feat(auth): add opaque bearer sessions

server/tests/test_risk_observations_service.py

@@ -5,12 +5,14 @@ from datetime import UTC, datetime
 from decimal import Decimal
 
 import pytest
+from auth_helpers import install_legacy_header_auth_override
 from fastapi import FastAPI
 from fastapi.testclient import TestClient
 from sqlalchemy import create_engine
 from sqlalchemy.orm import Session, sessionmaker
 from sqlalchemy.pool import StaticPool
 
+from app.algorithem.risk_graph.replay import AlgorithmReplaySetBuilder
 from app.api.deps import get_db
 from app.api.v1.endpoints.risk_observations import router as risk_observations_router
 from app.db.base import Base
@@ -18,7 +20,6 @@ from app.models.employee import Employee
 from app.models.financial_record import ExpenseClaim
 from app.models.risk_observation import RiskObservation
 from app.schemas.risk_observation import RiskObservationFeedbackCreate
-from app.algorithem.risk_graph.replay import AlgorithmReplaySetBuilder
 from app.services.risk_observations import RiskObservationService
 
 
@@ -266,6 +267,7 @@ def _build_client() -> tuple[TestClient, sessionmaker[Session]]:
     session_factory = sessionmaker(bind=engine, autoflush=False, autocommit=False)
     app = FastAPI()
     app.include_router(risk_observations_router, prefix="/api/v1")
+    install_legacy_header_auth_override(app)
 
     def override_db() -> Generator[Session, None, None]:
         db = session_factory()