Add assertion on www-authenticate header.

tests/test_security_openid_connect.py

@@ -40,6 +40,7 @@ def test_security_oauth2_password_other_header():
 def test_security_oauth2_password_bearer_no_header():
     response = client.get("/users/me")
     assert response.status_code == 401, response.text
+    assert response.headers["WWW-Authenticate"] == "Bearer"
     assert response.json() == {"detail": "Not authenticated"}
 
 

tests/test_security_openid_connect_description.py

@@ -42,6 +42,7 @@ def test_security_oauth2_password_other_header():
 def test_security_oauth2_password_bearer_no_header():
     response = client.get("/users/me")
     assert response.status_code == 401, response.text
+    assert response.headers["WWW-Authenticate"] == "Bearer"
     assert response.json() == {"detail": "Not authenticated"}