From 02e93d993ddcd3a242407c95034a3e20db25e1e5 Mon Sep 17 00:00:00 2001 From: Alex Date: Fri, 3 Apr 2026 17:12:36 +0100 Subject: [PATCH] patch: available tools --- application/api/user/tools/routes.py | 2 ++ tests/api/user/test_tools_routes.py | 9 +++++++++ 2 files changed, 11 insertions(+) diff --git a/application/api/user/tools/routes.py b/application/api/user/tools/routes.py index 170b6e3c..316bea36 100644 --- a/application/api/user/tools/routes.py +++ b/application/api/user/tools/routes.py @@ -130,6 +130,8 @@ tools_ns = Namespace("tools", description="Tool management operations", path="/a class AvailableTools(Resource): @api.doc(description="Get available tools for a user") def get(self): + if not request.decoded_token: + return make_response(jsonify({"success": False}), 401) try: tools_metadata = [] for tool_name, tool_instance in tool_manager.tools.items(): diff --git a/tests/api/user/test_tools_routes.py b/tests/api/user/test_tools_routes.py index 38f6b5a8..722f52aa 100644 --- a/tests/api/user/test_tools_routes.py +++ b/tests/api/user/test_tools_routes.py @@ -395,6 +395,9 @@ class TestAvailableTools: "application.api.user.tools.routes.tool_manager", mock_manager ): with app.test_request_context("/api/available_tools"): + from flask import request + + request.decoded_token = {"sub": "user1"} response = AvailableTools().get() assert response.status_code == 200 @@ -419,6 +422,9 @@ class TestAvailableTools: "application.api.user.tools.routes.tool_manager", mock_manager ): with app.test_request_context("/api/available_tools"): + from flask import request + + request.decoded_token = {"sub": "user1"} response = AvailableTools().get() assert response.status_code == 400 @@ -438,6 +444,9 @@ class TestAvailableTools: "application.api.user.tools.routes.tool_manager", mock_manager ): with app.test_request_context("/api/available_tools"): + from flask import request + + request.decoded_token = {"sub": "user1"} response = AvailableTools().get() assert response.status_code == 200