test(gn_auth): add data/authorisation contract tests — no-token public fallback

GN2 calls POST /auth/data/authorisation per-request to check a user's
privileges on a trait's resource.  Without a Bearer token the endpoint
does not 401; instead it returns public-access privileges for publicly
visible resources.

Two tests verify this contract:

  test_data_authorisation_no_token_public_trait_returns_200
    Confirms the endpoint returns 200 for a known public trait without
    a token.

  test_data_authorisation_no_token_public_trait_grants_view_privilege
    Confirms the response includes 'group:resource:view-resource' —
    the privilege GN2 checks to determine read access.

Co-Authored-By: Frederick Muriuki Muriithi <fmuriit1@uthsc.edu>

0 files changed, 0 insertions, 0 deletions