WIP

tests/support/jupyter.py

@@ -249,6 +249,8 @@ def lab_callback(self, request: Request) -> Response:
         to a callback, and then back to the lab), but it's hopefully good
         enough to test handling of cookies during redirect chains for
         capturing the ``_xsrf`` cookie.
+
+        FIXME nope we gotta do the whole thing.
         """
         user = self.get_user(request.headers["Authorization"])
         assert str(request.url).endswith(f"/user/{user}/callback")