Function test_upload_delete_endpoint

e2e_playwright/web_server_test.py:473–488

Test that upload DELETE endpoint responds correctly. When XSRF protection is enabled (default), the server will return 403 Forbidden for requests without a valid XSRF token. When XSRF is disabled, it returns 204 No Content for DELETE operations.

(app: Page, app_base_url: str)

def test_upload_delete_endpoint(app: Page, app_base_url: str):
    """Test that upload DELETE endpoint responds correctly.

    When XSRF protection is enabled (default), the server will return 403 Forbidden
    for requests without a valid XSRF token.
    When XSRF is disabled, it returns 204 No Content for DELETE operations.
    """
    wait_for_app_loaded(app)

    # DELETE on a non-existent file
    response = app.request.delete(
        build_app_url(app_base_url, path="/_stcore/upload_file/any-session/any-file")
    )

    # Should return 204 (success) or 403 (XSRF protection)
    assert response.status in {204, 403}, f"Expected 204 or 403, got {response.status}"


# =============================================================================