diff --git a/cloudflare-worker/test/upload.test.js b/cloudflare-worker/test/upload.test.js
index 1c98d1b..ed6fa7f 100644
--- a/cloudflare-worker/test/upload.test.js
+++ b/cloudflare-worker/test/upload.test.js
@@ -11,13 +11,16 @@ const IMAGE = readFileSync(resolve(__dirname, '../../pictures/image2.png'));
 
 describe('Worker auth', () => {
   it('rejects request with no auth header', async () => {
-    const res = await fetch(`${WORKER_URL}/presign?filename=image2.png`);
+    const res = await fetch(`${WORKER_URL}/presign?filename=image2.png`, {
+      signal: AbortSignal.timeout(5000),
+    });
     expect(res.status).toBe(401);
   });
 
   it('rejects request with wrong secret', async () => {
     const res = await fetch(`${WORKER_URL}/presign?filename=image2.png`, {
       headers: { Authorization: 'Bearer wrong-secret' },
+      signal: AbortSignal.timeout(5000),
     });
     expect(res.status).toBe(401);
   });