forked from retoor/devplacepy
retoorandClaude Opus 5
7674dac628
Unit tests for the provider registry, both providers' registration parsing, the APNs payload translation, provider token signing and caching, header and status mapping against a mock transport, provider grouping and the delivery timeout clamp, plus service tests for the configuration surface, the retention sweep and the per-provider metrics. Api tests cover the provider listing on GET /push.json, registration with and without an explicit provider, idempotency and the rejection of an unknown or unconfigured provider. Provider settings in unit tests are supplied by monkeypatching the provider's setting reader rather than writing site_settings, because the unit tier shares its database with the running api-tier server. devplacepy/push/CLAUDE.md documents the protocol, how to add a provider, the invariants and the APNs specifics; the root, routers and services files point at it. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
120 lines
3.3 KiB
Python
120 lines
3.3 KiB
Python
# retoor <retoor@molodetz.nl>
|
|
|
|
import uuid
|
|
import requests
|
|
from tests.conftest import BASE_URL
|
|
def _session_push():
|
|
s = requests.Session()
|
|
name = f"push_{uuid.uuid4().hex[:10]}"
|
|
s.post(
|
|
f"{BASE_URL}/auth/signup",
|
|
data={
|
|
"username": name,
|
|
"email": f"{name}@test.dev",
|
|
"password": "secret123",
|
|
"confirm_password": "secret123",
|
|
},
|
|
allow_redirects=True,
|
|
)
|
|
return s
|
|
|
|
|
|
def test_public_key_endpoint(app_server):
|
|
r = requests.get(f"{BASE_URL}/push.json")
|
|
assert r.status_code == 200
|
|
assert r.json().get("publicKey")
|
|
|
|
|
|
def test_register_requires_auth(app_server):
|
|
r = requests.post(
|
|
f"{BASE_URL}/push.json",
|
|
json={
|
|
"endpoint": "https://push.example.com/anon",
|
|
"keys": {"p256dh": "key", "auth": "auth"},
|
|
},
|
|
allow_redirects=False,
|
|
)
|
|
assert r.status_code == 401
|
|
|
|
|
|
def test_register_success(app_server):
|
|
s = _session_push()
|
|
r = s.post(
|
|
f"{BASE_URL}/push.json",
|
|
json={
|
|
"endpoint": "https://push.example.com/sub-1",
|
|
"keys": {"p256dh": "p256dh_fake", "auth": "auth_fake"},
|
|
},
|
|
)
|
|
assert r.status_code == 200, r.text
|
|
assert r.json().get("registered") is True
|
|
|
|
|
|
def test_register_missing_keys_rejected(app_server):
|
|
s = _session_push()
|
|
r = s.post(f"{BASE_URL}/push.json", json={"endpoint": "https://push.example.com/x"})
|
|
assert r.status_code == 400
|
|
|
|
|
|
def test_register_invalid_json_rejected(app_server):
|
|
s = _session_push()
|
|
r = s.post(
|
|
f"{BASE_URL}/push.json",
|
|
data="not-json",
|
|
headers={"Content-Type": "application/json"},
|
|
)
|
|
assert r.status_code == 400
|
|
|
|
|
|
def test_public_key_endpoint_lists_providers(app_server):
|
|
r = requests.get(f"{BASE_URL}/push.json")
|
|
assert r.status_code == 200
|
|
body = r.json()
|
|
assert body["publicKey"]
|
|
assert body["providers"]["webpush"]["publicKey"] == body["publicKey"]
|
|
|
|
|
|
def test_register_accepts_an_explicit_webpush_provider(app_server):
|
|
s = _session_push()
|
|
r = s.post(
|
|
f"{BASE_URL}/push.json",
|
|
json={
|
|
"provider": "webpush",
|
|
"endpoint": "https://push.example.com/explicit",
|
|
"keys": {"p256dh": "p256dh_fake", "auth": "auth_fake"},
|
|
},
|
|
)
|
|
assert r.status_code == 200, r.text
|
|
assert r.json().get("registered") is True
|
|
|
|
|
|
def test_register_is_idempotent_for_the_same_subscription(app_server):
|
|
s = _session_push()
|
|
body = {
|
|
"endpoint": "https://push.example.com/idempotent",
|
|
"keys": {"p256dh": "p256dh_fake", "auth": "auth_fake"},
|
|
}
|
|
assert s.post(f"{BASE_URL}/push.json", json=body).status_code == 200
|
|
assert s.post(f"{BASE_URL}/push.json", json=body).status_code == 200
|
|
|
|
|
|
def test_register_unknown_provider_rejected(app_server):
|
|
s = _session_push()
|
|
r = s.post(
|
|
f"{BASE_URL}/push.json",
|
|
json={"provider": "carrier-pigeon", "token": "a" * 64},
|
|
)
|
|
assert r.status_code == 400
|
|
|
|
|
|
def test_register_apns_rejected_while_unconfigured(app_server):
|
|
s = _session_push()
|
|
r = s.post(f"{BASE_URL}/push.json", json={"provider": "apns", "token": "a" * 64})
|
|
assert r.status_code == 400
|
|
|
|
|
|
def test_register_non_object_body_rejected(app_server):
|
|
s = _session_push()
|
|
r = s.post(f"{BASE_URL}/push.json", json=["nope"])
|
|
assert r.status_code == 400
|