diff --git a/paskia/util/apistructs.py b/paskia/util/apistructs.py
index eeaf930..0259815 100644
--- a/paskia/util/apistructs.py
+++ b/paskia/util/apistructs.py
@@ -1,11 +1,11 @@
-from __future__ import annotations
-
 """API response utilities using msgspec for JSON serialization.
 
 msgspec handles UUID and datetime conversion automatically.
 API structs inherit from db structs with kw_only=True to add uuid/key fields.
 """
 
+from __future__ import annotations
+
 from datetime import datetime
 from uuid import UUID
 
diff --git a/tests/test_api.py b/tests/test_api.py
index ae13926..d83cf2b 100644
--- a/tests/test_api.py
+++ b/tests/test_api.py
@@ -16,6 +16,7 @@ from datetime import UTC, datetime, timedelta
 import httpx
 import pytest
 
+from paskia import authcode
 from paskia.authsession import EXPIRES
 from paskia.db import delete_session
 from paskia.util.passphrase import generate
@@ -311,7 +312,6 @@ class TestSetSessionEndpoint:
         self, client: httpx.AsyncClient, session_token: str
     ):
         """Set session with valid auth code as bearer should set cookie."""
-        from paskia import authcode
 
         code = authcode.store_cookie(
             authcode.CookieCode(