fix: require admin interface login to access in_person views

benefits/in_person/urls.py

@@ -1,10 +1,11 @@
 from django.urls import path
 
+from benefits.core.admin import admin
 from . import views
 
 
 app_name = "in_person"
 urlpatterns = [
-    path("eligibility/", views.eligibility, name="eligibility"),
-    path("enrollment/", views.enrollment, name="enrollment"),
+    path("eligibility/", admin.site.admin_view(views.eligibility), name="eligibility"),
+    path("enrollment/", admin.site.admin_view(views.enrollment), name="enrollment"),
 ]

benefits/in_person/views.py

@@ -1,5 +1,8 @@
 from django.template.response import TemplateResponse
 
+ROUTE_ELIGIBILITY = "in_person:eligibility"
+ROUTE_ENROLLMENT = "in_person:enrollment"
+
 
 def eligibility(request):
     return TemplateResponse(request, "in_person/eligibility.html")

tests/pytest/in_person/test_views.py

@@ -0,0 +1,33 @@
+from django.urls import reverse
+
+import pytest
+
+from benefits.in_person.views import ROUTE_ELIGIBILITY, ROUTE_ENROLLMENT
+
+
+@pytest.mark.django_db
+@pytest.mark.parametrize("viewname", [ROUTE_ELIGIBILITY, ROUTE_ENROLLMENT])
+def test_view_not_logged_in(client, viewname):
+    path = reverse(viewname)
+
+    response = client.get(path)
+    assert response.status_code == 302
+    assert response.url == "/admin/login/?next=" + path
+
+
+# admin_client is a fixture from pytest
+# https://pytest-django.readthedocs.io/en/latest/helpers.html#admin-client-django-test-client-logged-in-as-admin
+def test_eligibility_logged_in(admin_client):
+    path = reverse(ROUTE_ELIGIBILITY)
+
+    response = admin_client.get(path)
+    assert response.status_code == 200
+    assert response.template_name == "in_person/eligibility.html"
+
+
+def test_enrollment_logged_in(admin_client):
+    path = reverse(ROUTE_ENROLLMENT)
+
+    response = admin_client.get(path)
+    assert response.status_code == 200
+    assert response.template_name == "in_person/enrollment.html"