forked from retoor/devplacepy
feat: add test suites for backup schedules, service config, auth token, bookmarks, content permissions, devii adopt, and devrant auth
Add comprehensive test coverage for seven new API areas: - Backup schedules CRUD operations in admin panel - Service configuration saving and retrieval for news AI model - Token authentication with email/username and JSON body support - Bookmarking for project and news targets with invalid type validation - Content permissions testing with member and admin session fixtures - Devii adopt endpoint redirect behavior and session cookie handling - Devrant authentication flow with user registration and token retrieval
This commit is contained in:
@@ -0,0 +1,233 @@
|
||||
# retoor <retoor@molodetz.nl>
|
||||
|
||||
import time
|
||||
import pytest
|
||||
import requests
|
||||
from tests.conftest import BASE_URL
|
||||
from devplacepy.database import get_table, refresh_snapshot, set_setting
|
||||
|
||||
_counter_dr = [0]
|
||||
|
||||
|
||||
@pytest.fixture(scope="module", autouse=True)
|
||||
def _devrant_settings(app_server):
|
||||
for key, value in {
|
||||
"rate_limit_per_minute": "1000000",
|
||||
"rate_limit_window_seconds": "60",
|
||||
"registration_open": "1",
|
||||
"maintenance_mode": "0",
|
||||
"devrant_api_enabled": "1",
|
||||
"session_max_age_days": "7",
|
||||
}.items():
|
||||
set_setting(key, value)
|
||||
yield
|
||||
|
||||
|
||||
def _name(prefix="dra"):
|
||||
_counter_dr[0] += 1
|
||||
return f"{prefix}{int(time.time() * 1000)}{_counter_dr[0]}"
|
||||
|
||||
|
||||
def _register(password="secret123"):
|
||||
name = _name()
|
||||
email = f"{name}@t.dev"
|
||||
body = None
|
||||
for _ in range(20):
|
||||
body = requests.post(
|
||||
f"{BASE_URL}/api/users",
|
||||
data={"username": name, "email": email, "password": password},
|
||||
).json()
|
||||
if body.get("success"):
|
||||
break
|
||||
time.sleep(0.3)
|
||||
return name, email, password, body
|
||||
|
||||
|
||||
def _auth(name, password):
|
||||
r = requests.post(
|
||||
f"{BASE_URL}/api/users/auth-token",
|
||||
data={"username": name, "password": password},
|
||||
)
|
||||
return r
|
||||
|
||||
|
||||
def _token_params(name, password):
|
||||
at = _auth(name, password).json()["auth_token"]
|
||||
return {"token_id": at["id"], "token_key": at["key"], "user_id": at["user_id"]}
|
||||
|
||||
|
||||
def test_auth_token_success(app_server):
|
||||
name, email, password, _ = _register()
|
||||
r = _auth(name, password)
|
||||
assert r.status_code == 200, r.text[:300]
|
||||
body = r.json()
|
||||
assert body["success"] is True
|
||||
at = body["auth_token"]
|
||||
assert at["id"] and at["key"] and at["user_id"]
|
||||
|
||||
|
||||
def test_auth_token_accepts_email(app_server):
|
||||
name, email, password, _ = _register()
|
||||
r = requests.post(
|
||||
f"{BASE_URL}/api/users/auth-token",
|
||||
data={"username": email, "password": password},
|
||||
)
|
||||
assert r.status_code == 200
|
||||
assert r.json()["success"] is True
|
||||
|
||||
|
||||
def test_auth_token_wrong_password(app_server):
|
||||
name, email, password, _ = _register()
|
||||
r = _auth(name, "wrongpass")
|
||||
assert r.status_code == 400
|
||||
assert r.json()["success"] is False
|
||||
|
||||
|
||||
def test_auth_token_missing_fields(app_server):
|
||||
r = requests.post(f"{BASE_URL}/api/users/auth-token", data={"username": "x"})
