xuan/ZY-Agent
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

test(auth): move bearer probe routes under /api/v1/threads (Stage 1 收口)

Browse Source 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
1445043649
2026-06-28 21:27:11 +08:00
parent 2d982c3f0b
commit 02628d4e08
2 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/tests/test_auth_middleware_api_key.py
+6 -6
View File
@@ -69,7 +69,7 @@ def _make_app():
app = FastAPI()
app.add_middleware(AuthMiddleware)
@app.get("/api/probe")
@app.get("/api/v1/threads/_probe")
async def probe(request: Request):
return {
"user_id": get_effective_user_id(),
@@ -84,7 +84,7 @@ async def test_valid_bearer_sets_sa_contextvars(tmp_path):
gen = await _seed_key(tmp_path)
try:
client = TestClient(_make_app())
r = client.get("/api/probe", headers={"Authorization": f"Bearer {gen.plaintext}"})
r = client.get("/api/v1/threads/_probe", headers={"Authorization": f"Bearer {gen.plaintext}"})
assert r.status_code == 200
assert r.json() == {"user_id": "sa-1", "workspace_id": "w-1", "is_sa": True}
finally:
@@ -95,7 +95,7 @@ async def test_invalid_bearer_returns_401(tmp_path):
await _seed_key(tmp_path)
try:
client = TestClient(_make_app())
r = client.get("/api/probe", headers={"Authorization": "Bearer dfk_live_bogus00000000000000000"})
r = client.get("/api/v1/threads/_probe", headers={"Authorization": "Bearer dfk_live_bogus00000000000000000"})
assert r.status_code == 401
finally:
await _cleanup()
@@ -105,7 +105,7 @@ async def test_revoked_bearer_returns_401(tmp_path):
gen = await _seed_key(tmp_path, revoke=True)
try:
client = TestClient(_make_app())
r = client.get("/api/probe", headers={"Authorization": f"Bearer {gen.plaintext}"})
r = client.get("/api/v1/threads/_probe", headers={"Authorization": f"Bearer {gen.plaintext}"})
assert r.status_code == 401
finally:
await _cleanup()
@@ -117,7 +117,7 @@ async def test_non_dfk_bearer_falls_through_to_cookie_path(tmp_path):
client = TestClient(_make_app())
# A non-dfk bearer is NOT the API-key path; with no cookie the
# cookie path 401s (NOT_AUTHENTICATED), proving no mis-route.
r = client.get("/api/probe", headers={"Authorization": "Bearer some.jwt.token"})
r = client.get("/api/v1/threads/_probe", headers={"Authorization": "Bearer some.jwt.token"})
assert r.status_code == 401
assert r.json()["detail"]["code"] == "not_authenticated"
finally:
@@ -128,7 +128,7 @@ async def test_bare_prefix_bearer_returns_401(tmp_path):
await _seed_key(tmp_path)
try:
client = TestClient(_make_app())
r = client.get("/api/probe", headers={"Authorization": "Bearer dfk_"})
r = client.get("/api/v1/threads/_probe", headers={"Authorization": "Bearer dfk_"})
assert r.status_code == 401
finally:
await _cleanup()
backend/tests/test_headless_api_smoke.py
+3 -3
View File
@@ -92,7 +92,7 @@ def _probe_app():
app = FastAPI()
app.add_middleware(AuthMiddleware)
@app.get("/api/probe")
@app.get("/api/v1/threads/_probe")
async def probe(request: Request):
return {"user_id": get_effective_user_id(), "workspace_id": get_effective_workspace_id()}
@@ -108,12 +108,12 @@ async def test_mint_use_and_cross_workspace_isolation(tmp_path):
plaintext = key["plaintext"]
probe = TestClient(_probe_app())
ok = probe.get("/api/probe", headers={"Authorization": f"Bearer {plaintext}"})
ok = probe.get("/api/v1/threads/_probe", headers={"Authorization": f"Bearer {plaintext}"})
assert ok.status_code == 200
assert ok.json() == {"user_id": sa["id"], "workspace_id": "w-1"}
# A bogus / unknown key is rejected.
bad = probe.get("/api/probe", headers={"Authorization": "Bearer dfk_live_unknown0000000000000000"})
bad = probe.get("/api/v1/threads/_probe", headers={"Authorization": "Bearer dfk_live_unknown0000000000000000"})
assert bad.status_code == 401
finally:
await _cleanup()