mirror of
https://github.com/GNS3/gns3-server.git
synced 2026-08-27 12:30:13 +03:00
38742ad4b6
Since aef337e86 the config loader generates a random JWT secret even without a main config file, so the class-scoped client/authorized_client fixtures signed their tokens with a key that the autouse run_around_tests fixture would immediately replace with the default one for every test function. Every controller API test using those fixtures was failing with 401 (BadSignature). Sign both fixtures explicitly with DEFAULT_JWT_SECRET_KEY to match the secret enforced at request time.