feat: 霓虹都市→白日梦境 + 渐变网格→云石纹理 — 两个白色浅色主题登录页重写

登录页风格优化与扩展/sql-platform/tests/test_integration_ticket_flow.py

@@ -0,0 +1,210 @@
+"""
+集成测试: 工单完整生命周期 + 统计 + 审核
+"""
+import pytest
+
+
+def _auth(token: str) -> dict:
+    return {"Authorization": f"Bearer {token}"}
+
+
+# ══════════════════════════════════════════════════════════════
+# 工单统计
+# ══════════════════════════════════════════════════════════════
+
+class TestTicketStatistics:
+    async def test_statistics_empty(self, client, admin_token):
+        resp = await client.get("/api/v1/tickets/statistics",
+                                headers=_auth(admin_token))
+        assert resp.status_code == 200
+        data = resp.json()
+        assert "total" in data
+        assert "pending" in data
+        assert "success" in data
+
+    async def test_statistics_after_create(self, client, admin_token):
+        # 先创建一个工单
+        ticket = await client.post("/api/v1/tickets", json={
+            "title": "统计测试工单", "db_type": "mysql",
+            "instance_id": 3, "target_database": "test_db",
+            "sql_content": "SELECT 1", "reason": "测试",
+        }, headers=_auth(admin_token))
+        assert ticket.status_code in (200, 201)
+
+        # 检查统计
+        resp = await client.get("/api/v1/tickets/statistics",
+                                headers=_auth(admin_token))
+        assert resp.status_code == 200
+        data = resp.json()
+        assert data["total"] > 0
+
+
+# ══════════════════════════════════════════════════════════════
+# 工单列表 + 过滤
+# ══════════════════════════════════════════════════════════════
+
+class TestTicketListFilter:
+    async def test_list_all(self, client, admin_token):
+        resp = await client.get("/api/v1/tickets", headers=_auth(admin_token))
+        assert resp.status_code == 200
+        data = resp.json()
+        assert "items" in data
+        assert "total" in data
+
+    async def test_filter_by_status(self, client, admin_token):
+        resp = await client.get("/api/v1/tickets?status=pending",
+                                headers=_auth(admin_token))
+        assert resp.status_code == 200
+
+    async def test_filter_by_db_type(self, client, admin_token):
+        resp = await client.get("/api/v1/tickets",
+                                headers=_auth(admin_token))
+        assert resp.status_code == 200
+        data = resp.json()
+        # 检查返回的工单有 db_type 字段
+        for item in data.get("items", []):
+            assert "db_type" in item
+
+
+# ══════════════════════════════════════════════════════════════
+# 工单权限
+# ══════════════════════════════════════════════════════════════
+
+class TestTicketPermissions:
+    async def test_developer_cannot_approve(self, client, developer_token):
+        # developer 不应能审批工单
+        resp = await client.post("/api/v1/tickets/1/approve", json={
+            "action": "approve", "comment": "test",
+        }, headers=_auth(developer_token))
+        assert resp.status_code in (400, 403, 404)
+
+    async def test_my_tickets_filter(self, client, admin_token):
+        resp = await client.get("/api/v1/tickets", headers=_auth(admin_token))
+        assert resp.status_code == 200
+
+
+# ══════════════════════════════════════════════════════════════
+# SQL审核API — Go后端未实现
+# ══════════════════════════════════════════════════════════════
+
+class TestSQLAuditAPI:
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_audit_clean_sql(self, client, admin_token): pass
+
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_audit_dangerous_sql(self, client, admin_token): pass
+
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_audit_redis_command(self, client, admin_token): pass
+
+
+# ══════════════════════════════════════════════════════════════
+# 完整工单流程 — 需要创建 + 审批 + 执行
+# ══════════════════════════════════════════════════════════════
+
+class TestMySQLDMLFullFlow:
+    async def test_dml_full_lifecycle(self, client, admin_token, dba_token):
+        # 1. 创建工单
+        resp = await client.post("/api/v1/tickets", json={
+            "title": "DML完整流程测试", "db_type": "mysql",
+            "instance_id": 3, "target_database": "test_db",
