Files
2026-07-13 13:08:41 +08:00

24 lines
824 B
Python

from api.middlewares import SessionAuthMiddleware
def test_public_app_data_asset_prefixes_do_not_require_auth():
middleware = SessionAuthMiddleware(app=None)
assert middleware._requires_auth("/app_data/images/photo.png") is False
assert middleware._requires_auth("/app_data/fonts/embedded/font.ttf") is False
assert (
middleware._requires_auth("/app_data/pptx-to-html/session/fonts/font.ttf")
is False
)
assert (
middleware._requires_auth("/app_data/pptx-to-html/session/images/image.png")
is False
)
def test_other_app_data_prefixes_still_require_auth():
middleware = SessionAuthMiddleware(app=None)
assert middleware._requires_auth("/app_data/uploads/source.pptx") is True
assert middleware._requires_auth("/app_data/exports/deck.pdf") is True