🔒️(api) securing API with LTI token

API was unsecure and anyone could make request to it from a browser.
Securing it with a LTI token verification on each endpoint, and to get the
`course_id`, the `roles` of the user and its `user_id`.

CHANGELOG.md

@@ -11,6 +11,7 @@ and this project adheres to
 ### Changed
 
 - Upgrade base Warren images to 0.3.0
+- Secure API endpoints with LTI token
 
 ## [0.2.0] - 2024-05-23
 

src/api/plugins/tdbp/tests/conftest.py

@@ -6,6 +6,7 @@
 import pytest
 from warren.tests.fixtures.app import http_client
 from warren.tests.fixtures.asynchronous import anyio_backend
+from warren.tests.fixtures.auth import auth_headers
 from warren.tests.fixtures.db import (
     db_engine,
     db_session,