copilot-swe-agent[bot]
651b48658c
Merge origin/main into feature branch, resolving 3 conflicts: - app/api/__init__.py: add classification_rules_router alongside new routers from main (audit_logs, i18n, mobile, compliance, translation) - app/models.py: keep ClassificationRuleModel alongside new models from main (MobileDevice, ComplianceTemplate, PipelineRoutingRule) - tests/conftest.py: import both ClassificationRuleModel and new models from main (AuditLog, ComplianceTemplate) Also renumber migration from 027 to 037 to chain from the latest migration on main (036_add_document_translation_fields). Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
105 lines
3.9 KiB
Python
105 lines
3.9 KiB
Python
"""Tests for app/api/user.py module."""
|
|
|
|
from hashlib import md5
|
|
from unittest.mock import MagicMock
|
|
|
|
import pytest
|
|
|
|
from app.api.user import whoami_handler
|
|
|
|
|
|
@pytest.mark.unit
|
|
class TestWhoamiHandler:
|
|
"""Tests for whoami_handler function."""
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_returns_user_with_gravatar(self):
|
|
"""Test that handler returns user data with gravatar URL when no custom avatar."""
|
|
mock_request = MagicMock()
|
|
email = "test@example.com"
|
|
mock_request.session = {"user": {"id": "1", "email": email, "name": "Test"}}
|
|
|
|
# Mock DB: no UserProfile found (no custom avatar)
|
|
mock_db = MagicMock()
|
|
mock_db.query.return_value.filter.return_value.first.return_value = None
|
|
|
|
result = await whoami_handler(mock_request, mock_db)
|
|
assert result["id"] == "1"
|
|
assert result["name"] == "Test"
|
|
# Should have gravatar URL since no custom avatar
|
|
expected_hash = md5(email.encode(), usedforsecurity=False).hexdigest()
|
|
assert result["picture"] == f"https://www.gravatar.com/avatar/{expected_hash}?d=identicon"
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_returns_custom_avatar_when_set(self):
|
|
"""Test that handler returns custom avatar URL when profile has avatar_data."""
|
|
mock_request = MagicMock()
|
|
email = "test@example.com"
|
|
mock_request.session = {"user": {"id": "1", "email": email, "name": "Test"}}
|
|
|
|
# Mock DB: UserProfile with avatar_data
|
|
mock_profile = MagicMock()
|
|
mock_profile.avatar_data = "data:image/png;base64,abc123"
|
|
mock_db = MagicMock()
|
|
mock_db.query.return_value.filter.return_value.first.return_value = mock_profile
|
|
|
|
result = await whoami_handler(mock_request, mock_db)
|
|
assert result["picture"] == "data:image/png;base64,abc123"
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_raises_401_when_no_user(self):
|
|
"""Test that 401 is raised when no user in session."""
|
|
from fastapi import HTTPException
|
|
|
|
mock_request = MagicMock()
|
|
mock_request.session = {}
|
|
mock_db = MagicMock()
|
|
|
|
with pytest.raises(HTTPException) as exc_info:
|
|
await whoami_handler(mock_request, mock_db)
|
|
assert exc_info.value.status_code == 401
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_raises_400_when_no_email(self):
|
|
"""Test that 400 is raised when user has no email."""
|
|
from fastapi import HTTPException
|
|
|
|
mock_request = MagicMock()
|
|
mock_request.session = {"user": {"id": "1", "name": "Test"}}
|
|
mock_db = MagicMock()
|
|
|
|
with pytest.raises(HTTPException) as exc_info:
|
|
await whoami_handler(mock_request, mock_db)
|
|
assert exc_info.value.status_code == 400
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_falls_back_to_gravatar_on_db_error(self):
|
|
"""Test that gravatar is used when DB lookup raises an exception."""
|
|
mock_request = MagicMock()
|
|
email = "test@example.com"
|
|
mock_request.session = {"user": {"id": "1", "email": email, "name": "Test"}}
|
|
|
|
mock_db = MagicMock()
|
|
mock_db.query.side_effect = Exception("DB error")
|
|
|
|
result = await whoami_handler(mock_request, mock_db)
|
|
expected_hash = md5(email.encode(), usedforsecurity=False).hexdigest()
|
|
assert result["picture"] == f"https://www.gravatar.com/avatar/{expected_hash}?d=identicon"
|
|
|
|
|
|
@pytest.mark.integration
|
|
class TestWhoamiEndpoints:
|
|
"""Tests for whoami API endpoints."""
|
|
|
|
def test_whoami_endpoint(self, client):
|
|
"""Test /api/whoami endpoint."""
|
|
response = client.get("/api/whoami")
|
|
# Without session user, should return 401
|
|
assert response.status_code == 401
|
|
|
|
def test_auth_whoami_endpoint(self, client):
|
|
"""Test /api/auth/whoami endpoint."""
|
|
response = client.get("/api/auth/whoami")
|
|
# When auth is disabled, returns 200 with error message (no user in session)
|
|
assert response.status_code == 200
|