def METHOD_NAME(
    permission_manage_apps, staff_api_client, staff_user, permission_manage_orders
):
    # given
    app = App.objects.create(name="New_app")
    query = APP_TOKEN_CREATE_MUTATION
    staff_user.user_permissions.add(permission_manage_orders)
    app.permissions.add(permission_manage_orders)
    id = graphene.Node.to_global_id("App", app.id)
    variables = {"name": "Default token", "app": id}
    # when
    response = staff_api_client.post_graphql(
        query, variables={"input": variables}, permissions=(permission_manage_apps,)
    )
    # then
    content = get_graphql_content(response)
    token_data = content["data"]["appTokenCreate"]["appToken"]
    auth_token_data = content["data"]["appTokenCreate"]["authToken"]
    token_last_4 = app.tokens.get().token_last_4
    assert auth_token_data
    assert auth_token_data[-4:] == token_last_4
    assert token_data["authToken"] == token_last_4
    assert token_data["name"] == "Default token"