17 lines
423 B
Python
17 lines
423 B
Python
|
from __future__ import annotations
|
||
|
|
|
||
|
|
from uuid import uuid4
|
||
|
|
|
||
|
|
import pytest
|
||
|
|
from fastapi import HTTPException
|
||
|
|
|
||
|
|
from core.auth.models import CurrentUser
|
||
|
|
from v1.agent.service import ensure_session_owner
|
||
|
|
|
||
|
|
|
||
|
|
def test_owner_guard_denies_non_owner() -> None:
|
||
|
|
user = CurrentUser(id=uuid4(), email="self@example.com")
|
||
|
|
|
||
|
|
with pytest.raises(HTTPException):
|
||
|
|
ensure_session_owner(owner_id="other-user", current_user=user)
|