Publish curated ITWorx-ModelForge source from 990401737f96c8d46a9f7b0d84994516cadcb6a0

backend/tests/test_hardware_api.py

@@ -1,5 +1,7 @@
+import pytest
 from fastapi.testclient import TestClient
 from hardware_fakes import FakeAcceleratorCollector, FakeHostCollector, accelerator
+from http_contract_fakes import isolated_http_contract  # noqa: F401 - opt-in pytest fixture
 from pydantic import SecretStr
 from sqlalchemy import create_engine
 from sqlalchemy.orm import Session
@@ -11,6 +13,8 @@ from modelforge_api.persistence.models import Base
 from modelforge_api.services.hardware_inventory import HardwareInventoryService, HardwareRefreshBusy
 from modelforge_api.settings import Settings, get_settings
 
+pytestmark = pytest.mark.usefixtures("isolated_http_contract")
+
 
 def _test_operator_credential() -> str:
     return "hardware-test-operator"
@@ -86,6 +90,7 @@ def test_hardware_refresh_and_resource_endpoints_serialize_real_and_unknown_valu
     finally:
         app.dependency_overrides.clear()
         session.close()
+        engine.dispose()
 
 
 def test_concurrent_refresh_returns_normalized_conflict() -> None:
@@ -119,3 +124,16 @@ def test_refresh_failure_returns_normalized_service_unavailable() -> None:
             assert response.json()["error"]["message"] == "hardware inventory failed: RuntimeError"
     finally:
         app.dependency_overrides.clear()
+
+
+def test_hardware_contract_preserves_operator_authentication_and_correlation() -> None:
+    _configure_operator_auth()
+    with TestClient(app) as client:
+        response = client.post(
+            "/api/v1/hardware/refresh", headers={"X-Correlation-ID": "hardware-auth-test"}
+        )
+    assert response.status_code == 401
+    assert response.json()["error"]["code"] == "http_401"
+    assert response.json()["error"]["correlation_id"] == "hardware-auth-test"
+    assert response.headers["x-correlation-id"] == "hardware-auth-test"
+    assert response.headers["cache-control"] == "no-store"