Davide Scaini
67 lines
2.7 KiB
Python
67 lines
2.7 KiB
Python
"""Pre-split regression tests for /api/admin/* routes."""
|
|
from __future__ import annotations
|
|
|
|
from fastapi.testclient import TestClient
|
|
|
|
|
|
class TestAdminUsers:
|
|
def test_unauthenticated_returns_401(self, client: TestClient):
|
|
assert client.get("/api/admin/users").status_code == 401
|
|
|
|
def test_non_admin_returns_403(self, user_client: TestClient):
|
|
assert user_client.get("/api/admin/users").status_code == 403
|
|
|
|
def test_admin_returns_user_list(self, admin_client: TestClient):
|
|
r = admin_client.get("/api/admin/users")
|
|
assert r.status_code == 200
|
|
assert isinstance(r.json(), list)
|
|
|
|
|
|
class TestAdminJobs:
|
|
def test_unauthenticated_returns_401(self, client: TestClient):
|
|
assert client.get("/api/admin/jobs").status_code == 401
|
|
|
|
def test_non_admin_returns_403(self, user_client: TestClient):
|
|
assert user_client.get("/api/admin/jobs").status_code == 403
|
|
|
|
def test_admin_returns_jobs_list(self, admin_client: TestClient):
|
|
r = admin_client.get("/api/admin/jobs")
|
|
assert r.status_code == 200
|
|
assert isinstance(r.json(), list)
|
|
|
|
|
|
class TestAdminDisk:
|
|
def test_unauthenticated_returns_401(self, client: TestClient):
|
|
assert client.get("/api/admin/disk").status_code == 401
|
|
|
|
def test_non_admin_returns_403(self, user_client: TestClient):
|
|
assert user_client.get("/api/admin/disk").status_code == 403
|
|
|
|
def test_admin_returns_disk_info(self, admin_client: TestClient):
|
|
r = admin_client.get("/api/admin/disk")
|
|
assert r.status_code == 200
|
|
data = r.json()
|
|
assert "users" in data
|
|
assert "total_gb" in data.get("disk", {})
|
|
|
|
|
|
class TestAdminUserOps:
|
|
def test_reset_password_code_requires_admin(self, client: TestClient, user_client: TestClient):
|
|
assert client.post("/api/admin/users/alice/reset-password-code").status_code == 401
|
|
assert user_client.post("/api/admin/users/admin/reset-password-code").status_code == 403
|
|
|
|
def test_suspend_requires_admin(self, client: TestClient):
|
|
assert client.post("/api/admin/users/alice/suspend").status_code == 401
|
|
|
|
def test_unsuspend_requires_admin(self, client: TestClient):
|
|
assert client.post("/api/admin/users/alice/unsuspend").status_code == 401
|
|
|
|
def test_delete_account_requires_admin(self, client: TestClient):
|
|
assert client.delete("/api/admin/users/alice/account").status_code == 401
|
|
|
|
def test_admin_reset_password_code_proxied(self, admin_client: TestClient):
|
|
# This endpoint proxies to bincio-auth; without BINCIO_AUTH_API configured
|
|
# in the test environment it returns 503.
|
|
r = admin_client.post("/api/admin/users/target/reset-password-code")
|
|
assert r.status_code == 503
|