|
||||
assert r.status_code == 400
|
||||
assert r.json()["success"] is False
|
||||
|
||||
|
||||
def test_register_creates_user(app_server):
|
||||
name, email, password, body = _register()
|
||||
assert body["success"] is True
|
||||
assert body["auth_token"]["key"]
|
||||
refresh_snapshot()
|
||||
assert get_table("users").find_one(username=name) is not None
|
||||
|
||||
|
||||
def test_register_duplicate_username(app_server):
|
||||
name, email, password, _ = _register()
|
||||
r = requests.post(
|
||||
f"{BASE_URL}/api/users",
|
||||
data={"username": name, "email": f"{_name()}@t.dev", "password": password},
|
||||
)
|
||||
assert r.json()["success"] is False
|
||||
assert r.json().get("error_field") == "username"
|
||||
|
||||
|
||||
def test_register_short_password(app_server):
|
||||
r = requests.post(
|
||||
f"{BASE_URL}/api/users",
|
||||
data={"username": _name(), "email": f"{_name()}@t.dev", "password": "x"},
|
||||
)
|
||||
assert r.json()["success"] is False
|
||||
assert r.json().get("error_field") == "password"
|
||||
|
||||
|
||||
def test_register_closed(app_server):
|
||||
set_setting("registration_open", "0")
|
||||
try:
|
||||
closed = False
|
||||
for _ in range(20):
|
||||
r = requests.post(
|
||||
f"{BASE_URL}/api/users",
|
||||
data={
|
||||
"username": _name(),
|
||||
"email": f"{_name()}@t.dev",
|
||||
"password": "secret123",
|
||||
},
|
||||
)
|
||||
if r.json()["success"] is False:
|
||||
closed = True
|
||||
break
|
||||
time.sleep(0.3)
|
||||
assert closed, "registration should be reported closed"
|
||||
finally:
|
||||
set_setting("registration_open", "1")
|
||||
for _ in range(20):
|
||||
probe = requests.post(
|
||||
f"{BASE_URL}/api/users",
|
||||
data={
|
||||
"username": _name(),
|
||||
"email": f"{_name()}@t.dev",
|
||||
"password": "secret123",
|
||||
},
|
||||
).json()
|
||||
if probe.get("success"):
|
||||
break
|
||||
time.sleep(0.3)
|
||||
|
||||
|
||||
def test_get_user_id(app_server):
|
||||
name, email, password, _ = _register()
|
||||
refresh_snapshot()
|
||||
r = requests.get(f"{BASE_URL}/api/get-user-id", params={"username": name})
|
||||
assert r.json()["success"] is True
|
||||
assert isinstance(r.json()["user_id"], int)
|
||||
|
||||
|
||||
def test_get_user_id_unknown(app_server):
|
||||
r = requests.get(
|
||||
f"{BASE_URL}/api/get-user-id", params={"username": "no_such_zzz"}
|
||||
)
|
||||
assert r.json()["success"] is False
|
||||
|
||||
|
||||
def test_profile_by_id(app_server):
|
||||
name, email, password, _ = _register()
|
||||
refresh_snapshot()
|
||||
uid = requests.get(
|
||||
f"{BASE_URL}/api/get-user-id", params={"username": name}
|
||||
).json()["user_id"]
|
||||
r = requests.get(f"{BASE_URL}/api/users/{uid}")
|
||||
assert r.json()["success"] is True
|
||||
assert r.json()["profile"]
|
||||
|
||||
|
||||
def test_edit_profile_requires_auth(app_server):
|
||||
r = requests.post(
|
||||
f"{BASE_URL}/api/users/me/edit-profile", data={"profile_about": "hi"}
|
||||
)
|
||||
assert r.status_code == 401
|
||||
assert r.json()["success"] is False
|
||||
|
||||
|
||||
def test_edit_profile_updates_bio(app_server):
|
||||
name, email, password, _ = _register()
|
||||
params = _token_params(name, password)
|
||||
r = requests.post(
|
||||
f"{BASE_URL}/api/users/me/edit-profile",
|
||||
