Add test to ensure anonymous users cannot provide credentials

galaxyproject · Jan 20, 2025 · 286a865 · 286a865
1 parent 904202d
commit 286a865
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/test/integration/test_credentials.py b/test/integration/test_credentials.py
@@ -16,6 +16,11 @@ def test_provide_credential(self):
         assert len(created_user_credentials[0]["groups"]["default"]["variables"]) == 1
         assert len(created_user_credentials[0]["groups"]["default"]["secrets"]) == 3
 
+    def test_anon_users_cannot_provide_credentials(self):
+        payload = self._build_credentials_payload()
+        response = self._post("/api/users/current/credentials", data=payload, json=True, anon=True)
+        self._assert_status_code_is(response, 403)
+
     def test_list_user_credentials(self):
         source_id = f"test_tool_list_credentials_{uuid4()}"
         payload = self._build_credentials_payload(source_id=source_id)