Test that patient dashboard redirects unauthenticated users to login.

Test that prediction endpoint returns JSON on error

Test prediction endpoint returns proper response

Test that risk level is correctly saved based on probability.

Test that predictions are saved to the database.

Test that symptoms are stored as JSON string.

Test preset disease endpoint with valid data

Test preset disease endpoint with invalid disease

Test that ValueError is raised in production when GEMINI_API_KEY is missing

Test that FileNotFoundError is raised in production when a model file is missing

Test that ValueError is raised in production when SECRET_KEY is missing

Test that ValueError is raised in production when SECRET_KEY is too short/weak

POST /profile/update with no CSRF token must be rejected.

Test rare symptom combinations.

Test that RateLimiter initializes InMemoryBackend by default or when configured.

Test that RateLimiter falls back to InMemoryBackend if Redis connection/initialization fails.

Test that RateLimiter initializes SQLiteBackend when configured.

Test RedisBackend using mock Redis client executing Lua script.

A history failure must never break the prediction itself.

Test that app auto-generates SECRET_KEY in development when not provided

Test that app loads SECRET_KEY from environment variable

Test that app requires a reasonably long SECRET_KEY

Test that app raises error when SECRET_KEY is missing in production

Test that SECRET_KEY is not hardcoded in the application

Test that app recognizes FLASK_DEBUG=1 as development mode

Test that 500 errors return JSON

POST /signup with a valid CSRF token must not return 400 (CSRF passes).

POST /signup with no CSRF token must be rejected.

Test SQLiteBackend basic functionality.

Test SQLiteBackend cleanup of stale entries.

Test that successful responses have 200 status

Test that symptoms endpoint handles errors gracefully

Test that symptoms endpoint returns valid JSON

Test that symptoms response has correct format for frontend

Test that to_dict returns correct structure.

Test that 401 errors return JSON, not HTML

Create a test user and return their ID

Create a real user for authenticated dashboard tests.

Test that validation passes completely without warning/error when everything is present

Validate disease name. Args: disease: Disease name Returns: Tuple of (is_valid: bool, error_message

Decorator to validate that request contains valid JSON. Example: @app.route('/api/predict', methods=['POST']) @validate_json

Decorator for validating request data. Args: required_fields: List of required field names optional_fields: List of optional

Validate symptom list. Args: symptoms: List of symptoms Returns: Tuple of (is_valid: bool, error_me