chore: add loadtest observability setup

server-rs/crates/api-server/src/assets.rs

@@ -752,10 +752,14 @@ mod tests {
     };
     use hmac::{Hmac, Mac};
     use http_body_util::BodyExt;
+    use platform_auth::{
+        AccessTokenClaims, AccessTokenClaimsInput, AuthProvider, BindingStatus, sign_access_token,
+    };
     use reqwest::{Method, multipart};
     use serde_json::{Value, json};
     use sha2::{Digest, Sha256};
     use shared_kernel::new_uuid_simple_string;
+    use time::OffsetDateTime;
     use tower::ServiceExt;
 
     use crate::{app::build_router, config::AppConfig, state::AppState};
@@ -873,13 +877,17 @@ mod tests {
             ..AppConfig::default()
         };
 
-        let app = build_router(AppState::new(config).expect("state should build"));
+        let state = AppState::new(config).expect("state should build");
+        let token =
+            seed_authenticated_token(&state, "13800138120", "sess_assets_direct_upload").await;
+        let app = build_router(state);
 
         let response = app
             .oneshot(
                 Request::builder()
                     .method("POST")
                     .uri("/api/assets/direct-upload-tickets")
+                    .header("authorization", format!("Bearer {token}"))
                     .header("content-type", "application/json")
                     .header("x-request-id", "req-oss-ticket")
                     .header("x-genarrative-response-envelope", "1")
@@ -1693,6 +1701,33 @@ mod tests {
         Ok(fields)
     }
 
+    async fn seed_authenticated_token(
+        state: &AppState,
+        phone_number: &str,
+        session_seed: &str,
+    ) -> String {
+        let user = state
+            .seed_test_phone_user_with_password(phone_number, "secret123")
+            .await;
+        let claims = AccessTokenClaims::from_input(
+            AccessTokenClaimsInput {
+                user_id: user.id.clone(),
+                session_id: state.seed_test_refresh_session_for_user(&user, session_seed),
+                provider: AuthProvider::Password,
+                roles: vec!["user".to_string()],
+                token_version: user.token_version,
+                phone_verified: true,
+                binding_status: BindingStatus::Active,
+                display_name: Some(user.display_name.clone()),
+            },
+            state.auth_jwt_config(),
+            OffsetDateTime::now_utc(),
+        )
+        .expect("claims should build");
+
+        sign_access_token(&claims, state.auth_jwt_config()).expect("token should sign")
+    }
+
     fn build_object_url(
         config: &AppConfig,
         object_key: &str,