logan
5366d5c963
- 删除 29 个旧 Python 后端单元测试 (from app.* 导入已不适用) - 重写 19 个集成测试文件对齐 Go/Gin 后端实际 API 行为: - 创建端点返回 201 (非 200) - Settings PUT 需要数组格式 - SQL 审核 field 是 sql_content (非 sql) - 实例/审核规则列表不支持服务端过滤, 改为客户端过滤 - 实例详情 MySQL 不可达时返回 500 (容错断言) - 修复 RequireRole 中间件: superadmin 等同 admin 权限 - 测试结果: 81 passed, 4 skipped, 0 failed
77 lines
2.9 KiB
Python
77 lines
2.9 KiB
Python
"""User CRUD tests — Go/Gin backend (admin only)."""
|
|
import pytest
|
|
from httpx import AsyncClient
|
|
from tests.conftest import auth_header
|
|
|
|
|
|
class TestListUsers:
|
|
async def test_admin_list_users(self, client: AsyncClient, admin_token: str):
|
|
resp = await client.get("/api/v1/users", headers=auth_header(admin_token))
|
|
assert resp.status_code == 200
|
|
data = resp.json()
|
|
assert isinstance(data, list)
|
|
assert len(data) > 0
|
|
assert "id" in data[0]
|
|
assert "username" in data[0]
|
|
assert "role" in data[0]
|
|
|
|
async def test_developer_forbidden(self, client: AsyncClient, developer_token: str):
|
|
resp = await client.get("/api/v1/users", headers=auth_header(developer_token))
|
|
assert resp.status_code == 403
|
|
|
|
async def test_no_auth(self, client: AsyncClient):
|
|
resp = await client.get("/api/v1/users")
|
|
assert resp.status_code == 401
|
|
|
|
|
|
class TestCreateUser:
|
|
async def test_create_user_success(self, client: AsyncClient, admin_token: str):
|
|
import uuid
|
|
uname = f"test_{uuid.uuid4().hex[:8]}"
|
|
resp = await client.post("/api/v1/users", headers=auth_header(admin_token), json={
|
|
"username": uname,
|
|
"password": "test123456",
|
|
"role": "developer",
|
|
"display_name": "Test User",
|
|
})
|
|
assert resp.status_code == 201
|
|
data = resp.json()
|
|
assert data["username"] == uname
|
|
assert data["role"] == "developer"
|
|
|
|
async def test_create_duplicate_username(self, client: AsyncClient, admin_token: str):
|
|
resp = await client.post("/api/v1/users", headers=auth_header(admin_token), json={
|
|
"username": "admin",
|
|
"password": "test123456",
|
|
"role": "developer",
|
|
"display_name": "Duplicate",
|
|
})
|
|
# Should fail with 400 or 409
|
|
assert resp.status_code in (400, 409)
|
|
|
|
async def test_developer_cannot_create(self, client: AsyncClient, developer_token: str):
|
|
resp = await client.post("/api/v1/users", headers=auth_header(developer_token), json={
|
|
"username": "nope", "password": "test123456", "role": "developer",
|
|
})
|
|
assert resp.status_code == 403
|
|
|
|
|
|
class TestUpdateUser:
|
|
async def test_update_display_name(self, client: AsyncClient, admin_token: str):
|
|
# Get admin user id
|
|
me = await client.get("/api/v1/auth/me", headers=auth_header(admin_token))
|
|
uid = me.json()["id"]
|
|
resp = await client.put(
|
|
f"/api/v1/users/{uid}",
|
|
headers=auth_header(admin_token),
|
|
json={"display_name": "Updated Name"},
|
|
)
|
|
assert resp.status_code == 200
|
|
|
|
|
|
class TestDeleteUser:
|
|
async def test_delete_nonexistent(self, client: AsyncClient, admin_token: str):
|
|
resp = await client.delete("/api/v1/users/99999", headers=auth_header(admin_token))
|
|
# May return 404 or 200 with message
|
|
assert resp.status_code in (200, 404)
|