From ac8b37bd27ebe9de5cd2b020a3dcf21e03e460c4 Mon Sep 17 00:00:00 2001 From: 1445043649 <> Date: Sun, 28 Jun 2026 11:44:41 +0800 Subject: [PATCH] test(auth): cover expired-key rejection in APIKeyAuthBackend (Stage 1 PR2) Co-Authored-By: Claude Opus 4.8 (1M context) --- backend/tests/test_api_key_backend.py | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/backend/tests/test_api_key_backend.py b/backend/tests/test_api_key_backend.py index 0c759508..c066b9cc 100644 --- a/backend/tests/test_api_key_backend.py +++ b/backend/tests/test_api_key_backend.py @@ -125,3 +125,13 @@ async def test_authenticate_suspended_workspace_returns_none(tmp_path): assert await backend.authenticate(gen.plaintext) is None finally: await _cleanup() + + +async def test_authenticate_expired_key_returns_none(tmp_path): + from datetime import UTC, datetime + + backend, gen = await _setup_backend(tmp_path, expires_at=datetime(2000, 1, 1, tzinfo=UTC)) + try: + assert await backend.authenticate(gen.plaintext) is None + finally: + await _cleanup()