data={**params, "profile_about": "devrant bio text"},
|
||||
)
|
||||
assert r.json()["success"] is True
|
||||
refresh_snapshot()
|
||||
assert get_table("users").find_one(username=name)["bio"] == "devrant bio text"
|
||||
|
||||
|
||||
def test_delete_account_deactivates_and_revokes(app_server):
|
||||
name, email, password, _ = _register()
|
||||
params = _token_params(name, password)
|
||||
r = requests.delete(f"{BASE_URL}/api/users/me", data=params)
|
||||
assert r.json()["success"] is True
|
||||
refresh_snapshot()
|
||||
user = get_table("users").find_one(username=name)
|
||||
assert user["is_active"] in (False, 0)
|
||||
assert (
|
||||
get_table("devrant_tokens").count(user_uid=user["uid"], deleted_at=None) == 0
|
||||
)
|
||||
|
||||
|
||||
def test_avatar_png(app_server):
|
||||
r = requests.get(f"{BASE_URL}/api/avatars/u/seedvalue.png")
|
||||
assert r.status_code == 200
|
||||
assert "image" in r.headers.get("content-type", "")
|
||||
|
||||
|
||||
def test_disabled_api_returns_404(app_server):
|
||||
set_setting("devrant_api_enabled", "0")
|
||||
try:
|
||||
disabled = False
|
||||
for _ in range(20):
|
||||
if requests.get(f"{BASE_URL}/api/devrant/rants").status_code == 404:
|
||||
disabled = True
|
||||
break
|
||||
time.sleep(0.3)
|
||||
assert disabled, "devrant api should report disabled"
|
||||
finally:
|
||||
set_setting("devrant_api_enabled", "1")
|
||||
for _ in range(20):
|
||||
if requests.get(f"{BASE_URL}/api/devrant/rants").status_code == 200:
|
||||
break
|
||||
time.sleep(0.3)
|
||||
@@ -0,0 +1,147 @@
|
||||
# retoor <retoor@molodetz.nl>
|
||||
|
||||
import time
|
||||
import pytest
|
||||
import requests
|
||||
from tests.conftest import BASE_URL
|
||||
from devplacepy.database import get_table, refresh_snapshot, set_setting
|
||||
|
||||
_counter_dc = [0]
|
||||
|
||||
|
||||
@pytest.fixture(scope="module", autouse=True)
|
||||
def _devrant_settings(app_server):
|
||||
for key, value in {
|
||||
"rate_limit_per_minute": "1000000",
|
||||
"rate_limit_window_seconds": "60",
|
||||
"registration_open": "1",
|
||||
"maintenance_mode": "0",
|
||||
"devrant_api_enabled": "1",
|
||||
"session_max_age_days": "7",
|
||||
}.items():
|
||||
set_setting(key, value)
|
||||
yield
|
||||
|
||||
|
||||
def _name(prefix="drc"):
|
||||
_counter_dc[0] += 1
|
||||
return f"{prefix}{int(time.time() * 1000)}{_counter_dc[0]}"
|
||||
|
||||
|
||||
def _register(password="secret123"):
|
||||
name = _name()
|
||||
for _ in range(20):
|
||||
body = requests.post(
|
||||
f"{BASE_URL}/api/users",
|
||||
data={"username": name, "email": f"{name}@t.dev", "password": password},
|
||||
).json()
|
||||
if body.get("success"):
|
||||
at = body["auth_token"]
|
||||
return name, {
|
||||
"token_id": at["id"],
|
||||
"token_key": at["key"],
|
||||
"user_id": at["user_id"],
|
||||
}
|
||||
time.sleep(0.3)
|
||||
raise AssertionError("registration did not open")
|
||||
|
||||
|
||||
def _rant(params):
|
||||
return requests.post(
|
||||
f"{BASE_URL}/api/devrant/rants",
|
||||
data={**params, "rant": "host rant for comment tests"},
|
||||
).json()["rant_id"]
|
||||
|
||||
|
||||
def _comment(rant_id, author, text="a comment body for devrant"):
|
||||
requests.post(
|
||||
f"{BASE_URL}/api/devrant/rants/{rant_id}/comments",
|
||||
data={**author, "comment": text},
|
||||
)
|
||||
refresh_snapshot()
|
||||
post_uid = get_table("posts").find_one(id=rant_id)["uid"]
