import pytest

pytestmark = [pytest.mark.integration, pytest.mark.api]


def test_login_logout_revokes_real_token(real_client):
    login_response = real_client.post(
        "/auth/login",
        json={"username": "integration-admin", "password": "integration-admin"},
    )

    assert login_response.status_code == 200
    token = login_response.json()["access_token"]
    headers = {"Authorization": f"Bearer {token}"}

    list_response = real_client.get("/proxy", headers=headers)
    assert list_response.status_code == 200
    assert list_response.json() == []

    logout_response = real_client.post("/auth/logout", headers=headers)
    assert logout_response.status_code == 204

    revoked_response = real_client.get("/proxy", headers=headers)
    assert revoked_response.status_code == 401
    assert revoked_response.json()["detail"] == "Could not validate credentials"