chore: import upstream snapshot with attribution

servers/fastapi/tests/unit/test_internal_auth_headers.py

@@ -0,0 +1,32 @@
+from utils.simple_auth import (
+    get_internal_auth_headers,
+    setup_initial_credentials,
+    validate_session_token,
+)
+
+
+def test_internal_auth_headers_empty_when_auth_is_not_configured(monkeypatch, tmp_path):
+    monkeypatch.setenv("USER_CONFIG_PATH", str(tmp_path / "userConfig.json"))
+    monkeypatch.delenv("DISABLE_AUTH", raising=False)
+
+    assert get_internal_auth_headers() == {}
+
+
+def test_internal_auth_headers_empty_when_auth_is_disabled(monkeypatch, tmp_path):
+    monkeypatch.setenv("USER_CONFIG_PATH", str(tmp_path / "userConfig.json"))
+    monkeypatch.setenv("DISABLE_AUTH", "true")
+    setup_initial_credentials("admin", "secret123")
+
+    assert get_internal_auth_headers() == {}
+
+
+def test_internal_auth_headers_include_valid_bearer_token(monkeypatch, tmp_path):
+    monkeypatch.setenv("USER_CONFIG_PATH", str(tmp_path / "userConfig.json"))
+    monkeypatch.delenv("DISABLE_AUTH", raising=False)
+    setup_initial_credentials("admin", "secret123")
+
+    headers = get_internal_auth_headers()
+
+    assert headers["Authorization"].startswith("Bearer ")
+    token = headers["Authorization"].removeprefix("Bearer ")
+    assert validate_session_token(token) == "admin"