|
||||
row = max(
|
||||
get_table("comments").find(target_uid=post_uid, deleted_at=None),
|
||||
key=lambda c: c["id"],
|
||||
)
|
||||
return int(row["id"]), row["uid"]
|
||||
|
||||
|
||||
def test_get_comment(app_server):
|
||||
_, owner = _register()
|
||||
rant_id = _rant(owner)
|
||||
cid, _ = _comment(rant_id, owner)
|
||||
r = requests.get(f"{BASE_URL}/api/comments/{cid}")
|
||||
assert r.json()["success"] is True
|
||||
assert r.json()["comment"]
|
||||
|
||||
|
||||
def test_get_comment_unknown(app_server):
|
||||
r = requests.get(f"{BASE_URL}/api/comments/999999999")
|
||||
assert r.json()["success"] is False
|
||||
|
||||
|
||||
def test_edit_comment_owner(app_server):
|
||||
_, owner = _register()
|
||||
rant_id = _rant(owner)
|
||||
cid, cuid = _comment(rant_id, owner)
|
||||
r = requests.post(
|
||||
f"{BASE_URL}/api/comments/{cid}", data={**owner, "comment": "edited comment body"}
|
||||
)
|
||||
assert r.json()["success"] is True
|
||||
refresh_snapshot()
|
||||
assert get_table("comments").find_one(uid=cuid)["content"] == "edited comment body"
|
||||
|
||||
|
||||
def test_edit_comment_non_owner_rejected(app_server):
|
||||
_, owner = _register()
|
||||
_, other = _register()
|
||||
rant_id = _rant(owner)
|
||||
cid, _ = _comment(rant_id, owner)
|
||||
r = requests.post(
|
||||
f"{BASE_URL}/api/comments/{cid}", data={**other, "comment": "hijack content"}
|
||||
)
|
||||
assert r.json()["success"] is False
|
||||
assert r.json().get("fail_reason") == "not_owner"
|
||||
|
||||
|
||||
def test_edit_comment_requires_auth(app_server):
|
||||
_, owner = _register()
|
||||
rant_id = _rant(owner)
|
||||
cid, _ = _comment(rant_id, owner)
|
||||
r = requests.post(f"{BASE_URL}/api/comments/{cid}", data={"comment": "x"})
|
||||
assert r.status_code == 401
|
||||
|
||||
|
||||
def test_delete_comment_owner(app_server):
|
||||
_, owner = _register()
|
||||
rant_id = _rant(owner)
|
||||
cid, cuid = _comment(rant_id, owner)
|
||||
r = requests.delete(f"{BASE_URL}/api/comments/{cid}", data=owner)
|
||||
assert r.json()["success"] is True
|
||||
refresh_snapshot()
|
||||
assert get_table("comments").find_one(uid=cuid)["deleted_at"] is not None
|
||||
|
||||
|
||||
def test_delete_comment_non_owner_rejected(app_server):
|
||||
_, owner = _register()
|
||||
_, other = _register()
|
||||
rant_id = _rant(owner)
|
||||
cid, cuid = _comment(rant_id, owner)
|
||||
r = requests.delete(f"{BASE_URL}/api/comments/{cid}", data=other)
|
||||
assert r.json()["success"] is False
|
||||
refresh_snapshot()
|
||||
assert get_table("comments").find_one(uid=cuid)["deleted_at"] is None
|
||||
|
||||
|
||||
def test_vote_comment(app_server):
|
||||
_, owner = _register()
|
||||
_, voter = _register()
|
||||
rant_id = _rant(owner)
|
||||
cid, cuid = _comment(rant_id, owner)
|
||||
r = requests.post(
|
||||
f"{BASE_URL}/api/comments/{cid}/vote", data={**voter, "vote": 1}
|
||||
)
|
||||
assert r.json()["success"] is True
|
||||
refresh_snapshot()
|
||||
assert get_table("votes").count(target_uid=cuid, value=1) >= 1
|
||||
@@ -0,0 +1,64 @@
|
||||
# retoor <retoor@molodetz.nl>
|
||||
|
||||
import time
|
||||
import pytest
|
||||
import requests
|
||||
from tests.conftest import BASE_URL
|
||||
from devplacepy.database import set_setting
|
||||
|
||||
|
||||
@pytest.fixture(scope="module", autouse=True)
