| Age | Commit message (Collapse) | Author |
|---|
|
The search endpoint occasionally returns a page without 'records found'
when GN2 is under load or just restarted (cold query path). The test
passes on immediate re-run. Mark transient as a signal for future retry
logic (e.g. pytest-rerunfailures) rather than treating failures as
definitive.
|
|
|
|
|
|
|
|
|
|
RFC 6749 section
5.2 (https://www.rfc-editor.org/rfc/rfc6749.html#section-5.2) states
that the response code for `invalid_grant` should be 400, not
401. Update the test, therefore, to check for the correct status code.
|
|
Test that POST /auth/user/masquerade/ enforces the
system:user:masquerade privilege. Both admin and basic users can
obtain a token with masquerade scope (the test client supports it),
but gn-auth's can_masquerade decorator checks the user's roles:
- Basic user → ForbiddenAccess → 403
- Admin user → can masquerade as basic user → 200
Adds three session-scoped fixtures to the test module: admin_masquerade_token,
basic_masquerade_token, and basic_user_id.
|
|
Test that GET /auth/user/ returns 200 with user fields when a valid
Bearer token is present, and 401 when no token or a garbage token is
supplied.
|
|
Test that POST /auth/token returns 401 when given a wrong password or
an unknown email address.
|
|
Test that POST /auth/token with valid admin credentials returns 200,
includes an access_token, sets token_type to bearer, and grants at
least the requested scopes.
|
|
|
|
The code in this commit was written by claude code, and is yet to be
reviewed. Expect changes once the code has been reviewed.
|
