feat: add TTLCache for get_cache_version and TEMPLATE_AUTO_RELOAD config with Makefile worker count variables

2026-06-14 14:46:36 +00:00
parent c151325916
commit d75d5dc6a8
149 changed files with 9811 additions and 262 deletions
@@ -98,6 +98,8 @@ def _seed_news_audit_log():
    title = _unique("aunews")
    get_table("news").insert(
        {
+            "deleted_at": None,
+            "deleted_by": None,
            "uid": uid,
            "slug": make_combined_slug(title, uid),
            "title": title,
@@ -98,6 +98,8 @@ def _seed_news_audit_log():
    title = _unique("aunews")
    get_table("news").insert(
        {
+            "deleted_at": None,
+            "deleted_by": None,
            "uid": uid,
            "slug": make_combined_slug(title, uid),
            "title": title,
@@ -0,0 +1,58 @@
+# retoor <retoor@molodetz.nl>
+
+import requests
+from tests.conftest import BASE_URL
+from devplacepy.database import get_table, refresh_snapshot
+
+JSON = {"Accept": "application/json"}
+
+
+def _admin():
+    refresh_snapshot()
+    key = get_table("users").find_one(username="alice_test")["api_key"]
+    s = requests.Session()
+    s.headers.update({"X-API-KEY": key})
+    return s
+
+
+def test_bots_page_requires_login(app_server):
+    r = requests.get(f"{BASE_URL}/admin/bots", allow_redirects=False)
+    assert r.status_code in (302, 303)
+
+
+def test_bots_data_denied_for_non_admin(app_server, seeded_db):
+    s = requests.Session()
+    s.post(
+        f"{BASE_URL}/auth/login",
+        data={
+            "email": seeded_db["bob"]["email"],
+            "password": seeded_db["bob"]["password"],
+        },
+    )
+    r = s.get(f"{BASE_URL}/admin/bots/data", allow_redirects=False)
+    assert r.status_code in (302, 303, 403)
+    r_json = s.get(f"{BASE_URL}/admin/bots/data", headers=JSON, allow_redirects=False)
+    assert r_json.status_code == 403
+
+
+def test_bots_data_shape_for_admin(app_server, seeded_db):
+    admin = _admin()
+    r = admin.get(f"{BASE_URL}/admin/bots/data", headers=JSON)
+    assert r.status_code == 200, r.text[:300]
+    body = r.json()
+    assert "frames" in body
+    assert isinstance(body["frames"], list)
+    assert "enabled" in body
+    assert isinstance(body["enabled"], bool)
+    assert "service_status" in body
+
+
+def test_bots_frame_missing_is_404(app_server, seeded_db):
+    admin = _admin()
+    r = admin.get(f"{BASE_URL}/admin/bots/999/frame.jpg", allow_redirects=False)
+    assert r.status_code == 404
+
+
+def test_bots_frame_requires_admin(app_server, seeded_db):
+    r = requests.get(f"{BASE_URL}/admin/bots/0/frame.jpg", allow_redirects=False)
+    assert r.status_code in (302, 303)
@@ -0,0 +1,35 @@
+# retoor <retoor@molodetz.nl>
+
+import requests
+from tests.conftest import BASE_URL
+
+
+def _bob(seeded_db):
+    s = requests.Session()
+    s.post(
+        f"{BASE_URL}/auth/login",
+        data={
+            "email": seeded_db["bob"]["email"],
+            "password": seeded_db["bob"]["password"],
+        },
+    )
+    return s
+
+
+def test_create_requires_admin(app_server, seeded_db):
+    s = _bob(seeded_db)
+    r = s.post(
+        f"{BASE_URL}/admin/containers/create",
+        data={"project_slug": "x", "name": "x"},
+        allow_redirects=False,
+    )
+    assert r.status_code in (302, 303, 403)
+
+
+def test_create_requires_login(app_server):
+    r = requests.post(
+        f"{BASE_URL}/admin/containers/create",
+        data={"project_slug": "x", "name": "x"},
+        allow_redirects=False,
+    )
+    assert r.status_code in (302, 303)
@@ -0,0 +1 @@
+# retoor <retoor@molodetz.nl>
@@ -0,0 +1,35 @@
+# retoor <retoor@molodetz.nl>
+
+import requests
+from tests.conftest import BASE_URL
+from devplacepy.database import get_table, refresh_snapshot
+
+
+def _admin_session():
+    refresh_snapshot()
