jpmschweitzer/odysseus
1
0
Fork 0
mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-09-16 13:12:20 +02:00
Code Issues Packages Projects Releases Wiki Activity

security: fail closed on bearer endpoint credentials

Browse Source
This commit is contained in:
RaresKeY
2026-08-30 22:27:35 +00:00
parent c473240131
commit aee6655fbd
8 changed files with 194 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/test_api_token_security_cycle3.py
+4 -2
View File
@@ -162,8 +162,10 @@ def test_bearer_session_lifecycle_routes_do_not_emit_webhook_or_event(monkeypatc
assert result.model == "stored-model"
create_openai = _latest_endpoint(router, "/api/session/openai", "POST")
openai_result = create_openai(request, name="OpenAI", model="gpt-4o", rag="false")
assert openai_result["model"] == "gpt-4o"
with pytest.raises(HTTPException) as exc:
create_openai(request, name="OpenAI", model="gpt-4o", rag="false")
assert exc.value.status_code == 403
assert len(manager.sessions) == 1
webhook_manager.fire_and_forget.assert_not_called()
assert events == []