Mark the invalid-token test fixture as a deliberate non-secret

JE-Chen · JE-Chen · commit cf8d891402d5 · 2026-07-23T11:27:43.000+08:00
Bandit B106 flagged the intentionally wrong token used to assert that
authentication rejects it, matching the suppression the surrounding
fixtures already carry.
diff --git a/test/unit_test/test_socket_server.py b/test/unit_test/test_socket_server.py
@@ -287,7 +287,7 @@ def test_framed_wrong_token_is_rejected(self):
         server = self._serve(auth_token="secret")  # nosec B106 — fake fixture
         host, port = server.server_address
         with socket.create_connection((host, port)) as client:
-            reply = send_command(
+            reply = send_command(  # nosec B106 — deliberately invalid fixture token
                 client, json.dumps([["WR_unknown_command"]]), auth_token="wrong",
             )
         self.assertIn(b"unauthorized", reply)

Original file line number	Diff line number	Diff line change
`@@ -287,7 +287,7 @@ def test_framed_wrong_token_is_rejected(self):`
`287`	`287`	`server = self._serve(auth_token="secret") # nosec B106 — fake fixture`
`288`	`288`	`host, port = server.server_address`
`289`	`289`	`with socket.create_connection((host, port)) as client:`
`290`		`- reply = send_command(`
	`290`	`+ reply = send_command( # nosec B106 — deliberately invalid fixture token`
`291`	`291`	`client, json.dumps([["WR_unknown_command"]]), auth_token="wrong",`
`292`	`292`	`)`
`293`	`293`	`self.assertIn(b"unauthorized", reply)`