diff --git a/authentication/authentication.py b/authentication/authentication.py
index 445bcc7..6937a58 100644
--- a/authentication/authentication.py
+++ b/authentication/authentication.py
@@ -250,9 +250,10 @@ def signup():
 @app.route('/todos', methods=['POST'])
 @consumes('application/json')
 @jsonschema.validate('todos', 'create')
+@login_required
 def create_todo():
     """
-    Create a new todo item.
+    Create a new todo item. Requires log in.
 
     :reqheader Content-Type: application/json
     :resheader Content-Type: application/json
@@ -287,9 +288,10 @@ def create_todo():
 
 @app.route('/todos/<id>', methods=['GET'])
 @consumes('application/json')
+@login_required
 def read_todo(id):
     """
-    Get information about a particular todo item.
+    Get information about a particular todo item. Requires log in.
 
     :reqheader Content-Type: application/json
     :resheader Content-Type: application/json
@@ -307,9 +309,10 @@ def read_todo(id):
 
 @app.route('/todos/<id>', methods=['DELETE'])
 @consumes('application/json')
+@login_required
 def delete_todo(id):
     """
-    Delete a particular todo item.
+    Delete a particular todo item. Requires log in.
 
     :reqheader Content-Type: application/json
     :resheader Content-Type: application/json
@@ -325,9 +328,10 @@ def delete_todo(id):
 
 @app.route('/todos', methods=['GET'])
 @consumes('application/json')
+@login_required
 def list_todos():
     """
-    List todo items, with optional filters.
+    List todo items, with optional filters. Requires log in.
 
     :reqheader Content-Type: application/json
     :resheader Content-Type: application/json
@@ -349,10 +353,11 @@ def list_todos():
 
 @app.route('/todos/<id>', methods=['PATCH'])
 @consumes('application/json')
+@login_required
 def update_todo(id):
     """
     Update a todo item. If an item is changed from not-completed to completed,
-    the ``completion_timestamp`` is set as now.
+    the ``completion_timestamp`` is set as now. Requires log in.
 
     :reqheader Content-Type: application/json
 

Protect the TODO CRUD APIs
diff --git a/authentication/tests/test_authentication.py b/authentication/tests/test_authentication.py
index 6f7108a..29fb21c 100644
--- a/authentication/tests/test_authentication.py
+++ b/authentication/tests/test_authentication.py
@@ -30,6 +30,7 @@ from storage.tests.testtools import InMemoryStorageTests
 USER_DATA = {'email': 'alice@example.com', 'password': 'secret'}
 COMPLETED_TODO_DATA = {'content': 'Buy milk', 'completed': True}
 NOT_COMPLETED_TODO_DATA = {'content': 'Get haircut', 'completed': False}
+TIMESTAMP = 1463437744.335567
 
 
 class AuthenticationTests(InMemoryStorageTests):
@@ -93,6 +94,19 @@ class AuthenticationTests(InMemoryStorageTests):
             {key: value for (key, value) in response.headers},
             response.data)
 
+    def log_in_as_new_user(self):
+        """
+        Create a user and log in as that user.
+        """
+        self.app.post(
+            '/signup',
+            content_type='application/json',
+            data=json.dumps(USER_DATA))
+        self.app.post(
+            '/login',
+            content_type='application/json',
+            data=json.dumps(USER_DATA))
+
 
 class SignupTests(AuthenticationTests):
     """
@@ -503,6 +517,7 @@ class CreateTodoTests(AuthenticationTests):
         returns a JSON response with the given data and a ``null``
         ``completion_timestamp``.
         """
+        self.log_in_as_new_user()
         response = self.app.post(
             '/todos',
             content_type='application/json',
@@ -516,12 +531,13 @@ class CreateTodoTests(AuthenticationTests):
         self.assertEqual(response.json, expected)
 
     @responses.activate
-    @freeze_time(datetime.datetime.fromtimestamp(5.01, tz=pytz.utc))
+    @freeze_time(datetime.datetime.fromtimestamp(TIMESTAMP, tz=pytz.utc))
     def test_current_completion_time(self):
         """
         If the completed flag is set to ``true`` then the completed time is
         the number of seconds since the epoch.
         """
+        self.log_in_as_new_user()
         response = self.app.post(
             '/todos',
             content_type='application/json',
@@ -534,7 +550,7 @@ class CreateTodoTests(AuthenticationTests):
         # some accuracy).
         self.assertAlmostEqual(
             response.json['completion_timestamp'],
-            5.01,
+            TIMESTAMP,
             places=3,
         )
 
