feat: troppa roba davvero

backend/tests/integration/test_auth_integration.py

@@ -0,0 +1,25 @@
+import pytest
+
+pytestmark = [pytest.mark.integration, pytest.mark.api]
+
+
+def test_login_logout_revokes_real_token(real_client):
+    login_response = real_client.post(
+        "/auth/login",
+        json={"username": "integration-admin", "password": "integration-admin"},
+    )
+
+    assert login_response.status_code == 200
+    token = login_response.json()["access_token"]
+    headers = {"Authorization": f"Bearer {token}"}
+
+    list_response = real_client.get("/proxy", headers=headers)
+    assert list_response.status_code == 200
+    assert list_response.json() == []
+
+    logout_response = real_client.post("/auth/logout", headers=headers)
+    assert logout_response.status_code == 204
+
+    revoked_response = real_client.get("/proxy", headers=headers)
+    assert revoked_response.status_code == 401
+    assert revoked_response.json()["detail"] == "Could not validate credentials"