from fastapi.testclient import TestClient

from app.main import app
from app.security.idp_jwt import ProviderTokenVerifier


def test_infer_jwks_url() -> None:
    assert ProviderTokenVerifier._infer_jwks_url("https://auth.ose.tw/application/o/member/") == (
        "https://auth.ose.tw/application/o/member/protocol/openid-connect/certs"
    )


def test_me_requires_bearer_token() -> None:
    client = TestClient(app)
    resp = client.get("/me")
    assert resp.status_code == 401
    assert resp.json()["detail"] == "missing_bearer_token"