|
||||
def _devrant_settings(app_server):
|
||||
set_setting("rate_limit_per_minute", "1000000")
|
||||
set_setting("registration_open", "1")
|
||||
set_setting("devrant_api_enabled", "1")
|
||||
yield
|
||||
|
||||
|
||||
_counter_dn = [0]
|
||||
|
||||
|
||||
def _name(prefix="dn"):
|
||||
_counter_dn[0] += 1
|
||||
return f"{prefix}{int(time.time() * 1000)}{_counter_dn[0]}"
|
||||
|
||||
|
||||
def _register(password="secret123"):
|
||||
name = _name()
|
||||
for _ in range(20):
|
||||
body = requests.post(
|
||||
f"{BASE_URL}/api/users",
|
||||
data={"username": name, "email": f"{name}@t.dev", "password": password},
|
||||
).json()
|
||||
if body.get("success"):
|
||||
at = body["auth_token"]
|
||||
return {"token_id": at["id"], "token_key": at["key"], "user_id": at["user_id"]}
|
||||
time.sleep(0.3)
|
||||
raise AssertionError("registration did not open")
|
||||
|
||||
|
||||
def test_notif_feed_requires_auth(app_server):
|
||||
r = requests.get(f"{BASE_URL}/api/users/me/notif-feed")
|
||||
assert r.status_code == 401
|
||||
assert r.json()["success"] is False
|
||||
|
||||
|
||||
def test_notif_feed_returns_data_for_authed_user(app_server):
|
||||
params = _register()
|
||||
r = requests.get(f"{BASE_URL}/api/users/me/notif-feed", params=params)
|
||||
assert r.status_code == 200
|
||||
body = r.json()
|
||||
assert body["success"] is True
|
||||
assert "data" in body
|
||||
|
||||
|
||||
def test_clear_notif_feed_requires_auth(app_server):
|
||||
r = requests.delete(f"{BASE_URL}/api/users/me/notif-feed")
|
||||
assert r.status_code == 401
|
||||
|
||||
|
||||
def test_clear_notif_feed_authed(app_server):
|
||||
params = _register()
|
||||
r = requests.delete(f"{BASE_URL}/api/users/me/notif-feed", data=params)
|
||||
assert r.status_code == 200
|
||||
assert r.json()["success"] is True
|
||||
@@ -0,0 +1,237 @@
|
||||
# retoor <retoor@molodetz.nl>
|
||||
|
||||
import time
|
||||
import pytest
|
||||
import requests
|
||||
from tests.conftest import BASE_URL
|
||||
from devplacepy.database import get_table, refresh_snapshot, set_setting
|
||||
|
||||
_counter_dr = [0]
|
||||
|
||||
|
||||
@pytest.fixture(scope="module", autouse=True)
|
||||
def _devrant_settings(app_server):
|
||||
for key, value in {
|
||||
"rate_limit_per_minute": "1000000",
|
||||
"rate_limit_window_seconds": "60",
|
||||
"registration_open": "1",
|
||||
"maintenance_mode": "0",
|
||||
"devrant_api_enabled": "1",
|
||||
"session_max_age_days": "7",
|
||||
}.items():
|
||||
set_setting(key, value)
|
||||
yield
|
||||
|
||||
|
||||
def _name(prefix="drr"):
|
||||
_counter_dr[0] += 1
|
||||
return f"{prefix}{int(time.time() * 1000)}{_counter_dr[0]}"
|
||||
|
||||
|
||||
def _register(password="secret123"):
|
||||
name = _name()
|
||||
for _ in range(20):
|
||||
body = requests.post(
|
||||
f"{BASE_URL}/api/users",
|
||||
data={"username": name, "email": f"{name}@t.dev", "password": password},
|
||||
).json()
|
||||
if body.get("success"):
|
||||
at = body["auth_token"]
|
||||
return name, {
|
||||
"token_id": at["id"],
|
||||
"token_key": at["key"],
|
||||
"user_id": at["user_id"],
|
||||
}
|
||||
time.sleep(0.3)
|
||||
raise AssertionError("registration did not open")
|
||||
|
||||
|
||||
def _create_rant(params, text="this is a devrant rant body", tags="dev,test"):
|
||||
r = requests.post(
|
||||
f"{BASE_URL}/api/devrant/rants",