@@ -580,14 +596,29 @@ class CreateTodoTests(AuthenticationTests):
         }
         self.assertEqual(response.json, expected)
 
+    @responses.activate
     def test_incorrect_content_type(self):
         """
         If a Content-Type header other than 'application/json' is given, an
         UNSUPPORTED_MEDIA_TYPE status code is given.
         """
+        self.log_in_as_new_user()
         response = self.app.post('/todos', content_type='text/html')
         self.assertEqual(response.status_code, codes.UNSUPPORTED_MEDIA_TYPE)
 
+    @responses.activate
+    def test_not_logged_in(self):
+        """
+        When no user is logged in, an UNAUTHORIZED status code is returned.
+        """
+        response = self.app.post(
+            '/todos',
+            content_type='application/json',
+            data=json.dumps(NOT_COMPLETED_TODO_DATA),
+        )
+
+        self.assertEqual(response.status_code, codes.UNAUTHORIZED)
+
 
 class ReadTodoTests(AuthenticationTests):
     """
@@ -600,6 +631,7 @@ class ReadTodoTests(AuthenticationTests):
         A ``GET`` request for an existing todo an OK status code and the todo's
         details.
         """
+        self.log_in_as_new_user()
         create = self.app.post(
             '/todos',
             content_type='application/json',
@@ -618,12 +650,13 @@ class ReadTodoTests(AuthenticationTests):
         self.assertEqual(read.json, expected)
 
     @responses.activate
-    @freeze_time(datetime.datetime.fromtimestamp(5, tz=pytz.utc))
+    @freeze_time(datetime.datetime.fromtimestamp(TIMESTAMP, tz=pytz.utc))
     def test_completed(self):
         """
         A ``GET`` request for an existing todo an OK status code and the todo's
         details, included the completion timestamp.
         """
+        self.log_in_as_new_user()
         create = self.app.post(
             '/todos',
             content_type='application/json',
@@ -637,8 +670,12 @@ class ReadTodoTests(AuthenticationTests):
 
         self.assertEqual(read.status_code, codes.OK)
         expected = COMPLETED_TODO_DATA.copy()
-        expected['completion_timestamp'] = 5
         expected['id'] = create.json['id']
+        self.assertAlmostEqual(
+            read.json.pop('completion_timestamp'),
+            TIMESTAMP,
+            places=3
+        )
         self.assertEqual(read.json, expected)
 
     @responses.activate
@@ -646,6 +683,7 @@ class ReadTodoTests(AuthenticationTests):
         """
         A ``GET`` request gets the correct todo when there are multiple.
         """
+        self.log_in_as_new_user()
         self.app.post(
             '/todos',
             content_type='application/json',
@@ -681,6 +719,7 @@ class ReadTodoTests(AuthenticationTests):
         A ``GET`` request for a todo which does not exist returns a NOT_FOUND
         status code and error details.
         """
+        self.log_in_as_new_user()
         response = self.app.get('/todos/1', content_type='application/json')
 
         self.assertEqual(response.headers['Content-Type'], 'application/json')
@@ -699,6 +738,27 @@ class ReadTodoTests(AuthenticationTests):
         response = self.app.get('/todos/1', content_type='text/html')
         self.assertEqual(response.status_code, codes.UNSUPPORTED_MEDIA_TYPE)
 
