From c6a830cb9210c2ccee7176e5e9b6fe5caeae388e Mon Sep 17 00:00:00 2001 From: boris Date: Sat, 18 Apr 2026 18:24:41 +0100 Subject: [PATCH] fixed django test for mtls, assumed not enforced --- app/apps/servers/tests/test_consumers.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/app/apps/servers/tests/test_consumers.py b/app/apps/servers/tests/test_consumers.py index 438bfce..2b2e918 100644 --- a/app/apps/servers/tests/test_consumers.py +++ b/app/apps/servers/tests/test_consumers.py @@ -455,6 +455,7 @@ class SecurityAndCertificateHelperTests(TestCase): ) self.assertIsNone(auth.authenticate(bad_fingerprint)) + @override_settings(KEYWARDEN_AGENT_RUNTIME_ALLOW_TOKEN_FALLBACK=True) def test_agent_runtime_auth_falls_back_to_server_token_without_mtls_headers(self): server_token = "server-token-123" server = Server.objects.create( @@ -474,7 +475,10 @@ class SecurityAndCertificateHelperTests(TestCase): self.assertEqual(principal.mode, "server-token") self.assertEqual(principal.server_id, server.id) - @override_settings(KEYWARDEN_AGENT_API_TOKEN="global-token-123") + @override_settings( + KEYWARDEN_AGENT_API_TOKEN="global-token-123", + KEYWARDEN_AGENT_RUNTIME_ALLOW_TOKEN_FALLBACK=True, + ) def test_agent_runtime_auth_accepts_global_token_without_mtls_headers(self): request = SimpleNamespace( META={"HTTP_AUTHORIZATION": "Bearer global-token-123"},