feat(dashboard): drop token auth, trust oauth2-proxy X-Forwarded-User

tests/pilot/test_dashboard_select.py

@@ -38,7 +38,6 @@ class TestRepoEditSelect(unittest.TestCase):
         self.tmp = tempfile.TemporaryDirectory()
         self.db = f"{self.tmp.name}/f.db"
         os.environ["PRAGENT_FEEDBACK_DB"] = self.db
-        os.environ["PRAGENT_DASHBOARD_TOKEN"] = ""
         os.environ["PRAGENT_BOT_TOKEN"] = ""
         conn = feedback.init(self.db)
         feedback.record_review(conn, repo="o/r", pr=1, head_sha="x")
@@ -49,17 +48,18 @@ class TestRepoEditSelect(unittest.TestCase):
         self.srv = ThreadingHTTPServer(("127.0.0.1", self.port), dash.Handler)
         self.thread = threading.Thread(target=self.srv.serve_forever, daemon=True)
         self.thread.start()
+        self.auth_hdr = {"X-Forwarded-User": "marcos@example.com"}
 
     def tearDown(self):
         self.srv.shutdown()
         self.srv.server_close()
         self.thread.join(timeout=2)
-        for k in ("PRAGENT_FEEDBACK_DB", "PRAGENT_DASHBOARD_TOKEN", "PRAGENT_BOT_TOKEN"):
+        for k in ("PRAGENT_FEEDBACK_DB", "PRAGENT_BOT_TOKEN"):
             os.environ.pop(k, None)
         self.tmp.cleanup()
 
     def test_repo_page_renders_select_with_one_option_per_price(self):
-        status, _h, body = _get(self.port, "/r/o/r")
+        status, _h, body = _get(self.port, "/r/o/r", headers=self.auth_hdr)
         self.assertEqual(status, 200)
         text = body.decode()
         self.assertIn('<select id="model" name="model">', text)