feat: add OIDC browser sessions with live access enforcement
Some checks failed
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / pytest-smoke (push) Failing after 2s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e747-8f27-7242-8df8-8bc44f88c929
This commit is contained in:
tegwick 2026-09-28 12:17:16 +02:00
parent fdea2f5192
commit a15fe032b0
14 changed files with 807 additions and 31 deletions

View file

@ -62,3 +62,8 @@ def test_environment_composition_requires_explicit_owner_adapter(monkeypatch):
with TestClient(composed) as client:
assert client.get('/healthz').status_code == 200
assert composed.state.access_controller is not None
def test_direct_controller_cannot_be_silently_disabled():
with pytest.raises(ValueError, match='enforcement mode'):
create_app(settings=RuntimeSettings(), access_controller=object())