mirror of
https://github.com/sligter/LandPPT.git
synced 2026-08-30 17:34:51 +08:00
sligter
6153e56441
Add OAuth, community, credits, startup, export, and narration workflows while splitting oversized route and PPT service modules into dedicated components with broader regression coverage. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
91 lines
2.8 KiB
Python
91 lines
2.8 KiB
Python
import pytest
|
|
from starlette.requests import Request
|
|
from starlette.responses import Response
|
|
|
|
from landppt.auth import middleware as auth_middleware_module
|
|
from landppt.auth.middleware import AuthMiddleware
|
|
|
|
|
|
class _FakeUser:
|
|
def __init__(self, user_id: int = 1, is_admin: bool = False):
|
|
self.id = user_id
|
|
self.is_admin = is_admin
|
|
|
|
|
|
class _FakeAuthService:
|
|
def __init__(self, user=None):
|
|
self.user = user
|
|
self.session_calls = []
|
|
self.api_key_calls = []
|
|
|
|
def get_user_by_api_key(self, db, api_key):
|
|
self.api_key_calls.append(api_key)
|
|
return None
|
|
|
|
def get_user_by_session(self, db, session_id):
|
|
self.session_calls.append(session_id)
|
|
return self.user
|
|
|
|
|
|
def _build_request(path: str, cookie: str = "") -> Request:
|
|
headers = []
|
|
if cookie:
|
|
headers.append((b"cookie", cookie.encode("utf-8")))
|
|
|
|
scope = {
|
|
"type": "http",
|
|
"http_version": "1.1",
|
|
"method": "GET",
|
|
"scheme": "http",
|
|
"path": path,
|
|
"raw_path": path.encode("utf-8"),
|
|
"query_string": b"",
|
|
"headers": headers,
|
|
"client": ("127.0.0.1", 12345),
|
|
"server": ("testserver", 80),
|
|
}
|
|
return Request(scope)
|
|
|
|
|
|
async def _fake_cached_session_none(session_id):
|
|
return None
|
|
|
|
|
|
async def _fake_call_next(request: Request) -> Response:
|
|
return Response(content="ok", media_type="text/plain")
|
|
|
|
|
|
def _fake_get_db():
|
|
yield object()
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_public_page_populates_request_state_user_when_session_is_valid(monkeypatch):
|
|
middleware = AuthMiddleware()
|
|
middleware.auth_service = _FakeAuthService(user=_FakeUser(user_id=7))
|
|
monkeypatch.setattr(middleware, "_get_user_from_session_cache", _fake_cached_session_none)
|
|
monkeypatch.setattr(auth_middleware_module, "get_db", _fake_get_db)
|
|
|
|
request = _build_request("/sponsors", "session_id=valid-session")
|
|
response = await middleware(request, _fake_call_next)
|
|
|
|
assert response.status_code == 200
|
|
assert request.state.user is not None
|
|
assert request.state.user.id == 7
|
|
assert middleware.auth_service.session_calls == ["valid-session"]
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_public_page_skips_optional_auth_for_static_assets(monkeypatch):
|
|
middleware = AuthMiddleware()
|
|
middleware.auth_service = _FakeAuthService(user=_FakeUser(user_id=9))
|
|
monkeypatch.setattr(middleware, "_get_user_from_session_cache", _fake_cached_session_none)
|
|
monkeypatch.setattr(auth_middleware_module, "get_db", _fake_get_db)
|
|
|
|
request = _build_request("/static/images/logo.png", "session_id=valid-session")
|
|
response = await middleware(request, _fake_call_next)
|
|
|
|
assert response.status_code == 200
|
|
assert request.state.user is None
|
|
assert middleware.auth_service.session_calls == []
|