Skip to content

test(maas): update auth enforcement tests for API key flow #1197

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
dbasunag merged 2 commits into from
Mar 10, 2026
Merged

test(maas): update auth enforcement tests for API key flow #1197

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
c213abc
test(maas): update auth enforcement tests for API key flow
SB159 Mar 10, 2026
2d2f799
Merge branch 'main' into feature/update-auth-tc-api-key
dbasunag Mar 10, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
49 changes: 28 additions & 21 deletions ...s/model_serving/model_server/maas_billing/maas_subscription/test_maas_auth_enforcement.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,10 @@
import requests
from simple_logger.logger import get_logger

from tests.model_serving.model_server.maas_billing.maas_subscription.utils import chat_payload_for_url
from tests.model_serving.model_server.maas_billing.maas_subscription.utils import (
chat_payload_for_url,
poll_expected_status,
)
from tests.model_serving.model_server.maas_billing.utils import build_maas_headers
from utilities.plugins.constant import RestHeader

Expand All @@ -24,44 +27,46 @@
"maas_subscription_tinyllama_premium",
)
class TestMaaSAuthPolicyEnforcementTinyLlama:
@pytest.mark.sanity
@pytest.mark.smoke
@pytest.mark.parametrize("ocp_token_for_actor", [{"type": "free"}], indirect=True)
def test_authorized_user_gets_200(
self,
request_session_http: requests.Session,
model_url_tinyllama_free: str,
ocp_token_for_actor: str,
maas_headers_for_actor_api_key: dict[str, str],
) -> None:
headers = build_maas_headers(token=ocp_token_for_actor)
payload = chat_payload_for_url(model_url=model_url_tinyllama_free)

resp = request_session_http.post(
url=model_url_tinyllama_free,
headers=headers,
json=payload,
timeout=60,
resp = poll_expected_status(
request_session_http=request_session_http,
model_url=model_url_tinyllama_free,
headers=maas_headers_for_actor_api_key,
payload=payload,
expected_statuses={200},
)

LOGGER.info(f"test_authorized_user_gets_200 -> POST {model_url_tinyllama_free} returned {resp.status_code}")
assert resp.status_code == 200, f"Expected 200, got {resp.status_code}: {resp.text[:200]}"

@pytest.mark.sanity
@pytest.mark.smoke
def test_no_auth_header_gets_401(
self,
request_session_http: requests.Session,
model_url_tinyllama_free: str,
) -> None:
payload = chat_payload_for_url(model_url=model_url_tinyllama_free)

resp = request_session_http.post(
url=model_url_tinyllama_free,
resp = poll_expected_status(
request_session_http=request_session_http,
model_url=model_url_tinyllama_free,
headers=RestHeader.HEADERS,
json=payload,
timeout=60,
payload=payload,
expected_statuses={401},
)
LOGGER.info(f"test_no_auth_header_gets_401 -> POST {model_url_tinyllama_free} returned {resp.status_code}")
assert resp.status_code == 401, f"Expected 401, got {resp.status_code}: {resp.text[:200]}"

@pytest.mark.sanity
@pytest.mark.smoke
def test_invalid_token_gets_401(
self,
request_session_http: requests.Session,
Expand All @@ -76,10 +81,11 @@ def test_invalid_token_gets_401(
json=payload,
timeout=60,
)

LOGGER.info(f"test_invalid_token_gets_401 -> POST {model_url_tinyllama_free} returned {resp.status_code}")
assert resp.status_code == 401, f"Expected 401, got {resp.status_code}: {resp.text[:200]}"
assert resp.status_code in (401, 403), f"Expected 401 or 403, got {resp.status_code}: {(resp.text or '')[:200]}"

@pytest.mark.sanity
@pytest.mark.smoke
def test_wrong_group_sa_denied_on_premium_model(
self,
request_session_http: requests.Session,
Expand All @@ -88,11 +94,12 @@ def test_wrong_group_sa_denied_on_premium_model(
) -> None:
payload = chat_payload_for_url(model_url=model_url_tinyllama_premium)

resp = request_session_http.post(
url=model_url_tinyllama_premium,
resp = poll_expected_status(
request_session_http=request_session_http,
model_url=model_url_tinyllama_premium,
headers=maas_headers_for_wrong_group_sa,
json=payload,
timeout=60,
payload=payload,
expected_statuses={403},
)
LOGGER.info(
"test_wrong_group_sa_denied_on_premium_model -> "
Expand Down
1 change: 0 additions & 1 deletion tests/model_serving/model_server/maas_billing/maas_subscription/utils.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -85,7 +85,6 @@ def chat_payload_for_url(model_url: str, *, prompt: str = "Hello", max_tokens: i


def poll_expected_status(
*,
request_session_http: requests.Session,
model_url: str,
headers: dict[str, str],
Expand Down