From ec5304a1d0e0822349a8b430f2bad7ca7d0981b4 Mon Sep 17 00:00:00 2001
From: Hermes CI Fix <hermes-ci@sxbh.ltd>
Date: Thu, 27 Aug 2026 16:08:01 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20kpi=5Fcausality=E6=97=A0token=E6=B5=8B?=
 =?UTF-8?q?=E8=AF=95=E5=AF=B9=E9=BD=90=E9=A1=B9=E7=9B=AE=E7=BA=A6=E5=AE=9A?=
 =?UTF-8?q?(403)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

并发agent新增测试期望401, 与项目约定(test_reports: router级require_role→403)冲突
- 测试改为403(HTTPBearer默认行为即403)
- pytest 588 passed
---
 backend/tests/test_kpi_causality.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/backend/tests/test_kpi_causality.py b/backend/tests/test_kpi_causality.py
index d27bc371..b4b739b4 100644
--- a/backend/tests/test_kpi_causality.py
+++ b/backend/tests/test_kpi_causality.py
@@ -348,6 +348,6 @@ class TestPermissions:
         assert resp.status_code == 200
 
     def test_no_token_denied(self, client: TestClient):
-        """无token → 401（HTTPBearer 标准行为）"""
+        """无token → 403（router级 require_role 直接拒绝，与 test_reports 约定一致）"""
         resp = client.get(BASE)
-        assert resp.status_code == 401
+        assert resp.status_code == 403