From ba5e90c5167a96575a92b932fdf3d775cbeceefe Mon Sep 17 00:00:00 2001
From: "MH.Dmitrii" <MH.Dmitrii@homyk.space>
Date: Sat, 5 Sep 2026 23:02:42 +0300
Subject: [PATCH] fix rate_limit tests and add prod_mode to env

---
 configs/.env.example                    | 4 +++-
 src/models/configs_read/env.py          | 2 ++
 src/web/protected_routes/auth_routes.py | 4 ++--
 tests/e2e/test_auth.py                  | 4 ++--
 4 files changed, 9 insertions(+), 5 deletions(-)

diff --git a/configs/.env.example b/configs/.env.example
index 8c56c27..e20e27c 100644
--- a/configs/.env.example
+++ b/configs/.env.example
@@ -11,4 +11,6 @@ DB_PORT="change_me"
 
 REDIS_PASSWORD="change_me"
 REDIS_PORT=change_me #int
-REDIS_HOST="change_me"
\ No newline at end of file
+REDIS_HOST="change_me"
+
+PROD_MODE=bool
\ No newline at end of file
diff --git a/src/models/configs_read/env.py b/src/models/configs_read/env.py
index 30e7be3..332dabb 100644
--- a/src/models/configs_read/env.py
+++ b/src/models/configs_read/env.py
@@ -20,6 +20,8 @@ class Env(Base):
     REDIS_PORT:int
     REDIS_HOST:str
     
+    PROD_MODE:bool
+    
     model_config=SettingsConfigDict(env_file="configs/.env", extra=None)
 
 env_settings=Env()  # type: ignore[call-arg]
\ No newline at end of file
diff --git a/src/web/protected_routes/auth_routes.py b/src/web/protected_routes/auth_routes.py
index f35d12b..4f95c5c 100644
--- a/src/web/protected_routes/auth_routes.py
+++ b/src/web/protected_routes/auth_routes.py
@@ -38,7 +38,7 @@ async def get_access_token(request: Request,
         key="refresh_token",
         value=refresh_token,
         httponly=True,
-        secure=True,
+        secure=env_settings.PROD_MODE,
         samesite="strict",
         max_age=env_settings.REFRESH_TOKEN_EXPIRE_DAYS * 24 * 60 * 60
     )
@@ -57,7 +57,7 @@ async def get_refresh_token(request:Request,
         key="refresh_token",
         value=refresh_token,
         httponly=True,
-        secure=True,
+        secure=env_settings.PROD_MODE,
         samesite="strict",
         max_age=env_settings.REFRESH_TOKEN_EXPIRE_DAYS * 24 * 60 * 60
     )
diff --git a/tests/e2e/test_auth.py b/tests/e2e/test_auth.py
index 39484ea..a39dd00 100644
--- a/tests/e2e/test_auth.py
+++ b/tests/e2e/test_auth.py
@@ -68,7 +68,7 @@ class TestRedis:
     
     
     @pytest.mark.parametrize("test_user_fixture", [([], [])], indirect=True)
-    async def test_get_logout_revoke_positive(self,test_user_fixture, target_url:str)->None:
+    async def test_logout_revokes_access_token(self,test_user_fixture, target_url:str)->None:
         
         session=test_user_fixture[0]
         
@@ -80,5 +80,5 @@ class TestRedis:
         with allure.step("verify token is revoked"), pytest.raises(HTTPStatusError) as exc_info:
             response = await session.get(f"{target_url}/protected")
             response.raise_for_status()
-        assert exc_info.value.response.status_code==429
+        assert exc_info.value.response.status_code==401
     
\ No newline at end of file