Bill
b310ee10a9
Add SessionTokenManager class that creates short-lived session tokens for HTTP proxy access. Each token includes agent identity, document scope, permissions, and expiration time.
24 lines
732 B
Python
24 lines
732 B
Python
import pytest
|
|
from datetime import datetime, timedelta, timezone
|
|
|
|
from grist_mcp.session import SessionTokenManager, SessionToken
|
|
|
|
|
|
def test_create_token_returns_valid_session_token():
|
|
manager = SessionTokenManager()
|
|
|
|
token = manager.create_token(
|
|
agent_name="test-agent",
|
|
document="sales",
|
|
permissions=["read", "write"],
|
|
ttl_seconds=300,
|
|
)
|
|
|
|
assert token.token.startswith("sess_")
|
|
assert len(token.token) > 20
|
|
assert token.document == "sales"
|
|
assert token.permissions == ["read", "write"]
|
|
assert token.agent_name == "test-agent"
|
|
assert token.expires_at > datetime.now(timezone.utc)
|
|
assert token.expires_at < datetime.now(timezone.utc) + timedelta(seconds=310)
|