+    @responses.activate
+    def test_not_logged_in(self):
+        """
+        When no user is logged in, an UNAUTHORIZED status code is returned.
+        """
+        self.log_in_as_new_user()
+        create = self.app.post(
+            '/todos',
+            content_type='application/json',
+            data=json.dumps(NOT_COMPLETED_TODO_DATA),
+        )
+
+        self.app.post('/logout', content_type='application/json')
+
+        read = self.app.get(
+            '/todos/{id}'.format(id=create.json['id']),
+            content_type='application/json',
+        )
+
+        self.assertEqual(read.status_code, codes.UNAUTHORIZED)
+
 
 class DeleteTodoTests(AuthenticationTests):
     """
@@ -710,6 +770,7 @@ class DeleteTodoTests(AuthenticationTests):
         """
         It is possible to delete a todo item.
         """
+        self.log_in_as_new_user()
         create = self.app.post(
             '/todos',
             content_type='application/json',
@@ -735,6 +796,7 @@ class DeleteTodoTests(AuthenticationTests):
         """
         Deleting an item twice gives returns a 404 code and error message.
         """
+        self.log_in_as_new_user()
         create = self.app.post(
             '/todos',
             content_type='application/json',
@@ -758,14 +820,38 @@ class DeleteTodoTests(AuthenticationTests):
         }
         self.assertEqual(delete.json, expected)
 
+    @responses.activate
     def test_incorrect_content_type(self):
         """
         If a Content-Type header other than 'application/json' is given, an
         UNSUPPORTED_MEDIA_TYPE status code is given.
         """
+        self.log_in_as_new_user()
         response = self.app.delete('/todos/1', content_type='text/html')
         self.assertEqual(response.status_code, codes.UNSUPPORTED_MEDIA_TYPE)
 
+    @responses.activate
+    def test_not_logged_in(self):
+        """
+        When no user is logged in, an UNAUTHORIZED status code is returned.
+        """
+        self.log_in_as_new_user()
+
+        create = self.app.post(
+            '/todos',
+            content_type='application/json',
+            data=json.dumps(COMPLETED_TODO_DATA),
+        )
+
+        self.app.post('/logout', content_type='application/json')
+
+        delete = self.app.delete(
+            '/todos/{id}'.format(id=create.json['id']),
+            content_type='application/json',
+        )
+
+        self.assertEqual(delete.status_code, codes.UNAUTHORIZED)
+
 
 class ListTodosTests(AuthenticationTests):
     """
@@ -777,6 +863,7 @@ class ListTodosTests(AuthenticationTests):
         """
         When there are no todos, an empty array is returned.
         """
+        self.log_in_as_new_user()
         list_todos = self.app.get(
             '/todos',
             content_type='application/json',
@@ -785,11 +872,24 @@ class ListTodosTests(AuthenticationTests):
         self.assertEqual(list_todos.status_code, codes.OK)
         self.assertEqual(list_todos.json['todos'], [])
 
+    @responses.activate
+    def test_not_logged_in(self):
+        """
+        When no user is logged in, an UNAUTHORIZED status code is returned.
+        """
+        list_todos = self.app.get(
+            '/todos',
+            content_type='application/json',
+        )
+
+        self.assertEqual(list_todos.status_code, codes.UNAUTHORIZED)
+
     @responses.activate
     def test_list(self):
         """
         All todos are listed.
         """
+        self.log_in_as_new_user()
         other_todo = NOT_COMPLETED_TODO_DATA.copy()
         other_todo['content'] = 'Get a haircut'
 
@@ -815,11 +915,12 @@ class ListTodosTests(AuthenticationTests):
         self.assertEqual(list_todos.json['todos'], expected)
 
     @responses.activate
-    @freeze_time(datetime.datetime.fromtimestamp(5, tz=pytz.utc))
+    @freeze_time(datetime.datetime.fromtimestamp(TIMESTAMP, tz=pytz.utc))
     def test_filter_completed(self):
         """
         It is possible to filter by only completed items.
         """
+        self.log_in_as_new_user()
         self.app.post(
             '/todos',
             content_type='application/json',
@@ -842,15 +943,21 @@ class ListTodosTests(AuthenticationTests):
 
         self.assertEqual(list_todos.status_code, codes.OK)
         expected = COMPLETED_TODO_DATA.copy()
-        expected['completion_timestamp'] = 5.0
         expected['id'] = 2
-        self.assertEqual(list_todos_data['todos'], [expected])
+        [todo] = list_todos_data['todos']
+        self.assertAlmostEqual(
+            todo.pop('completion_timestamp'),
+            TIMESTAMP,
+            places=3,
+        )
+        self.assertEqual(todo, expected)
 
