From d7defb3519229b235e1e733ea467e6637d8e49c7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Georg=20Elgeb=C3=A4ck?=
 <50551748+georgelgeback@users.noreply.github.com>
Date: Mon, 24 Aug 2026 11:40:11 +0200
Subject: [PATCH] Revert "temporarily disable token checking for enclose.moose
 (#571)"

This reverts commit 20c1828e8f133e33c81a86a279db006ee3e3a2c5.
---
 routes/enclose_moose_router.py | 7 +++----
 tests/test_enclose_moose.py    | 9 ++++-----
 2 files changed, 7 insertions(+), 9 deletions(-)

diff --git a/routes/enclose_moose_router.py b/routes/enclose_moose_router.py
index 448eab0b..9c668c6d 100644
--- a/routes/enclose_moose_router.py
+++ b/routes/enclose_moose_router.py
@@ -178,10 +178,9 @@ def submit_solution(
     request: Request,
     db: DB_dependency,
 ):
-    # TODO: Re-enable when we figured out whats wrong with tokens
-    # token = request.headers.get("enclose-moose-token")
-    # if ENCLOSE_MOOSE_SECRET != token:
-    #     raise HTTPException(401, detail="Invalid enclose-moose-token")
+    token = request.headers.get("enclose-moose-token")
+    if ENCLOSE_MOOSE_SECRET != token:
+        raise HTTPException(401, detail="Invalid enclose-moose-token")
 
     date_today = datetime.now(ZoneInfo("Europe/Stockholm")).date()
     level = (
diff --git a/tests/test_enclose_moose.py b/tests/test_enclose_moose.py
index 9dd5b0c8..327591be 100644
--- a/tests/test_enclose_moose.py
+++ b/tests/test_enclose_moose.py
@@ -155,11 +155,10 @@ def test_submission(client, member_token, admin_token):
     res_member_invalid = submit_solution(client, member_token, released_level_id, player_solution=[3, 5])
     assert res_member_invalid.status_code == 400
 
-    # TODO: Re-enable when we figured out whats wrong with tokens
-    # res_invalid_token = submit_solution(
-    #     client, member_token, released_level_id, player_solution=[3, 5, 7], secret_header="I love tests!"
-    # )
-    # assert res_invalid_token.status_code == 401
+    res_invalid_token = submit_solution(
+        client, member_token, released_level_id, player_solution=[3, 5, 7], secret_header="I love tests!"
+    )
+    assert res_invalid_token.status_code == 401
 
     res_get = get_submission(client, member_token, released_level_id)
     assert res_get.status_code == 200