chore: import upstream snapshot with attribution

packages/python-sdk/tests/sync/sandbox_sync/files/test_secured.py

@@ -0,0 +1,59 @@
+import urllib.request
+import urllib.error
+import json
+import pytest
+
+
+@pytest.mark.skip_debug()
+def test_download_url_with_signing(sandbox_factory):
+    sbx = sandbox_factory(timeout=100, secure=True)
+    file_path = "test_download_url_with_signing.txt"
+    file_content = "This file will be watched."
+
+    sbx.files.write(file_path, file_content)
+    signed_url = sbx.download_url(file_path, "user")
+
+    with urllib.request.urlopen(signed_url) as resp:
+        assert resp.status == 200
+        body_bytes = resp.read()
+        body_text = body_bytes.decode()
+        assert body_text == file_content
+
+
+@pytest.mark.skip_debug()
+def test_download_url_with_signing_and_expiration(sandbox_factory):
+    sbx = sandbox_factory(timeout=100, secure=True)
+    file_path = "test_download_url_with_signing.txt"
+    file_content = "This file will be watched."
+
+    sbx.files.write(file_path, file_content)
+    signed_url = sbx.download_url(file_path, "user", 120)
+
+    with urllib.request.urlopen(signed_url) as resp:
+        assert resp.status == 200
+        body_bytes = resp.read()
+        body_text = body_bytes.decode()
+        assert body_text == file_content
+
+
+@pytest.mark.skip_debug()
+def test_download_url_with_expired_signing(sandbox_factory):
+    sbx = sandbox_factory(timeout=100, secure=True)
+    file_path = "test_download_url_with_signing.txt"
+    file_content = "This file will be watched."
+
+    sbx.files.write(file_path, file_content)
+
+    signed_url = sbx.download_url(file_path, "user", use_signature_expiration=-120)
+
+    with pytest.raises(urllib.error.HTTPError) as exc_info:
+        urllib.request.urlopen(signed_url)
+
+    err = exc_info.value
+    assert err.code == 401, f"Unexpected status {err.code}"
+
+    error_json_str = err.read().decode()  # bytes ➜ str
+    error_payload = json.loads(error_json_str)  # str  ➜ dict
+
+    expected_payload = {"code": 401, "message": "signature is already expired"}
+    assert error_payload == expected_payload