Create OpaClient as part of server lifecycle

Author: tpoliaw

src/blueapi/service/main.py

@@ -40,6 +40,7 @@
 from blueapi.worker import TrackableTask, WorkerState
 from blueapi.worker.event import TaskStatusEnum
 
+from .authorization import OpaClient
 from .model import (
     DeviceModel,
     DeviceResponse,
@@ -93,8 +94,13 @@ def teardown_runner():
 def lifespan(config: ApplicationConfig):
     @asynccontextmanager
     async def inner(app: FastAPI):
+        if not (meta := config.env.metadata):
+            raise ValueError("Instrument name is required in metadata")
+
         setup_runner(config)
-        yield
+        async with OpaClient.for_config(meta.instrument, config.opa) as opa:
+            app.state.authz = opa
+            yield
         teardown_runner()
 
     return inner

tests/unit_tests/service/test_main.py

@@ -1,5 +1,5 @@
 from unittest import mock
-from unittest.mock import Mock, call
+from unittest.mock import Mock, call, patch
 
 import pytest
 from fastapi import FastAPI, Request
@@ -10,6 +10,7 @@
 from blueapi.service.main import (
     add_version_headers,
     get_passthrough_headers,
+    lifespan,
     log_request_details,
 )
 
@@ -79,3 +80,18 @@ def test_get_passthrough_headers(
     request = Mock(spec=Request)
     request.headers = headers
     assert get_passthrough_headers(request) == expected_headers
+
+
+@patch("blueapi.service.main.teardown_runner")
+@patch("blueapi.service.main.setup_runner")
+async def test_lifespan(setup: Mock, teardown: Mock):
+    conf = ApplicationConfig()
+    lifespan_fn = lifespan(conf)
+
+    app = Mock()
+
+    async with lifespan_fn(app):
+        setup.assert_called_once_with(conf)
+        teardown.assert_not_called()
+
+    teardown.assert_called_once()