def test_valid_already_taken_token(client): token = Token() token.used = True token.save() response = client.get( url_for('mobile_bp.index', token=token.token, _external=False)) assert response.status_code == 403 token.delete_instance()