tests.e2e.test_crud_and_dns.TestAdminTokenSubstitution
  ✅ test_proxy_creates_record_with_admin_token
  ✅ test_client_token_not_leaked_to_upstream
tests.e2e.test_crud_and_dns.TestRealDnsRecordCrud
  ✅ test_full_crud_lifecycle
tests.e2e.test_crud_and_dns.TestDnsProtocolResolution
  ✅ test_a_record_resolvable_via_dns
  ✅ test_aaaa_record_resolvable_via_dns
  ✅ test_txt_record_resolvable_via_dns
  ✅ test_deleted_record_not_resolvable_via_dns
  ✅ test_denied_record_not_resolvable_via_dns
tests.e2e.test_crud_and_dns.TestHealthCheck
  ✅ test_health_no_auth_required
tests.e2e.test_policy_rules.TestOperationFiltering
  ✅ test_allow_permitted_operation_get
  ✅ test_deny_operation_add
  ✅ test_deny_operation_update
  ✅ test_deny_operation_delete
  ✅ test_deny_add_does_not_create_record
tests.e2e.test_policy_rules.TestRecordTypeFiltering
  ✅ test_allow_permitted_type_a
  ✅ test_allow_permitted_type_aaaa
  ✅ test_deny_type_txt
  ✅ test_deny_type_mx
  ✅ test_deny_type_cname
  ✅ test_deny_type_does_not_create_record
tests.e2e.test_policy_rules.TestSubdomainFiltering
  ✅ test_allow_matching_subdomain
  ✅ test_allow_exact_prefix
  ✅ test_deny_non_matching_subdomain
  ✅ test_deny_bare_zone_domain
  ✅ test_deny_subdomain_does_not_create_record
tests.e2e.test_readonly.TestReadOnlyToken
  ✅ test_allow_list_zones
  ✅ test_allow_get_records
  ✅ test_allow_get_records_any_zone
  ✅ test_deny_add_records
  ✅ test_deny_update_records
  ✅ test_deny_delete_records
  ✅ test_deny_add_does_not_reach_technitium
tests.e2e.test_tier_access.TestTierAccess
  ✅ test_allow_tier1_zones_list
  ✅ test_allow_tier1_records_get
  ✅ test_deny_tier2_zones_create
  ✅ test_deny_tier2_zones_delete
  ✅ test_deny_tier2_zones_enable
  ✅ test_deny_tier2_zones_disable
  ✅ test_deny_tier3_admin_endpoint
  ✅ test_deny_tier3_dashboard
tests.e2e.test_token_auth.TestTokenAuthentication
  ✅ test_allow_valid_token_in_header
  ✅ test_allow_valid_token_in_query_param
  ✅ test_deny_missing_token
  ✅ test_deny_invalid_token
tests.e2e.test_zone_access.TestZoneAccess
  ✅ test_allow_configured_zone
  ✅ test_allow_zone_via_domain_resolution
  ✅ test_deny_forbidden_zone
  ✅ test_deny_nonexistent_zone
  ✅ test_deny_missing_zone_param
  ✅ test_deny_domain_resolves_to_forbidden_zone
tests.e2e.test_zone_access.TestZoneListFiltering
  ✅ test_scoped_token_sees_only_allowed_zone
  ✅ test_multi_zone_token_sees_both_allowed_zones
  ✅ test_readonly_token_sees_all_zones