Class StaticTokenVerifier

tests/interaction/auth/_harness.py:88–101

A `TokenVerifier` backed by a fixed token→`AccessToken` mapping. Any token string not in the mapping verifies to `None`, which the bearer middleware treats as an unrecognized token. Tests seed the mapping with the exact token shapes (valid, expired, wrong scope, wrong audience) they nee

class StaticTokenVerifier:
    """A `TokenVerifier` backed by a fixed token→`AccessToken` mapping.

    Any token string not in the mapping verifies to `None`, which the bearer middleware treats
    as an unrecognized token. Tests seed the mapping with the exact token shapes (valid, expired,
    wrong scope, wrong audience) they need so the resource-server gate's behaviour is asserted in
    isolation from the authorization-server provider.
    """

    def __init__(self, tokens: Mapping[str, AccessToken]) -> None:
        self._tokens = dict(tokens)

    async def verify_token(self, token: str) -> AccessToken | None:
        return self._tokens.get(token)


class InMemoryTokenStorage: