[
  "tests/test_auth.py::test_allowlisted_api_paths_are_public[/api/health]",
  "tests/test_auth.py::test_allowlisted_api_paths_are_public[/api/me]",
  "tests/test_auth.py::test_empty_secret_never_validates",
  "tests/test_auth.py::test_expired_session_is_rejected",
  "tests/test_auth.py::test_extended_expiry_is_rejected",
  "tests/test_auth.py::test_gated_route_401s_on_a_forged_session",
  "tests/test_auth.py::test_gated_route_401s_without_a_session",
  "tests/test_auth.py::test_health_is_reachable_anonymously",
  "tests/test_auth.py::test_malformed_sessions_are_rejected[]",
  "tests/test_auth.py::test_malformed_sessions_are_rejected[a|b|c|d]",
  "tests/test_auth.py::test_malformed_sessions_are_rejected[rian]",
  "tests/test_auth.py::test_malformed_sessions_are_rejected[rian|123]",
  "tests/test_auth.py::test_malformed_sessions_are_rejected[rian|abc|deadbeef]",
  "tests/test_auth.py::test_me_offers_the_silent_probe_once_then_stops",
  "tests/test_auth.py::test_me_reports_anonymous_instead_of_401",
  "tests/test_auth.py::test_only_invited_roles_are_admitted",
  "tests/test_auth.py::test_other_api_paths_are_gated[/api/account]",
  "tests/test_auth.py::test_other_api_paths_are_gated[/api/admin/invites]",
  "tests/test_auth.py::test_other_api_paths_are_gated[/api/health/secrets]",
  "tests/test_auth.py::test_other_api_paths_are_gated[/api/me/tokens]",
  "tests/test_auth.py::test_other_api_paths_are_gated[/api/openapi.json]",
  "tests/test_auth.py::test_other_api_paths_are_gated[/api/version]",
  "tests/test_auth.py::test_safe_next_keeps_same_origin_paths",
  "tests/test_auth.py::test_safe_next_rejects_offsite_targets[//evil.example]",
  "tests/test_auth.py::test_safe_next_rejects_offsite_targets[/\\\\evil.example]",
  "tests/test_auth.py::test_safe_next_rejects_offsite_targets[None]",
  "tests/test_auth.py::test_safe_next_rejects_offsite_targets[]",
  "tests/test_auth.py::test_safe_next_rejects_offsite_targets[evil]",
  "tests/test_auth.py::test_safe_next_rejects_offsite_targets[https://evil.example]",
  "tests/test_auth.py::test_shell_and_auth_flow_are_public[/]",
  "tests/test_auth.py::test_shell_and_auth_flow_are_public[/assets/x.js]",
  "tests/test_auth.py::test_shell_and_auth_flow_are_public[/auth/callback]",
  "tests/test_auth.py::test_shell_and_auth_flow_are_public[/login]",
  "tests/test_auth.py::test_shell_and_auth_flow_are_public[/logout]",
  "tests/test_auth.py::test_tampered_username_is_rejected",
  "tests/test_auth.py::test_unknown_roles_are_denied[None]",
  "tests/test_auth.py::test_unknown_roles_are_denied[SUPERADMIN]",
  "tests/test_auth.py::test_unknown_roles_are_denied[]",
  "tests/test_auth.py::test_unknown_roles_are_denied[admin]",
  "tests/test_auth.py::test_unknown_roles_are_denied[owner]",
  "tests/test_auth.py::test_valid_session_roundtrips",
  "tests/test_spotify.py::test_authorize_url_is_well_formed",
  "tests/test_spotify.py::test_callback_cannot_be_reached_anonymously",
  "tests/test_spotify.py::test_encryption_refuses_to_store_plaintext_without_a_key",
  "tests/test_spotify.py::test_every_requested_scope_has_a_stated_reason",
  "tests/test_spotify.py::test_key_change_makes_old_values_undecryptable",
  "tests/test_spotify.py::test_no_playback_or_library_write_scopes_requested",
  "tests/test_spotify.py::test_placeholder_key_reads_as_absent",
  "tests/test_spotify.py::test_round_trip_and_tamper_detection",
  "tests/test_spotify.py::test_spotify_api_routes_require_a_session",
  "tests/test_spotify.py::test_spotify_browser_routes_redirect_when_signed_out[/spotify/callback]",
  "tests/test_spotify.py::test_spotify_browser_routes_redirect_when_signed_out[/spotify/connect]",
  "tests/test_spotify.py::test_spotify_reports_unconfigured_without_credentials"
]