b3d4f67b20
Change-detectors, tautologies, source-reading tests, redundant duplicates, mock-echo tests and dead/unrunnable tests. Per-test rationale in the lane ledger (category + reason for every removal).
68 lines
2.7 KiB
Python
68 lines
2.7 KiB
Python
"""Auth-boundary shard for the Anthropic adapter.
|
|
|
|
An api-key-style client must not inherit ANTHROPIC_AUTH_TOKEN from the environment: the SDK
|
|
fills an unset ``auth_token`` from that variable and then sends ``Authorization: Bearer ***``
|
|
alongside ``x-api-key`` on every request, shipping a foreign shell credential to third-party
|
|
Anthropic-compatible endpoints (#105774). Kept out of ``test_anthropic_adapter.py`` for the
|
|
per-file line ceiling.
|
|
"""
|
|
|
|
import pytest
|
|
|
|
from agent.anthropic_adapter import build_anthropic_client
|
|
|
|
SENTINEL = "sentinel-env-token-DO-NOT-SEND"
|
|
|
|
|
|
def wire_headers(client) -> dict:
|
|
"""Headers the SDK would put on a /v1/messages POST (the Omit() default is resolved here)."""
|
|
from anthropic._models import FinalRequestOptions
|
|
|
|
return dict(client._build_headers(FinalRequestOptions(method="post", url="/v1/messages", json_data={})))
|
|
|
|
|
|
|
|
# The bearer mirror (no env x-api-key beside a portal JWT) is owned by
|
|
# tests/agent/test_nous_portal_anthropic_wire.py::TestClientShape.
|
|
|
|
|
|
def test_third_party_request_on_the_wire_carries_no_foreign_bearer(monkeypatch):
|
|
"""End-to-end through ``build_anthropic_client`` against a local header-capturing server."""
|
|
pytest.importorskip("anthropic")
|
|
import json
|
|
import threading
|
|
from http.server import BaseHTTPRequestHandler, HTTPServer
|
|
|
|
monkeypatch.setenv("ANTHROPIC_AUTH_TOKEN", SENTINEL)
|
|
captured = {}
|
|
|
|
class _Handler(BaseHTTPRequestHandler):
|
|
def do_POST(self):
|
|
captured["headers"] = {k.lower(): v for k, v in self.headers.items()}
|
|
self.rfile.read(int(self.headers.get("content-length", 0)))
|
|
body = json.dumps({
|
|
"id": "msg_test", "type": "message", "role": "assistant",
|
|
"content": [{"type": "text", "text": "ok"}], "model": "test",
|
|
"stop_reason": "end_turn", "usage": {"input_tokens": 1, "output_tokens": 1},
|
|
}).encode()
|
|
self.send_response(200)
|
|
self.send_header("content-type", "application/json")
|
|
self.send_header("content-length", str(len(body)))
|
|
self.end_headers()
|
|
self.wfile.write(body)
|
|
|
|
def log_message(self, *args):
|
|
pass
|
|
|
|
server = HTTPServer(("127.0.0.1", 0), _Handler)
|
|
threading.Thread(target=server.serve_forever, daemon=True).start()
|
|
try:
|
|
client = build_anthropic_client("third-party-provider-key", base_url=f"http://127.0.0.1:{server.server_port}")
|
|
client.with_options(timeout=30).messages.create(
|
|
model="test-model", max_tokens=8, messages=[{"role": "user", "content": "hi"}])
|
|
finally:
|
|
server.shutdown()
|
|
|
|
assert captured["headers"].get("x-api-key") == "third-party-provider-key"
|
|
assert "authorization" not in captured["headers"]
|