refactor: extract user authentication logic into dedicated AuthService class with JWT token generation

2026-05-23 06:34:13 +00:00
parent 1df65ebabf
commit 3f8889d778
34 changed files with 211 additions and 367 deletions
@@ -60,7 +60,7 @@ def test_uploaded_file_served_as_attachment(app_server):

 def test_upload_requires_login(app_server):
    r = requests.post(f"{BASE_URL}/uploads/upload", files={"file": ("x.png", _png_bytes(), "image/png")}, allow_redirects=False)
-    assert r.status_code in (302, 303)
+    assert r.status_code == 401


 def test_delete_own_allowed_other_user_forbidden(app_server):