2026-03-05 15:34:37 +08:00
|
|
|
from __future__ import annotations
|
|
|
|
|
|
|
|
|
|
from uuid import uuid4
|
|
|
|
|
|
|
|
|
|
import pytest
|
2026-04-22 17:09:37 +08:00
|
|
|
from core.http.errors import ApiProblemError
|
2026-03-05 15:34:37 +08:00
|
|
|
|
|
|
|
|
from core.auth.models import CurrentUser
|
|
|
|
|
from v1.agent.service import ensure_session_owner
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_owner_guard_denies_non_owner() -> None:
|
2026-03-19 18:42:59 +08:00
|
|
|
user = CurrentUser(id=uuid4(), phone="self@example.com")
|
2026-03-05 15:34:37 +08:00
|
|
|
|
2026-04-22 17:09:37 +08:00
|
|
|
with pytest.raises(ApiProblemError):
|
2026-03-05 15:34:37 +08:00
|
|
|
ensure_session_owner(owner_id="other-user", current_user=user)
|