+            "sql_content": "UPDATE users SET name = 'test' WHERE id = 1",
+            "reason": "测试DML流程",
+        }, headers=_auth(admin_token))
+        assert resp.status_code in (200, 201)
+        tid = resp.json()["id"]
+
+        # 2. 查看工单详情
+        detail = await client.get(f"/api/v1/tickets/{tid}",
+                                   headers=_auth(admin_token))
+        assert detail.status_code == 200
+        data = detail.json()
+        assert data["title"] == "DML完整流程测试"
+        assert data["instance_id"] == 3
+
+        # 3. 审批工单
+        approve = await client.post(f"/api/v1/tickets/{tid}/approve", json={
+            "action": "approve", "comment": "同意",
+        }, headers=_auth(dba_token))
+        assert approve.status_code in (200, 400, 404)
+
+        # 4. 执行工单
+        execute = await client.post(f"/api/v1/tickets/{tid}/execute",
+                                     headers=_auth(admin_token))
+        assert execute.status_code in (200, 400, 404)
+
+
+class TestMySQLDDLFlow:
+    async def test_ddl_high_risk_review(self, client, admin_token):
+        resp = await client.post("/api/v1/tickets", json={
+            "title": "DDL高风险测试", "db_type": "mysql",
+            "instance_id": 3, "target_database": "test_db",
+            "sql_content": "ALTER TABLE users ADD COLUMN age INT",
+            "reason": "DDL测试", "risk_level": "high",
+        }, headers=_auth(admin_token))
+        assert resp.status_code in (200, 201)
+
+    async def test_drop_table_critical(self, client, admin_token):
+        resp = await client.post("/api/v1/tickets", json={
+            "title": "DROP TABLE测试", "db_type": "mysql",
+            "instance_id": 3, "target_database": "test_db",
+            "sql_content": "DROP TABLE IF EXISTS test_table",
+            "reason": "DROP测试", "risk_level": "critical",
+        }, headers=_auth(admin_token))
+        assert resp.status_code in (200, 201)
+
+
+class TestTicketRejection:
+    async def test_dba_reject_ticket(self, client, admin_token, dba_token):
+        # 创建工单
+        ticket = await client.post("/api/v1/tickets", json={
+            "title": "拒绝测试", "db_type": "mysql",
+            "instance_id": 3, "target_database": "test_db",
+            "sql_content": "SELECT 1", "reason": "测试拒绝",
+        }, headers=_auth(admin_token))
+        assert ticket.status_code in (200, 201)
+        tid = ticket.json()["id"]
+
+        # DBA 拒绝
+        reject = await client.post(f"/api/v1/tickets/{tid}/approve", json={
+            "action": "reject", "comment": "不合规",
+        }, headers=_auth(dba_token))
+        assert reject.status_code in (200, 400, 404)
+
+
+class TestRedisTicketFlow:
+    async def test_redis_set_command(self, client, admin_token):
+        resp = await client.post("/api/v1/tickets", json={
+            "title": "Redis SET测试", "db_type": "redis",
+            "instance_id": 2, "target_database": "db0",
+            "sql_content": "SET key1 value1", "reason": "Redis测试",
+        }, headers=_auth(admin_token))
+        assert resp.status_code in (200, 201)
+
+    async def test_redis_flushall_critical(self, client, admin_token):
+        resp = await client.post("/api/v1/tickets", json={
+            "title": "Redis FLUSHALL测试", "db_type": "redis",
+            "instance_id": 2, "target_database": "db0",
+            "sql_content": "FLUSHALL", "reason": "Redis高危测试",
+            "risk_level": "critical",
+        }, headers=_auth(admin_token))
+        assert resp.status_code in (200, 201)
+
+
+# ══════════════════════════════════════════════════════════════
+# 工单取消/回滚/时间线 — Go后端部分未实现
+# ══════════════════════════════════════════════════════════════
+
+class TestTicketCancel:
+    @pytest.mark.skip(reason="Go后端未实现工单取消端点")
+    async def test_cancel_pending_ticket(self, client, admin_token): pass
+
+
+class TestTicketRollback:
+    @pytest.mark.skip(reason="Go后端未实现工单回滚端点")
+    async def test_rollback_with_rollback_sql(self, client, admin_token): pass
+
+
+class TestTicketTimeline:
+    @pytest.mark.skip(reason="Go后端未实现工单时间线端点")
+    async def test_timeline_records_events(self, client, admin_token): pass