#NEWLINE# def test_post_form_token_removed_failing_auth( self ) : #NEWLINE# #INDENT# 'Ensure POSTing when there is no OAuth access token in db fails' #NEWLINE# self . access_token . delete ( ) #NEWLINE# auth = self . _create_authorization_header ( ) #NEWLINE# response = self . csrf_client . post ( '/oauth2-test/' , HTTP_AUTHORIZATION = auth ) #NEWLINE# self . assertIn ( response . status_code , ( status . HTTP_401_UNAUTHORIZED , status . HTTP_403_FORBIDDEN ) )