     @responses.activate
     def test_filter_not_completed(self):
         """
         It is possible to filter by only items which are not completed.
         """
+        self.log_in_as_new_user()
         self.app.post(
             '/todos',
             content_type='application/json',
@@ -877,6 +984,7 @@ class ListTodosTests(AuthenticationTests):
         expected['id'] = 1
         self.assertEqual(list_todos_data['todos'], [expected])
 
+    @responses.activate
     def test_incorrect_content_type(self):
         """
         If a Content-Type header other than 'application/json' is given, an
@@ -896,6 +1004,7 @@ class UpdateTodoTests(AuthenticationTests):
         """
         It is possible to change the content of a todo item.
         """
+        self.log_in_as_new_user()
         create = self.app.post(
             '/todos',
             content_type='application/json',
@@ -924,11 +1033,34 @@ class UpdateTodoTests(AuthenticationTests):
         self.assertEqual(read.json, expected)
 
     @responses.activate
-    @freeze_time(datetime.datetime.fromtimestamp(5.0, tz=pytz.utc))
+    def test_not_logged_in(self):
+        """
+        When no user is logged in, an UNAUTHORIZED status code is returned.
+        """
+        self.log_in_as_new_user()
+        create = self.app.post(
+            '/todos',
+            content_type='application/json',
+            data=json.dumps(NOT_COMPLETED_TODO_DATA),
+        )
+
+        self.app.post('/logout', content_type='application/json')
+
+        patch = self.app.patch(
+            '/todos/{id}'.format(id=create.json['id']),
+            content_type='application/json',
+            data=json.dumps({'content': 'Book vacation'}),
+        )
+
+        self.assertEqual(patch.status_code, codes.UNAUTHORIZED)
+
+    @responses.activate
+    @freeze_time(datetime.datetime.fromtimestamp(TIMESTAMP, tz=pytz.utc))
     def test_flag_completed(self):
         """
         It is possible to flag a todo item as completed.
         """
+        self.log_in_as_new_user()
         create = self.app.post(
             '/todos',
             content_type='application/json',
@@ -943,10 +1075,14 @@ class UpdateTodoTests(AuthenticationTests):
 
         expected = create.json
         expected['completed'] = True
-        # Timestamp set to now, the time it is first marked completed.
-        expected['completion_timestamp'] = 5.0
+        expected['completion_timestamp'] = TIMESTAMP
 
         self.assertEqual(patch.status_code, codes.OK)
+        self.assertAlmostEqual(
+            patch.json.pop('completion_timestamp'),
+            expected.pop('completion_timestamp'),
+            places=3,
+        )
         self.assertEqual(patch.json, expected)
 
         read = self.app.get(
@@ -954,6 +1090,11 @@ class UpdateTodoTests(AuthenticationTests):
             content_type='application/json',
         )
 
+        self.assertAlmostEqual(
+            read.json.pop('completion_timestamp'),
+            TIMESTAMP,
+            places=3,
+        )
         self.assertEqual(read.json, expected)
 
     @responses.activate
@@ -961,6 +1102,7 @@ class UpdateTodoTests(AuthenticationTests):
         """
         It is possible to flag a todo item as not completed.
         """
+        self.log_in_as_new_user()
         create = self.app.post(
             '/todos',
             content_type='application/json',
@@ -994,6 +1136,7 @@ class UpdateTodoTests(AuthenticationTests):
         It is possible to change the content of a todo item, as well as marking
         the item as completed.
         """
+        self.log_in_as_new_user()
         create = self.app.post(
             '/todos',
             content_type='application/json',
@@ -1029,7 +1172,8 @@ class UpdateTodoTests(AuthenticationTests):
         Flagging an already completed item as completed does not change the
         completion timestamp.
         """
-        create_time = datetime.datetime.fromtimestamp(5.0, tz=pytz.utc)
+        self.log_in_as_new_user()
+        create_time = datetime.datetime.fromtimestamp(TIMESTAMP, tz=pytz.utc)
         with freeze_time(create_time):
             create = self.app.post(
                 '/todos',
@@ -1037,7 +1181,8 @@ class UpdateTodoTests(AuthenticationTests):
                 data=json.dumps(COMPLETED_TODO_DATA),
             )
 
