fix(jwk): missing auth header correctly returns 401 error

Author: asimurka

src/authentication/jwk_token.py

@@ -180,7 +180,8 @@ async def __call__(self, request: Request) -> AuthTuple:
             Authorization header is present.
         """
         if not request.headers.get("Authorization"):
-            return NO_AUTH_TUPLE
+            response = UnauthorizedResponse(cause="No Authorization header found")
+            raise HTTPException(**response.model_dump())
 
         user_token = extract_user_token(request.headers)
 

tests/e2e/features/rbac.feature

@@ -12,14 +12,20 @@ Feature: Role-Based Access Control (RBAC)
   # Authentication - Token Validation
   # ============================================
 
-  #https://issues.redhat.com/browse/LCORE-1210
-  @skip
   Scenario: Request without token returns 401
     Given The system is in default state
       And I remove the auth header
      When I access REST API endpoint "models" using HTTP GET method
      Then The status code of the response is 401
-      And The body of the response contains Missing or invalid credentials
+     And The body of the response is the following
+        """
+        {
+              "detail": {
+                  "response": "Missing or invalid credentials provided by client",
+                  "cause": "No Authorization header found"
+                }     
+        }
+        """
 
   Scenario: Request with malformed Authorization header returns 401
     Given The system is in default state

tests/unit/authentication/test_jwk_token.py

@@ -435,19 +435,16 @@ async def test_no_auth_header(
     mocked_signing_keys_server: Any,
     no_token_request: Request,
 ) -> None:
-    """Test with no Authorization header."""
+    """Test with no Authorization header returns 401 Unauthorized."""
     _ = mocked_signing_keys_server
 
     dependency = JwkTokenAuthDependency(default_jwk_configuration)
 
-    user_id, username, skip_userid_check, token_claims = await dependency(
-        no_token_request
-    )
+    with pytest.raises(HTTPException) as exc_info:
+        await dependency(no_token_request)
 
-    assert user_id == DEFAULT_USER_UID
-    assert username == DEFAULT_USER_NAME
-    assert skip_userid_check is True
-    assert token_claims == NO_USER_TOKEN
+    assert exc_info.value.status_code == 401
+    assert "No Authorization header found" in str(exc_info.value.detail)
 
 
 async def test_no_bearer(