python/fastapi-users
1
0
Fork 0
mirror of https://github.com/fastapi-users/fastapi-users.git synced 2025-11-02 12:21:53 +08:00
Code Issues Packages Projects Releases Wiki Activity

Return 403 instead of 401 when a user is known (#705)

Browse Source 
* return 403 instead of 401 if user is known

* return 403 for unverified users

* updated docs
This commit is contained in:
Daan Beverdam
2021-09-04 18:11:48 +02:00
committed by GitHub
parent 7527902e9d
commit e59fb2c9b9
5 changed files with 28 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
tests/test_fastapi_users.py
View File

@ -191,7 +191,7 @@ class TestGetCurrentVerifiedUser:
"/current-verified-user",
headers={"Authorization": f"Bearer {user.id}"},
)
assert response.status_code == status.HTTP_401_UNAUTHORIZED
assert response.status_code == status.HTTP_403_FORBIDDEN
async def test_valid_token_verified_user(
self, test_app_client: httpx.AsyncClient, verified_user: UserDB
@ -253,7 +253,7 @@ class TestGetCurrentVerifiedSuperuser:
"/current-verified-superuser",
headers={"Authorization": f"Bearer {user.id}"},
)
assert response.status_code == status.HTTP_401_UNAUTHORIZED
assert response.status_code == status.HTTP_403_FORBIDDEN
async def test_valid_token_verified_user(
self, test_app_client: httpx.AsyncClient, verified_user: UserDB
@ -271,7 +271,7 @@ class TestGetCurrentVerifiedSuperuser:
"/current-verified-superuser",
headers={"Authorization": f"Bearer {superuser.id}"},
)
assert response.status_code == status.HTTP_401_UNAUTHORIZED
assert response.status_code == status.HTTP_403_FORBIDDEN
async def test_valid_token_verified_superuser(
self, test_app_client: httpx.AsyncClient, verified_superuser: UserDB