632b730fff
Systematic rename of all semantic anchors (#region, [DEF], @RELATION) across 1400+ files — backend Python, frontend Svelte/TS, specs, docs: - Flat anchors become Namespace.Module.Entity - @RELATION references updated to match new anchor paths - Zero business logic changes
124 lines
4.2 KiB
Python
124 lines
4.2 KiB
Python
# #region Test.ApiKeyModel.TestAPIKeyModel [C:2] [TYPE Module] [SEMANTICS test, api_key, model]
|
|
# @BRIEF Contract tests for the APIKey SQLAlchemy model — creation, hash storage, and field constraints.
|
|
# @RELATION BINDS_TO -> [Models.ApiKey.APIKeyModel]
|
|
# @TEST_CONTRACT: APIKey model stores SHA-256 hash and prefix; raw key never persisted.
|
|
# @TEST_EDGE: key_hash is unique and indexed
|
|
# @TEST_EDGE: prefix is exactly 11 chars ("ssk_" + 7)
|
|
# @TEST_EDGE: active defaults to True
|
|
import pytest
|
|
|
|
|
|
# #region Test.ApiKeyModel.CleanDb [C:1] [TYPE Fixture]
|
|
# @BRIEF In-memory SQLite fixture for APIKey model tests.
|
|
@pytest.fixture
|
|
def clean_db():
|
|
from sqlalchemy import create_engine
|
|
from sqlalchemy.orm import sessionmaker
|
|
from sqlalchemy.pool import StaticPool
|
|
|
|
from src.models.mapping import Base
|
|
|
|
engine = create_engine(
|
|
"sqlite:///:memory:",
|
|
poolclass=StaticPool,
|
|
connect_args={"check_same_thread": False},
|
|
)
|
|
Base.metadata.create_all(engine)
|
|
Session = sessionmaker(bind=engine)
|
|
session = Session()
|
|
yield session
|
|
session.close()
|
|
# #endregion Test.ApiKeyModel.CleanDb
|
|
|
|
|
|
class TestAPIKeyModel:
|
|
"""Verify APIKey model fields and constraints."""
|
|
|
|
# #region Test.ApiKeyModel.TestCreateApiKey [C:2] [TYPE Function]
|
|
# @BRIEF Create APIKey with required fields and verify defaults.
|
|
def test_create_api_key(self, clean_db):
|
|
from src.models.api_key import APIKey
|
|
|
|
api_key = APIKey(
|
|
key_hash="a" * 64,
|
|
prefix="ssk_abc1234",
|
|
name="Test Key",
|
|
permissions=["maintenance:start"],
|
|
)
|
|
clean_db.add(api_key)
|
|
clean_db.commit()
|
|
clean_db.refresh(api_key)
|
|
|
|
assert api_key.id is not None
|
|
assert api_key.key_hash == "a" * 64
|
|
assert api_key.prefix == "ssk_abc1234"
|
|
assert api_key.name == "Test Key"
|
|
assert api_key.permissions == ["maintenance:start"]
|
|
assert api_key.active is True
|
|
assert api_key.created_at is not None
|
|
assert api_key.environment_id is None
|
|
assert api_key.expires_at is None
|
|
assert api_key.last_used_at is None
|
|
# #endregion Test.ApiKeyModel.TestCreateApiKey
|
|
|
|
# #region Test.ApiKeyModel.TestKeyHashUnique [C:2] [TYPE Function]
|
|
# @BRIEF key_hash is unique — duplicate raises IntegrityError.
|
|
def test_key_hash_unique(self, clean_db):
|
|
from sqlalchemy.exc import IntegrityError
|
|
|
|
from src.models.api_key import APIKey
|
|
|
|
clean_db.add(APIKey(
|
|
key_hash="b" * 64,
|
|
prefix="ssk_xyz7890",
|
|
name="Key 1",
|
|
permissions=["maintenance:start"],
|
|
))
|
|
clean_db.commit()
|
|
|
|
with pytest.raises(IntegrityError):
|
|
clean_db.add(APIKey(
|
|
key_hash="b" * 64, # Same hash
|
|
prefix="ssk_def5678",
|
|
name="Key 2",
|
|
permissions=["maintenance:end"],
|
|
))
|
|
clean_db.commit()
|
|
# #endregion Test.ApiKeyModel.TestKeyHashUnique
|
|
|
|
# #region Test.ApiKeyModel.TestPrefixLength [C:2] [TYPE Function]
|
|
# @BRIEF prefix is exactly 11 characters.
|
|
def test_prefix_length(self, clean_db):
|
|
from src.models.api_key import APIKey
|
|
|
|
api_key = APIKey(
|
|
key_hash="c" * 64,
|
|
prefix="ssk_short1", # 10 chars — should be ok in SQL
|
|
name="Short Prefix",
|
|
permissions=["maintenance:start"],
|
|
)
|
|
clean_db.add(api_key)
|
|
clean_db.commit()
|
|
# The DB allows any prefix length; the app layer enforces 11 chars
|
|
# via generate_api_key. Model just stores what it's given.
|
|
assert len(api_key.prefix) <= 11
|
|
# #endregion Test.ApiKeyModel.TestPrefixLength
|
|
|
|
# #region Test.ApiKeyModel.TestActiveDefaultTrue [C:2] [TYPE Function]
|
|
# @BRIEF active column defaults to True.
|
|
def test_active_default_true(self, clean_db):
|
|
from src.models.api_key import APIKey
|
|
|
|
api_key = APIKey(
|
|
key_hash="d" * 64,
|
|
prefix="ssk_def1234",
|
|
name="Default Active",
|
|
permissions=[],
|
|
)
|
|
clean_db.add(api_key)
|
|
clean_db.commit()
|
|
|
|
assert api_key.active is True
|
|
# #endregion Test.ApiKeyModel.TestActiveDefaultTrue
|
|
# #endregion Test.ApiKeyModel.TestAPIKeyModel
|