|
||||
data={**params, "rant": text, "tags": tags},
|
||||
)
|
||||
return r
|
||||
|
||||
|
||||
def test_feed_returns_rants(app_server):
|
||||
_, params = _register()
|
||||
_create_rant(params)
|
||||
refresh_snapshot()
|
||||
r = requests.get(f"{BASE_URL}/api/devrant/rants")
|
||||
assert r.status_code == 200
|
||||
body = r.json()
|
||||
assert body["success"] is True
|
||||
assert isinstance(body["rants"], list)
|
||||
|
||||
|
||||
def test_create_rant_persists_and_awards_xp(app_server):
|
||||
name, params = _register()
|
||||
refresh_snapshot()
|
||||
uid = get_table("users").find_one(username=name)["uid"]
|
||||
before = get_table("users").find_one(uid=uid).get("xp", 0) or 0
|
||||
r = _create_rant(params, text="rant about XP and reuse")
|
||||
assert r.json()["success"] is True
|
||||
rant_id = r.json()["rant_id"]
|
||||
refresh_snapshot()
|
||||
post = get_table("posts").find_one(id=rant_id)
|
||||
assert post is not None
|
||||
assert post["user_uid"] == uid
|
||||
assert post["topic"] == "rant"
|
||||
after = get_table("users").find_one(uid=uid).get("xp", 0) or 0
|
||||
assert after > before
|
||||
|
||||
|
||||
def test_create_rant_requires_auth(app_server):
|
||||
r = requests.post(f"{BASE_URL}/api/devrant/rants", data={"rant": "no token"})
|
||||
assert r.status_code == 401
|
||||
assert r.json()["success"] is False
|
||||
|
||||
|
||||
def test_create_rant_too_short(app_server):
|
||||
_, params = _register()
|
||||
r = requests.post(f"{BASE_URL}/api/devrant/rants", data={**params, "rant": ""})
|
||||
assert r.json()["success"] is False
|
||||
|
||||
|
||||
def test_get_rant_by_id(app_server):
|
||||
_, params = _register()
|
||||
rant_id = _create_rant(params).json()["rant_id"]
|
||||
refresh_snapshot()
|
||||
r = requests.get(f"{BASE_URL}/api/devrant/rants/{rant_id}")
|
||||
assert r.json()["success"] is True
|
||||
assert r.json()["rant"]
|
||||
|
||||
|
||||
def test_get_rant_unknown(app_server):
|
||||
r = requests.get(f"{BASE_URL}/api/devrant/rants/999999999")
|
||||
assert r.json()["success"] is False
|
||||
|
||||
|
||||
def test_edit_rant_owner_only(app_server):
|
||||
_, owner = _register()
|
||||
_, other = _register()
|
||||
rant_id = _create_rant(owner).json()["rant_id"]
|
||||
refresh_snapshot()
|
||||
r = requests.post(
|
||||
f"{BASE_URL}/api/devrant/rants/{rant_id}",
|
||||
data={**other, "rant": "hacked content here"},
|
||||
)
|
||||
assert r.json()["success"] is False
|
||||
assert r.json().get("fail_reason") == "not_owner"
|
||||
|
||||
|
||||
def test_edit_rant_owner_updates(app_server):
|
||||
_, owner = _register()
|
||||
rant_id = _create_rant(owner).json()["rant_id"]
|
||||
refresh_snapshot()
|
||||
r = requests.post(
|
||||
f"{BASE_URL}/api/devrant/rants/{rant_id}",
|
||||
data={**owner, "rant": "updated rant content body"},
|
||||
)
|
||||
assert r.json()["success"] is True
|
||||
refresh_snapshot()
|
||||
assert (
|
||||
get_table("posts").find_one(id=rant_id)["content"]
|
||||
== "updated rant content body"
|
||||
)
|
||||
|
||||
|
||||
def test_delete_rant_owner(app_server):
|
||||
_, owner = _register()
|
||||
rant_id = _create_rant(owner).json()["rant_id"]
|
||||
refresh_snapshot()
|
||||
uid_post = get_table("posts").find_one(id=rant_id)["uid"]
|
||||
r = requests.delete(f"{BASE_URL}/api/devrant/rants/{rant_id}", data=owner)
|
||||
assert r.json()["success"] is True
