Login Auth Test

import os
import requests

BASE = os.getenv("API_URL", "http://127.0.0.1:8000")
EMAIL = os.getenv("TEST_EMAIL", "ada@example.com")
PASSWORD = os.getenv("TEST_PASS", "correct-horse")

def test_login_ok():
    r = requests.post(
        f"{BASE}/api/auth/login",
        json={"email": EMAIL, "password": PASSWORD},
        timeout=5,
    )
    assert r.status_code == 200
    body = r.json()
    assert "access_token" in body

def test_login_bad_password():
    r = requests.post(
        f"{BASE}/api/auth/login",
        json={"email": EMAIL, "password": "nope"},
        timeout=5,
    )
    assert r.status_code in (400, 401)

def test_protected_with_token():
    login = requests.post(
        f"{BASE}/api/auth/login",
        json={"email": EMAIL, "password": PASSWORD},
        timeout=5,
    )
    token = login.json()["access_token"]
    me = requests.get(
        f"{BASE}/api/me",
        headers={"Authorization": f"Bearer {token}"},
        timeout=5,
    )
    assert me.status_code == 200