132 lines
4.2 KiB
Python
132 lines
4.2 KiB
Python
import os
|
|
from typing import Generator
|
|
|
|
import pytest
|
|
from fastapi.testclient import TestClient
|
|
|
|
from decnet.web.api import app, repo
|
|
|
|
|
|
@pytest.fixture(autouse=True)
|
|
def setup_db() -> Generator[None, None, None]:
|
|
repo.db_path = "test_decnet.db"
|
|
if os.path.exists(repo.db_path):
|
|
os.remove(repo.db_path)
|
|
|
|
# Yield control to the test function
|
|
yield
|
|
|
|
# Teardown
|
|
if os.path.exists(repo.db_path):
|
|
os.remove(repo.db_path)
|
|
|
|
|
|
def test_login_success() -> None:
|
|
with TestClient(app) as client:
|
|
# The TestClient context manager triggers startup/shutdown events
|
|
response = client.post(
|
|
"/api/v1/auth/login",
|
|
json={"username": "admin", "password": "admin"}
|
|
)
|
|
assert response.status_code == 200
|
|
data = response.json()
|
|
assert "access_token" in data
|
|
assert data["token_type"] == "bearer"
|
|
assert "must_change_password" in data
|
|
assert data["must_change_password"] is True
|
|
|
|
|
|
def test_login_failure() -> None:
|
|
with TestClient(app) as client:
|
|
response = client.post(
|
|
"/api/v1/auth/login",
|
|
json={"username": "admin", "password": "wrongpassword"}
|
|
)
|
|
assert response.status_code == 401
|
|
|
|
response = client.post(
|
|
"/api/v1/auth/login",
|
|
json={"username": "nonexistent", "password": "wrongpassword"}
|
|
)
|
|
assert response.status_code == 401
|
|
|
|
|
|
def test_change_password() -> None:
|
|
with TestClient(app) as client:
|
|
# First login to get token
|
|
login_resp = client.post("/api/v1/auth/login", json={"username": "admin", "password": "admin"})
|
|
token = login_resp.json()["access_token"]
|
|
|
|
# Try changing password with wrong old password
|
|
resp1 = client.post(
|
|
"/api/v1/auth/change-password",
|
|
json={"old_password": "wrong", "new_password": "new_secure_password"},
|
|
headers={"Authorization": f"Bearer {token}"}
|
|
)
|
|
assert resp1.status_code == 401
|
|
|
|
# Change password successfully
|
|
resp2 = client.post(
|
|
"/api/v1/auth/change-password",
|
|
json={"old_password": "admin", "new_password": "new_secure_password"},
|
|
headers={"Authorization": f"Bearer {token}"}
|
|
)
|
|
assert resp2.status_code == 200
|
|
|
|
# Verify old password no longer works
|
|
resp3 = client.post("/api/v1/auth/login", json={"username": "admin", "password": "admin"})
|
|
assert resp3.status_code == 401
|
|
|
|
# Verify new password works and must_change_password is False
|
|
resp4 = client.post("/api/v1/auth/login", json={"username": "admin", "password": "new_secure_password"})
|
|
assert resp4.status_code == 200
|
|
assert resp4.json()["must_change_password"] is False
|
|
|
|
|
|
def test_get_logs_unauthorized() -> None:
|
|
with TestClient(app) as client:
|
|
response = client.get("/api/v1/logs")
|
|
assert response.status_code == 401
|
|
|
|
|
|
def test_get_logs_success() -> None:
|
|
with TestClient(app) as client:
|
|
login_response = client.post(
|
|
"/api/v1/auth/login",
|
|
json={"username": "admin", "password": "admin"}
|
|
)
|
|
token = login_response.json()["access_token"]
|
|
|
|
response = client.get(
|
|
"/api/v1/logs",
|
|
headers={"Authorization": f"Bearer {token}"}
|
|
)
|
|
assert response.status_code == 200
|
|
data = response.json()
|
|
assert "data" in data
|
|
assert data["total"] >= 0
|
|
assert isinstance(data["data"], list)
|
|
|
|
def test_get_stats_unauthorized() -> None:
|
|
with TestClient(app) as client:
|
|
response = client.get("/api/v1/stats")
|
|
assert response.status_code == 401
|
|
|
|
def test_get_stats_success() -> None:
|
|
with TestClient(app) as client:
|
|
login_response = client.post(
|
|
"/api/v1/auth/login",
|
|
json={"username": "admin", "password": "admin"}
|
|
)
|
|
token = login_response.json()["access_token"]
|
|
|
|
response = client.get(
|
|
"/api/v1/stats",
|
|
headers={"Authorization": f"Bearer {token}"}
|
|
)
|
|
assert response.status_code == 200
|
|
data = response.json()
|
|
assert "total_logs" in data
|
|
assert "unique_attackers" in data
|
|
assert "active_deckies" in data
|