""" 集成测试: 工单完整生命周期 + 统计 + 审核 """ import pytest def _auth(token: str) -> dict: return {"Authorization": f"Bearer {token}"} # ══════════════════════════════════════════════════════════════ # 工单统计 # ══════════════════════════════════════════════════════════════ class TestTicketStatistics: async def test_statistics_empty(self, client, admin_token): resp = await client.get("/api/v1/tickets/statistics", headers=_auth(admin_token)) assert resp.status_code == 200 data = resp.json() assert "total" in data assert "pending" in data assert "success" in data async def test_statistics_after_create(self, client, admin_token): # 先创建一个工单 ticket = await client.post("/api/v1/tickets", json={ "title": "统计测试工单", "db_type": "mysql", "instance_id": 3, "target_database": "test_db", "sql_content": "SELECT 1", "reason": "测试", }, headers=_auth(admin_token)) assert ticket.status_code in (200, 201) # 检查统计 resp = await client.get("/api/v1/tickets/statistics", headers=_auth(admin_token)) assert resp.status_code == 200 data = resp.json() assert data["total"] > 0 # ══════════════════════════════════════════════════════════════ # 工单列表 + 过滤 # ══════════════════════════════════════════════════════════════ class TestTicketListFilter: async def test_list_all(self, client, admin_token): resp = await client.get("/api/v1/tickets", headers=_auth(admin_token)) assert resp.status_code == 200 data = resp.json() assert "items" in data assert "total" in data async def test_filter_by_status(self, client, admin_token): resp = await client.get("/api/v1/tickets?status=pending", headers=_auth(admin_token)) assert resp.status_code == 200 async def test_filter_by_db_type(self, client, admin_token): resp = await client.get("/api/v1/tickets", headers=_auth(admin_token)) assert resp.status_code == 200 data = resp.json() # 检查返回的工单有 db_type 字段 for item in data.get("items", []): assert "db_type" in item # ══════════════════════════════════════════════════════════════ # 工单权限 # ══════════════════════════════════════════════════════════════ class TestTicketPermissions: async def test_developer_cannot_approve(self, client, developer_token): # developer 不应能审批工单 resp = await client.post("/api/v1/tickets/1/approve", json={ "action": "approve", "comment": "test", }, headers=_auth(developer_token)) assert resp.status_code in (400, 403, 404) async def test_my_tickets_filter(self, client, admin_token): resp = await client.get("/api/v1/tickets", headers=_auth(admin_token)) assert resp.status_code == 200 # ══════════════════════════════════════════════════════════════ # SQL审核API — Go后端未实现 # ══════════════════════════════════════════════════════════════ class TestSQLAuditAPI: @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点") async def test_audit_clean_sql(self, client, admin_token): pass @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点") async def test_audit_dangerous_sql(self, client, admin_token): pass @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点") async def test_audit_redis_command(self, client, admin_token): pass # ══════════════════════════════════════════════════════════════ # 完整工单流程 — 需要创建 + 审批 + 执行 # ══════════════════════════════════════════════════════════════ class TestMySQLDMLFullFlow: async def test_dml_full_lifecycle(self, client, admin_token, dba_token): # 1. 创建工单 resp = await client.post("/api/v1/tickets", json={ "title": "DML完整流程测试", "db_type": "mysql", "instance_id": 3, "target_database": "test_db", "sql_content": "UPDATE users SET name = 'test' WHERE id = 1", "reason": "测试DML流程", }, headers=_auth(admin_token)) assert resp.status_code in (200, 201) tid = resp.json()["id"] # 2. 查看工单详情 detail = await client.get(f"/api/v1/tickets/{tid}", headers=_auth(admin_token)) assert detail.status_code == 200 data = detail.json() assert data["title"] == "DML完整流程测试" assert data["instance_id"] == 3 # 3. 审批工单 approve = await client.post(f"/api/v1/tickets/{tid}/approve", json={ "action": "approve", "comment": "同意", }, headers=_auth(dba_token)) assert approve.status_code in (200, 400, 404) # 4. 执行工单 execute = await client.post(f"/api/v1/tickets/{tid}/execute", headers=_auth(admin_token)) assert execute.status_code in (200, 400, 404) class TestMySQLDDLFlow: async def test_ddl_high_risk_review(self, client, admin_token): resp = await client.post("/api/v1/tickets", json={ "title": "DDL高风险测试", "db_type": "mysql", "instance_id": 3, "target_database": "test_db", "sql_content": "ALTER TABLE users ADD COLUMN age INT", "reason": "DDL测试", "risk_level": "high", }, headers=_auth(admin_token)) assert resp.status_code in (200, 201) async def test_drop_table_critical(self, client, admin_token): resp = await client.post("/api/v1/tickets", json={ "title": "DROP TABLE测试", "db_type": "mysql", "instance_id": 3, "target_database": "test_db", "sql_content": "DROP TABLE IF EXISTS test_table", "reason": "DROP测试", "risk_level": "critical", }, headers=_auth(admin_token)) assert resp.status_code in (200, 201) class TestTicketRejection: async def test_dba_reject_ticket(self, client, admin_token, dba_token): # 创建工单 ticket = await client.post("/api/v1/tickets", json={ "title": "拒绝测试", "db_type": "mysql", "instance_id": 3, "target_database": "test_db", "sql_content": "SELECT 1", "reason": "测试拒绝", }, headers=_auth(admin_token)) assert ticket.status_code in (200, 201) tid = ticket.json()["id"] # DBA 拒绝 reject = await client.post(f"/api/v1/tickets/{tid}/approve", json={ "action": "reject", "comment": "不合规", }, headers=_auth(dba_token)) assert reject.status_code in (200, 400, 404) class TestRedisTicketFlow: async def test_redis_set_command(self, client, admin_token): resp = await client.post("/api/v1/tickets", json={ "title": "Redis SET测试", "db_type": "redis", "instance_id": 2, "target_database": "db0", "sql_content": "SET key1 value1", "reason": "Redis测试", }, headers=_auth(admin_token)) assert resp.status_code in (200, 201) async def test_redis_flushall_critical(self, client, admin_token): resp = await client.post("/api/v1/tickets", json={ "title": "Redis FLUSHALL测试", "db_type": "redis", "instance_id": 2, "target_database": "db0", "sql_content": "FLUSHALL", "reason": "Redis高危测试", "risk_level": "critical", }, headers=_auth(admin_token)) assert resp.status_code in (200, 201) # ══════════════════════════════════════════════════════════════ # 工单取消/回滚/时间线 — Go后端部分未实现 # ══════════════════════════════════════════════════════════════ class TestTicketCancel: @pytest.mark.skip(reason="Go后端未实现工单取消端点") async def test_cancel_pending_ticket(self, client, admin_token): pass class TestTicketRollback: @pytest.mark.skip(reason="Go后端未实现工单回滚端点") async def test_rollback_with_rollback_sql(self, client, admin_token): pass class TestTicketTimeline: @pytest.mark.skip(reason="Go后端未实现工单时间线端点") async def test_timeline_records_events(self, client, admin_token): pass