Auth page must render csrf_token hidden input in both login and signup forms.

Profile page must render a csrf_token hidden input.

Test custom disease calculation endpoint

Test that critical risk count is correct.

Test dashboard with empty database.

Test that high risk count is correct.

Test that new cases (last 7 days) are counted correctly.

Test that doctor dashboard page loads successfully.

Test that risk percentages sum to exactly 100%.

Test that dashboard returns correct risk distribution counts.

Test that dashboard returns correct total patient count.

Test that dashboard API returns success status.

Test that in development mode, missing keys/models print warning but do NOT raise errors

Test edge case generation.

Test that error responses have non-200 status

Test that frontend can use response.ok to distinguish success

Test population generation.

Test single patient generation.

Test that symptoms JSON is correctly parsed to list.

Test that invalid JSON returns empty list.

Test that authenticated history request returns proper response structure

Test that history page redirects to login when not authenticated

Test that unauthenticated history request returns 401 JSON response

Test if home page loads correctly

Test that home page loads correctly

Test basic functionality of InMemoryBackend.

Test that stale entries are automatically cleaned up from in-memory backend.

Test that requests outside the window expire correctly.

POST /login with a valid CSRF token must not return 400 (CSRF passes, auth may still fail).

POST /login with no CSRF token must be rejected.