```
https://yourapi.com/invoices/?callback_url=https://www.external.org/events
```

com um corpo JSON de:

```JSON
{
    "id": "2expen51ve",
    "customer": "Mr. Richie Rich",
    "total": "9999"
}
```

então *sua API* processará a fatura e, em algum momento posterior, enviará uma solicitação de callback para o `callback_url` (a *API externa*):

```

    return client


def test_users_token_jessica(client: TestClient):
    response = client.get("/users?token=jessica")
    assert response.status_code == 200
    assert response.json() == [{"username": "Rick"}, {"username": "Morty"}]


def test_users_with_no_token(client: TestClient):
    response = client.get("/users")
    assert response.status_code == 422
    assert response.json() == IsDict(
        {

labels.facet_filetype_pdf=PDF
labels.facet_filetype_fb2=FictionBook
labels.facet_filetype_epub=EPUB
labels.facet_filetype_ibooks=iBooks
labels.facet_filetype_txt=Plain Text
labels.facet_filetype_rtf=Rich Text Format
labels.facet_filetype_chm=Compiled HTML Help
labels.facet_filetype_zip=ZIP Архив
labels.facet_filetype_7z=7z Архив
labels.facet_filetype_bz=Bz Архив
labels.facet_filetype_bz2=Bz2 Архив

                response.setContentType("text/css");
            } else if (lowerPath.endsWith(".eot")) {
                response.setContentType("application/vnd.ms-fontobject");
            } else if (lowerPath.endsWith(".ico")) {
                response.setContentType("image/vnd.microsoft.icon");
            } else if (lowerPath.endsWith(".js")) {
                response.setContentType("text/javascript");

	* Normalmente, um token é definido para expirar depois de um tempo.
		* Então, o usuário terá que se logar de novo depois de um tempo.
		* E se o token for roubado, o risco é menor. Não é como se fosse uma chave permanente que vai funcionar para sempre (na maioria dos casos).
	* O frontend armazena aquele token temporariamente em algum lugar.

    return client


def test_users_token_jessica(client: TestClient):
    response = client.get("/users?token=jessica")
    assert response.status_code == 200
    assert response.json() == [{"username": "Rick"}, {"username": "Morty"}]


def test_users_with_no_token(client: TestClient):
    response = client.get("/users")
    assert response.status_code == 422
    assert response.json() == IsDict(
        {

video/x-m4v=m4v\n\
audio/x-aif=aif\n\
audio/midi=midi\n\
audio/mpga=mpga\n\
audio/mp4=mp4a\n\
audio/ogg=oga\n\
audio/x-wav=wav\n\
image/webp=webp\n\
image/bmp=bmp\n\
image/x-icon=ico\n\
image/x-icon=ico\n\
image/png=png\n\
image/svg+xml=svg\n\
image/tiff=tiff\n\
image/jpeg=jpg\n\

index.reindex.size=100

labels.facet_filetype_pdf	=	PDF
labels.facet_filetype_fb2	=	FictionBook
labels.facet_filetype_epub	=	EPUB
labels.facet_filetype_ibooks	=	iBooks
labels.facet_filetype_txt	=	Plain Text
labels.facet_filetype_rtf	=	Rich Text Format
labels.facet_filetype_chm	=	Compiled HTML Help
labels.facet_filetype_zip	=	ZIP Archive
labels.facet_filetype_7z	=	7z Archive
labels.facet_filetype_bz	=	Bz Archive
labels.facet_filetype_bz2	=	Bz2 Archive

labels.facet_filetype_pdf=PDF
labels.facet_filetype_fb2=FictionBook
labels.facet_filetype_epub=EPUB
labels.facet_filetype_ibooks=iBooks
labels.facet_filetype_txt=Plain Text
labels.facet_filetype_rtf=Rich Text Format
labels.facet_filetype_chm=Compiled HTML Help
labels.facet_filetype_zip=ZIP Archive
labels.facet_filetype_7z=7z Archive
labels.facet_filetype_bz=Bz Archive
labels.facet_filetype_bz2=Bz2 Archive

	github.com/pkg/errors v0.9.1 // indirect
	github.com/planetscale/vtprotobuf v0.6.1-0.20240409071808-615f978279ca // indirect
	github.com/quic-go/qpack v0.5.1 // indirect
	github.com/rivo/uniseg v0.4.6 // indirect
	github.com/russross/blackfriday/v2 v2.1.0 // indirect
	github.com/sagikazarmark/locafero v0.4.0 // indirect
	github.com/sagikazarmark/slog-shim v0.1.0 // indirect