ADD: tests for authentication

backend/test_main.py

@@ -1,7 +1,25 @@
+import os
 import pytest
+from dotenv import load_dotenv
 from .main import api
 
 
+def test_authorization_missing_env_var(monkeypatch):
+    # load env
+    load_dotenv()
+
+    # missing env var
+    if "API_KEY" in os.environ:
+        monkeypatch.delenv("API_KEY")
+
+    # call endpoint without API_KEY
+    client = api.test_client()
+    headers = {"Authorization": f"Bearer dummy_api_key"}
+    response = client.post("/summarize-text", headers=headers, json={"key": "value"})
+    assert response.status_code == 401
+    assert response.status == "401 UNAUTHORIZED"
+
+
 @pytest.mark.parametrize(
     "input, status_code, error_msg",
     [
@@ -18,8 +36,14 @@ from .main import api
     ],
 )
 def test_extract_text(input, status_code, error_msg):
+    # load env
+    load_dotenv()
+
+    # call endpoint extract-text
     client = api.test_client()
-    response = client.post("/extract-text", json=input)
+    API_KEY = os.getenv("API_KEY")
+    headers = {"Authorization": f"Bearer {API_KEY}"}
+    response = client.post("/extract-text", headers=headers, json=input)
 
     assert response.status_code == status_code
     assert response.get_json() == {"error": error_msg}
@@ -37,9 +61,15 @@ def test_extract_text(input, status_code, error_msg):
         ({"text": "This is a test article to summarize."}, 200, "summary", "test"),
     ],
 )
-def test_summarize_text(input, status_code, msg_type, msg):
+def test_summarize_text(input, status_code, msg_type, msg, monkeypatch):
+    # load env
+    load_dotenv()
+
+    # call endpoint summarize-text
     client = api.test_client()
-    response = client.post("/summarize-text", json=input)
+    API_KEY = os.getenv("API_KEY")
+    headers = {"Authorization": f"Bearer {API_KEY}"}
+    response = client.post("/summarize-text", headers=headers, json=input)
     data = response.get_json()
 
     assert response.status_code == status_code