chore: reorganize test files into domain-specific subdirectories under tests/

Split the monolithic test directory into three tiers (unit, api, e2e) with a path-mirroring directory structure. Added corresponding Makefile targets (test-unit, test-api, test-e2e) and updated all documentation references (CLAUDE.md, README.md, testing-cicd.html, testing-framework.html, testing-make.html) to reflect the new layout and naming conventions.
2026-06-13 14:32:33 +00:00
parent 014c4c6bb3
commit 43f4011005
268 changed files with 20634 additions and 9206 deletions
@@ -0,0 +1,161 @@
+# retoor <retoor@molodetz.nl>
+
+import time
+from datetime import datetime, timezone
+import pytest
+import requests
+from tests.conftest import BASE_URL
+from devplacepy.database import get_table, refresh_snapshot, set_setting
+from devplacepy.utils import generate_uid, make_combined_slug
+JSON_audit_log = {"Accept": "application/json"}
+_counter_audit_log = [0]
+@pytest.fixture(scope="module", autouse=True)
+def _audit_test_settings(app_server):
+    # On a fresh DB init_db skips seeding the operational/upload settings (its
+    # `tables` snapshot predates site_settings creation), so those rows are
+    # absent and the admin settings form would INSERT them as "" - which both
+    # closes registration and makes consumers that do int("") crash. Seed sane
+    # values here so the form's empty submissions are skipped (existing key), and
+    # lift the per-IP rate limit since this file fires many mutating requests.
+    for key, value in {
+        "rate_limit_per_minute": "1000000",
+        "rate_limit_window_seconds": "60",
+        "registration_open": "1",
+        "maintenance_mode": "0",
+        "max_upload_size_mb": "10",
+        "allowed_file_types": "",
+        "max_attachments_per_resource": "10",
+        "session_max_age_days": "7",
+        "session_remember_days": "30",
+        "news_service_interval": "3600",
+        "news_grade_threshold": "7",
+    }.items():
+        set_setting(key, value)
+    yield
+def _db_user(name):
+    # the user is created by the server subprocess; refresh the test-process
+    # SQLite snapshot before reading it back across the process boundary.
+    refresh_snapshot()
+    return get_table("users").find_one(username=name)
+def _unique(prefix="au"):
+    _counter_audit_log[0] += 1
+    return f"{prefix}{int(time.time() * 1000)}{_counter_audit_log[0]}"
+def _member():
+    name = _unique("aumem")
+    s = requests.Session()
+    s.post(
+        f"{BASE_URL}/auth/signup",
+        data={
+            "username": name,
+            "email": f"{name}@t.dev",
+            "password": "secret123",
+            "confirm_password": "secret123",
+        },
+        allow_redirects=True,
+    )
+    return s, name
+def _member_key():
+    _, name = _member()
+    return _db_user(name)["api_key"]
+def _admin(seeded_db):
+    # authenticate via the seeded admin's API key (header auth) rather than a
+    # login POST - GET reads are exempt from the rate limiter, so reusing this
+    # across the file's many tests never counts against the per-IP write budget.
+    key = _db_user("alice_test")["api_key"]
+    s = requests.Session()
+    s.headers.update({"X-API-KEY": key})
+    return s
+def _audit(admin, **params):
+    r = admin.get(f"{BASE_URL}/admin/audit-log", headers=JSON_audit_log, params=params)
+    assert r.status_code == 200, r.text[:300]
+    return r.json()
+def _find(admin, event_key, predicate):
+    data = _audit(admin, event_key=event_key)
+    for entry in data["entries"]:
+        if predicate(entry):
+            return entry
+    return None
+def _new_post(session, body="audited post body here"):
+    return session.post(
+        f"{BASE_URL}/posts/create",
+        headers=JSON_audit_log,
+        data={"title": _unique("aup"), "content": body, "topic": "devlog"},
+    ).json()["data"]
+def _new_project(session):
+    return session.post(
+        f"{BASE_URL}/projects/create",
+        headers=JSON_audit_log,
+        data={
+            "title": _unique("aupr"),
+            "description": "audited project description text",
+            "project_type": "software",
+            "status": "In Development",
+            "platforms": "",
+        },
+    ).json()["data"]
+def _seed_news_audit_log():
+    uid = generate_uid()
+    title = _unique("aunews")
+    get_table("news").insert(
+        {
+            "uid": uid,
+            "slug": make_combined_slug(title, uid),
+            "title": title,
+            "external_id": uid,
+            "status": "draft",
+            "featured": 0,
+            "show_on_landing": 0,
+            "grade": 5,
+            "source_name": "AuditTest",
+            "synced_at": datetime.now(timezone.utc).isoformat(),
+            "description": "audited news article",
+        }
+    )
+    refresh_snapshot()
+    return uid
+
+
+def test_audit_log_json_shape(seeded_db):
+    admin = _admin(seeded_db)
+    data = _audit(admin)
+    assert set(["entries", "pagination", "filters", "options"]).issubset(data.keys())
+    assert isinstance(data["entries"], list)
+    assert data["pagination"]["per_page"] == 25
+    entry = data["entries"][0]
+    for field in ("uid", "event_key", "category", "actor_kind", "actor_role", "result"):
+        assert field in entry
+    for opt in ("event_key", "category", "actor_role", "origin", "result"):
+        assert opt in data["options"]
+
+
+def test_signup_is_recorded(seeded_db):
+    _, name = _member()
+    admin = _admin(seeded_db)
+    event = _find(admin, "auth.signup", lambda e: e.get("target_label") == name)
+    assert event is not None
+    assert event["category"] == "auth"
+    assert event["result"] == "success"
+
+
+def test_filter_by_event_key(seeded_db):
+    admin = _admin(seeded_db)
+    data = _audit(admin, event_key="auth.signup")
+    assert data["pagination"]["total"] >= 1
+    assert all(e["event_key"] == "auth.signup" for e in data["entries"])
+    assert data["filters"]["event_key"] == "auth.signup"
+
+
+def test_filter_by_category(seeded_db):
+    admin = _admin(seeded_db)
+    data = _audit(admin, category="auth")
+    assert data["pagination"]["total"] >= 1
+    assert all(e["category"] == "auth" for e in data["entries"])
+
+
+def test_post_create_emits_reward_side_effects(seeded_db):
+    s, name = _member()
+    uid = _db_user(name)["uid"]
+    _new_post(s)
+    admin = _admin(seeded_db)
+    assert _find(admin, "reward.xp.grant", lambda e: e.get("actor_uid") == uid) is not None
+    assert _find(admin, "reward.badge.award", lambda e: e.get("actor_uid") == uid) is not None