Try with empty cookie

Author: krassowski

tests/base/test_websocket.py

@@ -95,11 +95,11 @@ async def test_websocket_auth_permissive(jp_serverapp, jp_ws_fetch):
     )
 
     # should always permit access when `@allow_unauthenticated` is used
-    ws = await jp_ws_fetch("permissive", headers={"Authorization": ""})
+    ws = await jp_ws_fetch("permissive", headers={"Authorization": "", "Cookie": ""})
     ws.close()
 
     # should allow access when no authentication rules are set up
-    ws = await jp_ws_fetch("no-rules", headers={"Authorization": ""})
+    ws = await jp_ws_fetch("no-rules", headers={"Authorization": "", "Cookie": ""})
     ws.close()
 
 
@@ -117,12 +117,12 @@ async def test_websocket_auth_required(jp_serverapp, jp_ws_fetch):
     )
 
     # should always permit access when `@allow_unauthenticated` is used
-    ws = await jp_ws_fetch("permissive", headers={"Authorization": ""})
+    ws = await jp_ws_fetch("permissive", headers={"Authorization": "", "Cookie": ""})
     ws.close()
 
     # should forbid access when no authentication rules are set up
     with pytest.raises(HTTPClientError) as exception:
-        ws = await jp_ws_fetch("no-rules", headers={"Authorization": ""})
+        ws = await jp_ws_fetch("no-rules", headers={"Authorization": "", "Cookie": ""})
     assert exception.value.code == 403
 
 
@@ -142,7 +142,7 @@ async def test_websocket_auth_respsects_identity_provider(jp_serverapp, jp_ws_fe
     )
 
     def fetch():
-        return jp_ws_fetch("no-rules", headers={"Authorization": ""})
+        return jp_ws_fetch("no-rules", headers={"Authorization": "", "Cookie": ""})
 
     # If no identity provider is set the following request should fail
     # because the default tornado user would not be found:
@@ -186,5 +186,5 @@ async def test_websocket_auth_warns_mixin_lacks_jupyter_handler(jp_serverapp, jp
         JupyterServerAuthWarning,
         match="WebSocketMixin sub-class does not inherit from JupyterHandler",
     ):
-        ws = await jp_ws_fetch("permissive", headers={"Authorization": ""})
+        ws = await jp_ws_fetch("permissive", headers={"Authorization": "", "Cookie": ""})
         ws.close()