-        patch_time = datetime.datetime.fromtimestamp(6.0, tz=pytz.utc)
+        patch_time = datetime.datetime.fromtimestamp(
+            TIMESTAMP + 1, tz=pytz.utc)
         with freeze_time(patch_time):
             patch = self.app.patch(
                 '/todos/{id}'.format(id=create.json['id']),
@@ -1045,25 +1190,34 @@ class UpdateTodoTests(AuthenticationTests):
                 data=json.dumps({'completed': True}),
             )
 
-        expected = create.json
-        # Timestamp set to the time it is first marked completed.
-        expected['completion_timestamp'] = 5.0
-
+        self.assertAlmostEqual(
+            patch.json.pop('completion_timestamp'),
+            # Timestamp set to the time it is first marked completed.
+            create.json.pop('completion_timestamp'),
+            places=3,
+        )
         self.assertEqual(patch.status_code, codes.OK)
-        self.assertEqual(patch.json, expected)
+        self.assertEqual(patch.json, create.json)
 
         read = self.app.get(
             '/todos/{id}'.format(id=create.json['id']),
             content_type='application/json',
         )
 
-        self.assertEqual(read.json, expected)
+        self.assertAlmostEqual(
+            read.json.pop('completion_timestamp'),
+            # Timestamp set to the time it is first marked completed.
+            TIMESTAMP,
+            places=3,
+        )
+        self.assertEqual(read.json, create.json)
 
     @responses.activate
     def test_remain_same(self):
         """
         Not requesting any changes keeps the item the same.
         """
+        self.log_in_as_new_user()
         create = self.app.post(
             '/todos',
             content_type='application/json',
@@ -1084,6 +1238,7 @@ class UpdateTodoTests(AuthenticationTests):
         If the todo item to be updated does not exist, a ``NOT_FOUND`` error is
         returned.
         """
+        self.log_in_as_new_user()
         response = self.app.patch('/todos/1', content_type='application/json')
 
         self.assertEqual(response.headers['Content-Type'], 'application/json')

pip install -e .[dev]
parse_log_pytest
requirements.txt
pytest pytest-cov pytest-xdist pytest-mock pytest-asyncio
3.5
requirements.txt dev-requirements.txt
pytest --no-header -rA --tb=line --color=no -p no:cacheprovider -W ignore::DeprecationWarning
alabaster==0.7.13
attrs==22.2.0
Babel==2.11.0
bcrypt==4.0.1
certifi==2021.5.30
coverage==6.2
coveralls==3.3.1
dataclasses==0.8
doc8==0.11.2
docopt==0.6.2
docutils==0.18.1
execnet==1.9.0
flake8==3.9.2
Flask==0.10.1
Flask-Bcrypt==0.7.1
Flask-JsonSchema==0.1.1
Flask-Login==0.3.2
Flask-Negotiate==0.1.0
Flask-SQLAlchemy==2.1
Flask-Testing==0.8.1
freezegun==1.2.2
greenlet==2.0.2
imagesize==1.4.1
importlib-metadata==4.8.3
iniconfig==1.1.1
itsdangerous==2.0.1
Jinja2==3.0.3
jsonschema==3.2.0
MarkupSafe==2.0.1
mccabe==0.6.1
packaging==21.3
pbr==6.1.1
pluggy==1.0.0
py==1.11.0
pycodestyle==2.7.0
pyflakes==2.3.1
Pygments==2.14.0
pyparsing==3.1.4
pyrsistent==0.18.0
pytest==7.0.1
pytest-asyncio==0.16.0
pytest-cov==4.0.0
pytest-mock==3.6.1
pytest-xdist==3.0.2
python-dateutil==2.9.0.post0
pytz==2016.4
-e git+https://github.com/adamtheturtle/todo.git@f81fa85e3c06d931963f76f2d0772ce0b9db67b9#egg=Qlutter_TODOer
requests==2.10.0
responses==0.17.0
restructuredtext-lint==1.4.0
six==1.17.0
snowballstemmer==2.2.0
Sphinx==5.3.0
sphinx-rtd-theme==2.0.0
sphinxcontrib-applehelp==1.0.2
sphinxcontrib-devhelp==1.0.2
sphinxcontrib-htmlhelp==2.0.0
sphinxcontrib-httpdomain==1.8.1
sphinxcontrib-jquery==4.1
sphinxcontrib-jsmath==1.0.1
sphinxcontrib-qthelp==1.0.3
sphinxcontrib-serializinghtml==1.1.5
SQLAlchemy==1.4.54
stevedore==3.5.2
tomli==1.2.3
typing_extensions==4.1.1
urllib3==1.26.20
Werkzeug==2.0.3
zipp==3.6.0

