feat(auth): add opaque bearer sessions

server/tests/test_attachment_association_jobs.py

@@ -5,6 +5,7 @@ from collections.abc import Generator
 from datetime import UTC, date, datetime
 from decimal import Decimal
 
+from auth_helpers import install_legacy_header_auth_override
 from fastapi.testclient import TestClient
 from sqlalchemy import select
 from sqlalchemy.orm import Session, selectinload
@@ -17,8 +18,8 @@ from app.models.employee import Employee
 from app.models.financial_record import ExpenseClaim, ExpenseClaimItem
 from app.schemas.ocr import OcrRecognizeBatchRead, OcrRecognizeDocumentRead, OcrRecognizeFieldRead
 from app.services.attachment_association_jobs import clear_attachment_association_jobs_for_tests
-from app.services.expense_claims import ExpenseClaimService
 from app.services.expense_claim_attachment_storage import ExpenseClaimAttachmentStorage
+from app.services.expense_claims import ExpenseClaimService
 from app.services.ocr import OcrService
 from app.services.receipt_folder import ReceiptFolderService
 from app.test_helpers.db import build_in_memory_session_factory
@@ -27,6 +28,7 @@ from app.test_helpers.db import build_in_memory_session_factory
 def build_client(monkeypatch) -> tuple[TestClient, object]:
     session_factory = build_in_memory_session_factory()
     app = create_app()
+    install_legacy_header_auth_override(app)
 
     def override_db() -> Generator[Session, None, None]:
         db = session_factory()