+    key = get_table("users").find_one(username="alice_test")["api_key"]
+    s = requests.Session()
+    s.headers.update({"X-API-KEY": key})
+    return s
+
+
+def test_project_search_requires_admin(app_server, seeded_db):
+    s = requests.Session()
+    s.post(
+        f"{BASE_URL}/auth/login",
+        data={
+            "email": seeded_db["bob"]["email"],
+            "password": seeded_db["bob"]["password"],
+        },
+    )
+    r = s.get(
+        f"{BASE_URL}/admin/containers/projects/search?q=a", allow_redirects=False
+    )
+    assert r.status_code in (302, 303, 403)
+
+
+def test_project_search_empty_query(app_server, seeded_db):
+    s = _admin_session()
+    r = s.get(f"{BASE_URL}/admin/containers/projects/search?q=")
+    assert r.status_code == 200
+    assert r.json()["results"] == []
@@ -0,0 +1 @@
+# retoor <retoor@molodetz.nl>
@@ -0,0 +1,43 @@
+# retoor <retoor@molodetz.nl>
+
+import requests
+from tests.conftest import BASE_URL
+from devplacepy.database import get_table, refresh_snapshot
+
+
+def _admin_session():
+    refresh_snapshot()
+    key = get_table("users").find_one(username="alice_test")["api_key"]
+    s = requests.Session()
+    s.headers.update({"X-API-KEY": key})
+    return s
+
+
+def test_user_search_requires_admin(app_server, seeded_db):
+    s = requests.Session()
+    s.post(
+        f"{BASE_URL}/auth/login",
+        data={
+            "email": seeded_db["bob"]["email"],
+            "password": seeded_db["bob"]["password"],
+        },
+    )
+    r = s.get(
+        f"{BASE_URL}/admin/containers/users/search?q=alice", allow_redirects=False
+    )
+    assert r.status_code in (302, 303, 403)
+
+
+def test_user_search_returns_results(app_server, seeded_db):
+    s = _admin_session()
+    r = s.get(f"{BASE_URL}/admin/containers/users/search?q=alice")
+    assert r.status_code == 200
+    results = r.json()["results"]
+    assert any(item["username"] == "alice_test" for item in results)
+
+
+def test_user_search_empty_query(app_server, seeded_db):
+    s = _admin_session()
+    r = s.get(f"{BASE_URL}/admin/containers/users/search?q=")
+    assert r.status_code == 200
+    assert r.json()["results"] == []
@@ -98,6 +98,8 @@ def _seed_news_audit_log():
    title = _unique("aunews")
    get_table("news").insert(
        {
+            "deleted_at": None,
+            "deleted_by": None,
            "uid": uid,
            "slug": make_combined_slug(title, uid),
            "title": title,
@@ -98,6 +98,8 @@ def _seed_news_audit_log():
    title = _unique("aunews")
    get_table("news").insert(
        {
+            "deleted_at": None,
+            "deleted_by": None,
            "uid": uid,
            "slug": make_combined_slug(title, uid),
            "title": title,
@@ -98,6 +98,8 @@ def _seed_news_audit_log():
    title = _unique("aunews")
    get_table("news").insert(
        {
+            "deleted_at": None,
+            "deleted_by": None,
            "uid": uid,
            "slug": make_combined_slug(title, uid),
            "title": title,
@@ -98,6 +98,8 @@ def _seed_news_audit_log():
    title = _unique("aunews")
    get_table("news").insert(
        {
+            "deleted_at": None,
+            "deleted_by": None,
            "uid": uid,
            "slug": make_combined_slug(title, uid),
            "title": title,
@@ -98,6 +98,8 @@ def _seed_news_audit_log():
    title = _unique("aunews")
    get_table("news").insert(
        {
+            "deleted_at": None,
+            "deleted_by": None,
            "uid": uid,
            "slug": make_combined_slug(title, uid),
            "title": title,
@@ -98,6 +98,8 @@ def _seed_news_audit_log():
    title = _unique("aunews")
    get_table("news").insert(
        {
+            "deleted_at": None,
+            "deleted_by": None,
            "uid": uid,
            "slug": make_combined_slug(title, uid),
            "title": title,