name: todo
channels:
  - defaults
  - https://repo.anaconda.com/pkgs/main
  - https://repo.anaconda.com/pkgs/r
  - conda-forge
dependencies:
  - _libgcc_mutex=0.1=main
  - _openmp_mutex=5.1=1_gnu
  - ca-certificates=2025.2.25=h06a4308_0
  - certifi=2021.5.30=py36h06a4308_0
  - ld_impl_linux-64=2.40=h12ee557_0
  - libffi=3.3=he6710b0_2
  - libgcc-ng=11.2.0=h1234567_1
  - libgomp=11.2.0=h1234567_1
  - libstdcxx-ng=11.2.0=h1234567_1
  - ncurses=6.4=h6a678d5_0
  - openssl=1.1.1w=h7f8727e_0
  - pip=21.2.2=py36h06a4308_0
  - python=3.6.13=h12debd9_1
  - readline=8.2=h5eee18b_0
  - setuptools=58.0.4=py36h06a4308_0
  - sqlite=3.45.3=h5eee18b_0
  - tk=8.6.14=h39e8969_0
  - wheel=0.37.1=pyhd3eb1b0_0
  - xz=5.6.4=h5eee18b_1
  - zlib=1.2.13=h5eee18b_1
  - pip:
      - alabaster==0.7.13
      - attrs==22.2.0
      - babel==2.11.0
      - bcrypt==4.0.1
      - coverage==6.2
      - coveralls==3.3.1
      - dataclasses==0.8
      - doc8==0.11.2
      - docopt==0.6.2
      - docutils==0.18.1
      - execnet==1.9.0
      - flake8==3.9.2
      - flask==0.10.1
      - flask-bcrypt==0.7.1
      - flask-jsonschema==0.1.1
      - flask-login==0.3.2
      - flask-negotiate==0.1.0
      - flask-sqlalchemy==2.1
      - flask-testing==0.8.1
      - freezegun==1.2.2
      - greenlet==2.0.2
      - imagesize==1.4.1
      - importlib-metadata==4.8.3
      - iniconfig==1.1.1
      - itsdangerous==2.0.1
      - jinja2==3.0.3
      - jsonschema==3.2.0
      - markupsafe==2.0.1
      - mccabe==0.6.1
      - packaging==21.3
      - pbr==6.1.1
      - pluggy==1.0.0
      - py==1.11.0
      - pycodestyle==2.7.0
      - pyflakes==2.3.1
      - pygments==2.14.0
      - pyparsing==3.1.4
      - pyrsistent==0.18.0
      - pytest==7.0.1
      - pytest-asyncio==0.16.0
      - pytest-cov==4.0.0
      - pytest-mock==3.6.1
      - pytest-xdist==3.0.2
      - python-dateutil==2.9.0.post0
      - pytz==2016.4
      - requests==2.10.0
      - responses==0.17.0
      - restructuredtext-lint==1.4.0
      - six==1.17.0
      - snowballstemmer==2.2.0
      - sphinx==5.3.0
      - sphinx-rtd-theme==2.0.0
      - sphinxcontrib-applehelp==1.0.2
      - sphinxcontrib-devhelp==1.0.2
      - sphinxcontrib-htmlhelp==2.0.0
      - sphinxcontrib-httpdomain==1.8.1
      - sphinxcontrib-jquery==4.1
      - sphinxcontrib-jsmath==1.0.1
      - sphinxcontrib-qthelp==1.0.3
      - sphinxcontrib-serializinghtml==1.1.5
      - sqlalchemy==1.4.54
      - stevedore==3.5.2
      - tomli==1.2.3
      - typing-extensions==4.1.1
      - urllib3==1.26.20
      - werkzeug==2.0.3
      - zipp==3.6.0
prefix: /opt/conda/envs/todo