|
||||
refresh_snapshot()
|
||||
assert get_table("posts").find_one(uid=uid_post)["deleted_at"] is not None
|
||||
|
||||
|
||||
def test_delete_rant_non_owner_rejected(app_server):
|
||||
_, owner = _register()
|
||||
_, other = _register()
|
||||
rant_id = _create_rant(owner).json()["rant_id"]
|
||||
refresh_snapshot()
|
||||
r = requests.delete(f"{BASE_URL}/api/devrant/rants/{rant_id}", data=other)
|
||||
assert r.json()["success"] is False
|
||||
|
||||
|
||||
def test_vote_rant_records_vote(app_server):
|
||||
_, owner = _register()
|
||||
_, voter = _register()
|
||||
rant_id = _create_rant(owner).json()["rant_id"]
|
||||
refresh_snapshot()
|
||||
post_uid = get_table("posts").find_one(id=rant_id)["uid"]
|
||||
r = requests.post(
|
||||
f"{BASE_URL}/api/devrant/rants/{rant_id}/vote", data={**voter, "vote": 1}
|
||||
)
|
||||
assert r.json()["success"] is True
|
||||
refresh_snapshot()
|
||||
assert get_table("votes").count(target_uid=post_uid, value=1) >= 1
|
||||
|
||||
|
||||
def test_vote_rant_invalid_value(app_server):
|
||||
_, owner = _register()
|
||||
_, voter = _register()
|
||||
rant_id = _create_rant(owner).json()["rant_id"]
|
||||
refresh_snapshot()
|
||||
r = requests.post(
|
||||
f"{BASE_URL}/api/devrant/rants/{rant_id}/vote", data={**voter, "vote": 5}
|
||||
)
|
||||
assert r.json()["success"] is False
|
||||
|
||||
|
||||
def test_favorite_creates_bookmark(app_server):
|
||||
_, owner = _register()
|
||||
_, fan = _register()
|
||||
rant_id = _create_rant(owner).json()["rant_id"]
|
||||
refresh_snapshot()
|
||||
post_uid = get_table("posts").find_one(id=rant_id)["uid"]
|
||||
r = requests.post(f"{BASE_URL}/api/devrant/rants/{rant_id}/favorite", data=fan)
|
||||
assert r.json()["success"] is True
|
||||
refresh_snapshot()
|
||||
fan_uid = get_table("devrant_tokens").find_one(id=fan["token_id"])["user_uid"]
|
||||
assert (
|
||||
get_table("bookmarks").count(
|
||||
user_uid=fan_uid, target_uid=post_uid, deleted_at=None
|
||||
)
|
||||
== 1
|
||||
)
|
||||
requests.post(f"{BASE_URL}/api/devrant/rants/{rant_id}/unfavorite", data=fan)
|
||||
refresh_snapshot()
|
||||
assert (
|
||||
get_table("bookmarks").count(
|
||||
user_uid=fan_uid, target_uid=post_uid, deleted_at=None
|
||||
)
|
||||
== 0
|
||||
)
|
||||
|
||||
|
||||
def test_comment_on_rant_creates_comment(app_server):
|
||||
_, owner = _register()
|
||||
_, commenter = _register()
|
||||
rant_id = _create_rant(owner).json()["rant_id"]
|
||||
refresh_snapshot()
|
||||
post_uid = get_table("posts").find_one(id=rant_id)["uid"]
|
||||
r = requests.post(
|
||||
f"{BASE_URL}/api/devrant/rants/{rant_id}/comments",
|
||||
data={**commenter, "comment": "native comment reuse path"},
|
||||
)
|
||||
assert r.json()["success"] is True
|
||||
refresh_snapshot()
|
||||
assert (
|
||||
get_table("comments").count(
|
||||
target_uid=post_uid, target_type="post", deleted_at=None
|
||||
)
|
||||
>= 1
|
||||
)
|
||||
|
||||
|
||||
def test_search_returns_results_shape(app_server):
|
||||
_, params = _register()
|
||||
_create_rant(params, text="uniquesearchtoken rant body here")
|
||||
refresh_snapshot()
|
||||
r = requests.get(f"{BASE_URL}/api/devrant/search", params={"term": "uniquesearchtoken"})
|
||||
assert r.json()["success"] is True
|
||||
assert isinstance(r.json()["results"], list)
|
||||
Reference in New Issue
Block a user