retoorandClaude Sonnet 5
572e022584
Notifications: a new "thread" type notifies every other commenter on a
post whenever anyone comments on it, disregarding reply hierarchy -
excluding the actor and whoever already got a comment/reply
notification for that same event, so no one is double-notified.
Implemented via a background-deferred fan-out mirroring the existing
mention-notification pattern.
SEO: discussion_forum_posting() now embeds up to 20 of a post's
comments as nested schema.org Comment entities (not just an aggregate
count), and a new /topics hub plus /topics/{topic} pages give the
feed's topic filter real, independently crawlable/indexable URLs -
/feed?topic=X was never indexable since its canonical strips the
query string back to bare /feed. Both are wired end to end (schemas,
Devii actions, docs API, sitemap, locustfile load-test coverage).
Quiz player: the auto-advance to the next question used to hide the
just-answered slide in the same tick as rendering the grade, so on
any multi-question quiz the Correct/Not correct feedback was never
actually visible before the view moved on. Delayed via setTimeout,
with the pending timer cleared on manual navigation and on
disconnect so it can't race or fire on a removed component.
Also includes other local changes already in progress in this
working tree before this session (messaging, push delivery,
deepsearch jobs, game economy, quiz builder) - verified by the full
suite passing (3467 tests) but not authored or individually reviewed
in this session.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VL9Xn57W5UR3HZbbuuzxdK
136 lines
3.8 KiB
Python
136 lines
3.8 KiB
Python
# retoor <retoor@molodetz.nl>
|
|
|
|
import uuid
|
|
import requests
|
|
from tests.conftest import BASE_URL
|
|
def _session_push():
|
|
s = requests.Session()
|
|
name = f"push_{uuid.uuid4().hex[:10]}"
|
|
s.post(
|
|
f"{BASE_URL}/auth/signup",
|
|
data={
|
|
"username": name,
|
|
"email": f"{name}@test.dev",
|
|
"password": "secret123",
|
|
"confirm_password": "secret123",
|
|
"birth_date": "1990-01-01",
|
|
"accept_terms": "1",
|
|
},
|
|
allow_redirects=True,
|
|
)
|
|
return s
|
|
|
|
|
|
def test_public_key_endpoint(app_server):
|
|
r = requests.get(f"{BASE_URL}/push.json")
|
|
assert r.status_code == 200
|
|
assert r.json().get("publicKey")
|
|
|
|
|
|
def test_register_requires_auth(app_server):
|
|
r = requests.post(
|
|
f"{BASE_URL}/push.json",
|
|
json={
|
|
"endpoint": "https://push.example.com/anon",
|
|
"keys": {"p256dh": "key", "auth": "auth"},
|
|
},
|
|
allow_redirects=False,
|
|
)
|
|
assert r.status_code == 401
|
|
|
|
|
|
def test_register_success(app_server):
|
|
s = _session_push()
|
|
r = s.post(
|
|
f"{BASE_URL}/push.json",
|
|
json={
|
|
"endpoint": "https://push.example.com/sub-1",
|
|
"keys": {"p256dh": "p256dh_fake", "auth": "auth_fake"},
|
|
},
|
|
)
|
|
assert r.status_code == 200, r.text
|
|
assert r.json().get("registered") is True
|
|
|
|
|
|
def test_register_missing_keys_rejected(app_server):
|
|
s = _session_push()
|
|
r = s.post(f"{BASE_URL}/push.json", json={"endpoint": "https://push.example.com/x"})
|
|
assert r.status_code == 400
|
|
|
|
|
|
def test_register_invalid_json_rejected(app_server):
|
|
s = _session_push()
|
|
r = s.post(
|
|
f"{BASE_URL}/push.json",
|
|
data="not-json",
|
|
headers={"Content-Type": "application/json"},
|
|
)
|
|
assert r.status_code == 400
|
|
|
|
|
|
def test_public_key_endpoint_lists_providers(app_server):
|
|
r = requests.get(f"{BASE_URL}/push.json")
|
|
assert r.status_code == 200
|
|
body = r.json()
|
|
assert body["publicKey"]
|
|
assert body["providers"]["webpush"]["publicKey"] == body["publicKey"]
|
|
|
|
|
|
def test_register_accepts_an_explicit_webpush_provider(app_server):
|
|
s = _session_push()
|
|
r = s.post(
|
|
f"{BASE_URL}/push.json",
|
|
json={
|
|
"provider": "webpush",
|
|
"endpoint": "https://push.example.com/explicit",
|
|
"keys": {"p256dh": "p256dh_fake", "auth": "auth_fake"},
|
|
},
|
|
)
|
|
assert r.status_code == 200, r.text
|
|
assert r.json().get("registered") is True
|
|
|
|
|
|
def test_register_is_idempotent_for_the_same_subscription(app_server):
|
|
s = _session_push()
|
|
body = {
|
|
"endpoint": "https://push.example.com/idempotent",
|
|
"keys": {"p256dh": "p256dh_fake", "auth": "auth_fake"},
|
|
}
|
|
assert s.post(f"{BASE_URL}/push.json", json=body).status_code == 200
|
|
assert s.post(f"{BASE_URL}/push.json", json=body).status_code == 200
|
|
|
|
|
|
def test_register_unknown_provider_rejected(app_server):
|
|
s = _session_push()
|
|
r = s.post(
|
|
f"{BASE_URL}/push.json",
|
|
json={"provider": "carrier-pigeon", "token": "a" * 64},
|
|
)
|
|
assert r.status_code == 400
|
|
|
|
|
|
def test_register_apns_rejected_while_unconfigured(app_server):
|
|
s = _session_push()
|
|
r = s.post(f"{BASE_URL}/push.json", json={"provider": "apns", "token": "a" * 64})
|
|
assert r.status_code == 400
|
|
|
|
|
|
def test_register_non_object_body_rejected(app_server):
|
|
s = _session_push()
|
|
r = s.post(f"{BASE_URL}/push.json", json=["nope"])
|
|
assert r.status_code == 400
|
|
|
|
|
|
def test_register_ignores_client_id_on_webpush(app_server):
|
|
s = _session_push()
|
|
r = s.post(
|
|
f"{BASE_URL}/push.json",
|
|
json={
|
|
"endpoint": "https://push.example.com/with-client",
|
|
"keys": {"p256dh": "p256dh_fake", "auth": "auth_fake"},
|
|
"client_id": "browser-tab",
|
|
},
|
|
)
|
|
assert r.status_code == 200, r.text
|
|
assert r.json().get("registered") is True
|