def METHOD_NAME(session, monkeypatch):  # pylint:disable=unused-argument
    """Assert that a user is not updateable without a token (should return None)."""
    token = {
        'preferred_username': 'CP1234567',
        'firstname': 'Bobby',
        'lasname': 'Joe',
        'realm_access': {
            'roles': [
                'edit',
                'uma_authorization',
                'basic'
            ]
        },
        'sub': '1b20db59-19a0-4727-affe-c6f64309fd04'
    }
    patch_token_info(token, monkeypatch)
    existing_user = User.create_from_jwt_token('Bobby', 'Joe')
    token = None
    patch_token_info(token, monkeypatch)
    user = User.update_from_jwt_token(existing_user, 'Bobby', 'Joe')
    assert user is None