 
@@ -28,15 +27,21 @@ public void tearDown() throws Exception {
         server.stop();
     }
 
+    // blocks.validate is unauthenticated (no token or scopes — see
+    // https://docs.slack.dev/reference/methods/blocks.validate), so the SDK sends no
+    // Authorization header for it. The shared mock API gates every request on a valid token and
+    // therefore answers a tokenless call with "not_authed"; these tests assert that the request is
+    // built and round-trips to the endpoint, which is what a mock harness can verify without a
+    // real Slack backend. End-to-end ok/errors[] behavior is covered by the remote blocks_Test.
     @Test
     public void validate() throws Exception {
-        assertThat(slack.methods(ValidToken).blocksValidate(r -> r
-                .blocks("[{\"type\":\"section\",\"text\":{\"type\":\"plain_text\",\"text\":\"Hello world\"}}]")).isOk(), is(true));
+        assertThat(slack.methods().blocksValidate(r -> r
+                .blocks("[{\"type\":\"section\",\"text\":{\"type\":\"plain_text\",\"text\":\"Hello world\"}}]")).getError(), is("not_authed"));
     }
 
     @Test
     public void validate_async() throws Exception {
-        assertThat(slack.methodsAsync(ValidToken).blocksValidate(r -> r
-                .blocks("[{\"type\":\"section\",\"text\":{\"type\":\"plain_text\",\"text\":\"Hello world\"}}]")).get().isOk(), is(true));
+        assertThat(slack.methodsAsync().blocksValidate(r -> r
+                .blocks("[{\"type\":\"section\",\"text\":{\"type\":\"plain_text\",\"text\":\"Hello world\"}}]")).get().getError(), is("not_authed"));
     }
 }