tests/test_token_query_bootstrap.py

• _Hub · class · L36-L41 — class _Hub
• emitter · method · L37-L38 — def emitter(self, root_frame_id)
• broadcast · method · L40-L41 — def broadcast(self, root_frame_id, event)
• _Response · class · L44-L58 — class _Response
• init · method · L47-L52 — def init(self) -> None
• header · method · L54-L58 — def header(self, name: str) -> str | None
• gate · function · L62-L106 — def gate(tmp_path, monkeypatch)
• request · function · L75-L101 — def request(method: str, path: str, headers: dict | None = None) -> _Response
• test_the_root_page_bootstraps · function · L114-L118 — def test_the_root_page_bootstraps(gate)
• test_index_html_bootstraps_like_the_root · function · L121-L125 — def test_index_html_bootstraps_like_the_root(gate)
• test_a_data_path_cannot_be_bootstrapped · function · L128-L135 — def test_a_data_path_cannot_be_bootstrapped(gate)
• test_a_deep_link_cannot_be_bootstrapped · function · L138-L145 — def test_a_deep_link_cannot_be_bootstrapped(gate)
• test_a_bootstrapped_data_path_does_not_serve_the_data · function · L148-L153 — def test_a_bootstrapped_data_path_does_not_serve_the_data(gate)
• test_a_mutation_with_a_query_token_is_refused_even_when_authenticated · function · L161-L171 — def test_a_mutation_with_a_query_token_is_refused_even_when_authenticated(gate)
• test_the_same_mutation_without_the_query_token_is_allowed · function · L174-L178 — def test_the_same_mutation_without_the_query_token_is_allowed(gate)
• test_the_refusal_covers_every_mutating_method · function · L181-L190 — def test_the_refusal_covers_every_mutating_method(gate)
• test_the_refusal_names_a_credential_that_is_not_the_token · function · L193-L203 — def test_the_refusal_names_a_credential_that_is_not_the_token(gate)
• test_the_redirect_strips_the_credential_and_keeps_the_rest · function · L211-L217 — def test_the_redirect_strips_the_credential_and_keeps_the_rest(gate)
• test_no_response_header_but_the_cookie_carries_the_token · function · L220-L230 — def test_no_response_header_but_the_cookie_carries_the_token(gate)
• test_the_cookie_is_httponly_and_samesite_strict · function · L233-L240 — def test_the_cookie_is_httponly_and_samesite_strict(gate)
• test_the_bootstrap_is_visible_in_the_access_log · function · L243-L248 — def test_the_bootstrap_is_visible_in_the_access_log(gate)
• test_a_wrong_token_on_the_root_page_sets_no_cookie · function · L251-L255 — def test_a_wrong_token_on_the_root_page_sets_no_cookie(gate)
• test_health_stays_open · function · L263-L265 — def test_health_stays_open(gate)
• test_a_bearer_header_still_authenticates · function · L268-L271 — def test_a_bearer_header_still_authenticates(gate)
• test_a_get_with_a_query_token_on_a_data_path_is_not_a_mutation_refusal · function · L274-L283 — def test_a_get_with_a_query_token_on_a_data_path_is_not_a_mutation_refusal(gate)