anti
b7f206c8c5
Mounts /api/v1/ttp/* with empty-list / empty-Navigator responses.
GET endpoints viewer-gated; POST/DELETE /rules/{rule_id}/state
admin-gated server-side. POST parses JSON manually so a malformed
body returns the documented 400 (per feedback_schemathesis_400).
Drops xfail-strict markers from E.2.8 tests now that the router is
mounted; 26 tests pass against the contract handlers.
57 lines
1.9 KiB
Python
57 lines
1.9 KiB
Python
"""E.2.8 — Response-schema stability via golden fixtures.
|
|
|
|
The OpenAPI schema for each TTP endpoint is captured under
|
|
``tests/api/ttp/schemas/`` as a golden JSON file. The schema-stability
|
|
test asserts the live FastAPI app's openapi() spec matches the
|
|
golden, sorted-key SHA. Today the router is absent so the golden is
|
|
a placeholder; the impl commit (E.3.8) updates the golden in the
|
|
same diff that lands the routes.
|
|
|
|
A single test asserts a known SHA-256 of the placeholder so any
|
|
accidental edit of the golden file (or any router landing without a
|
|
golden update) is caught.
|
|
"""
|
|
from __future__ import annotations
|
|
|
|
import hashlib
|
|
import json
|
|
from pathlib import Path
|
|
|
|
import pytest
|
|
|
|
from decnet.web.api import app
|
|
|
|
|
|
_SCHEMAS_DIR = Path(__file__).parent / "schemas"
|
|
_PLACEHOLDER = _SCHEMAS_DIR / "endpoints.placeholder.json"
|
|
|
|
|
|
def _sha256_sorted(payload: object) -> str:
|
|
return hashlib.sha256(
|
|
json.dumps(payload, sort_keys=True, separators=(",", ":")).encode()
|
|
).hexdigest()
|
|
|
|
|
|
def test_placeholder_golden_is_stable() -> None:
|
|
"""The placeholder file is a constant. Any edit (intentional or
|
|
accidental) flips this SHA — the impl commit must update both
|
|
the file AND this constant in the same diff."""
|
|
payload = json.loads(_PLACEHOLDER.read_text(encoding="utf-8"))
|
|
assert _sha256_sorted(payload) == (
|
|
"c9e8a7f2d4e65fc5e55b7616670f4ce336e1f3d154e8581f18fd24e334b9ca97"
|
|
)
|
|
|
|
|
|
def test_openapi_includes_ttp_paths() -> None:
|
|
"""Every documented TTP endpoint must appear in the live OpenAPI
|
|
schema once the router lands. Pinned as a strict-xfail so the
|
|
impl commit's first OpenAPI emission flips this test green."""
|
|
spec = app.openapi()
|
|
paths = set(spec.get("paths", {}).keys())
|
|
must_appear = {
|
|
"/api/v1/ttp/techniques",
|
|
"/api/v1/ttp/rules",
|
|
"/api/v1/ttp/export/navigator",
|
|
}
|
|
assert must_appear <= paths
|