authentication/tests/test_authentication.py::ListTodosTests::test_not_logged_in
authentication/tests/test_authentication.py::SignupTests::test_existing_user authentication/tests/test_authentication.py::SignupTests::test_missing_email authentication/tests/test_authentication.py::SignupTests::test_missing_password authentication/tests/test_authentication.py::SignupTests::test_passwords_hashed authentication/tests/test_authentication.py::SignupTests::test_signup authentication/tests/test_authentication.py::LoginTests::test_login authentication/tests/test_authentication.py::LoginTests::test_missing_email authentication/tests/test_authentication.py::LoginTests::test_missing_password authentication/tests/test_authentication.py::LoginTests::test_non_existant_user authentication/tests/test_authentication.py::LoginTests::test_remember_me_cookie_set authentication/tests/test_authentication.py::LoginTests::test_wrong_password authentication/tests/test_authentication.py::LogoutTests::test_logout authentication/tests/test_authentication.py::LogoutTests::test_logout_twice authentication/tests/test_authentication.py::LoadUserTests::test_user_does_not_exist authentication/tests/test_authentication.py::LoadUserTests::test_user_exists authentication/tests/test_authentication.py::LoadUserFromTokenTests::test_fake_token authentication/tests/test_authentication.py::LoadUserFromTokenTests::test_load_user_from_token authentication/tests/test_authentication.py::CreateTodoTests::test_current_completion_time authentication/tests/test_authentication.py::CreateTodoTests::test_incorrect_content_type authentication/tests/test_authentication.py::CreateTodoTests::test_missing_completed_flag authentication/tests/test_authentication.py::CreateTodoTests::test_missing_text authentication/tests/test_authentication.py::CreateTodoTests::test_not_logged_in authentication/tests/test_authentication.py::CreateTodoTests::test_success_response authentication/tests/test_authentication.py::ReadTodoTests::test_completed authentication/tests/test_authentication.py::ReadTodoTests::test_multiple_todos authentication/tests/test_authentication.py::ReadTodoTests::test_non_existant authentication/tests/test_authentication.py::ReadTodoTests::test_not_logged_in authentication/tests/test_authentication.py::ReadTodoTests::test_success authentication/tests/test_authentication.py::DeleteTodoTests::test_delete_twice authentication/tests/test_authentication.py::DeleteTodoTests::test_incorrect_content_type authentication/tests/test_authentication.py::DeleteTodoTests::test_not_logged_in authentication/tests/test_authentication.py::DeleteTodoTests::test_success authentication/tests/test_authentication.py::ListTodosTests::test_filter_completed authentication/tests/test_authentication.py::ListTodosTests::test_filter_not_completed authentication/tests/test_authentication.py::ListTodosTests::test_list authentication/tests/test_authentication.py::ListTodosTests::test_no_todos authentication/tests/test_authentication.py::UpdateTodoTests::test_change_content authentication/tests/test_authentication.py::UpdateTodoTests::test_change_content_and_flag authentication/tests/test_authentication.py::UpdateTodoTests::test_flag_completed authentication/tests/test_authentication.py::UpdateTodoTests::test_flag_completed_already_completed authentication/tests/test_authentication.py::UpdateTodoTests::test_flag_not_completed authentication/tests/test_authentication.py::UpdateTodoTests::test_non_existant authentication/tests/test_authentication.py::UpdateTodoTests::test_not_logged_in authentication/tests/test_authentication.py::UpdateTodoTests::test_remain_same
authentication/tests/test_authentication.py::SignupTests::test_incorrect_content_type authentication/tests/test_authentication.py::LoginTests::test_incorrect_content_type authentication/tests/test_authentication.py::LogoutTests::test_incorrect_content_type authentication/tests/test_authentication.py::LogoutTests::test_not_logged_in authentication/tests/test_authentication.py::UserTests::test_different_password_different_token authentication/tests/test_authentication.py::UserTests::test_get_auth_token authentication/tests/test_authentication.py::UserTests::test_get_id authentication/tests/test_authentication.py::ReadTodoTests::test_incorrect_content_type authentication/tests/test_authentication.py::ListTodosTests::test_incorrect_content_type authentication/tests/test_authentication.py::UpdateTodoTests::test_incorrect_content_type
authentication/authentication.py
authentication/authentication.py