Files
ss-tools/backend/tests/api/test_profile_routes.py

199 lines
7.8 KiB
Python

# #region Test.Api.ProfileRoutes [C:3] [TYPE Module] [SEMANTICS test,profile,api,preferences,superset]
# @BRIEF Tests for profile.py — preferences CRUD and Superset account lookup.
# @RELATION BINDS_TO -> [ProfileApiModule]
# @TEST_EDGE: update_validation_error -> 422
# @TEST_EDGE: update_authorization_error -> 403
# @TEST_EDGE: superset_env_not_found -> 404
import os
os.environ.setdefault("DATABASE_URL", "sqlite:///:memory:")
os.environ.setdefault("AUTH_DATABASE_URL", "sqlite:///:memory:")
os.environ.setdefault("SECRET_KEY", "test-secret-key-for-tests")
import sys
from pathlib import Path
from unittest.mock import AsyncMock, MagicMock, patch
import pytest
from fastapi import FastAPI
from fastapi.testclient import TestClient
_src = str(Path(__file__).resolve().parent.parent.parent / "src")
if _src not in sys.path:
sys.path.insert(0, _src)
def _make_client(overrides: dict | None = None) -> TestClient:
from src.api.routes.profile import router
from src.dependencies import get_current_user, get_db, get_config_manager, get_plugin_loader
from src.schemas.auth import User, RoleSchema
app = FastAPI()
app.include_router(router)
mock_user = User(
id="user-1", username="testuser", email="test@example.com",
auth_source="LOCAL",
created_at=__import__("datetime").datetime.now(),
roles=[RoleSchema(id="r1", name="Admin", description="", permissions=[])],
)
defaults = {
get_current_user: lambda: mock_user,
get_db: lambda: MagicMock(),
get_config_manager: lambda: MagicMock(),
get_plugin_loader: lambda: None,
}
if overrides:
defaults.update(overrides)
for dep, mock_fn in defaults.items():
app.dependency_overrides[dep] = mock_fn
return TestClient(app)
# ── get_preferences ──
class TestGetPreferences:
"""GET /api/profile/preferences"""
def test_get_preferences_success(self):
from datetime import datetime, UTC
with patch("src.api.routes.profile.ProfileService") as MockService:
instance = MockService.return_value
instance.get_my_preference.return_value = {
"status": "success",
"preference": {
"user_id": "user-1",
"show_only_my_dashboards": True,
"show_only_slug_dashboards": True,
"superset_username": "admin",
"created_at": datetime.now(UTC).isoformat(),
"updated_at": datetime.now(UTC).isoformat(),
},
"security": {"read_only": False},
}
client = _make_client()
resp = client.get("/api/profile/preferences")
assert resp.status_code == 200
data = resp.json()
assert data["status"] == "success"
assert data["preference"]["show_only_my_dashboards"] is True
# ── update_preferences ──
class TestUpdatePreferences:
"""PATCH /api/profile/preferences"""
def test_update_success(self):
from datetime import datetime, UTC
with patch("src.api.routes.profile.ProfileService") as MockService:
instance = MockService.return_value
instance.update_my_preference.return_value = {
"status": "success",
"preference": {
"user_id": "user-1",
"show_only_my_dashboards": False,
"show_only_slug_dashboards": True,
"created_at": datetime.now(UTC).isoformat(),
"updated_at": datetime.now(UTC).isoformat(),
},
"security": {"read_only": False},
}
client = _make_client()
resp = client.patch("/api/profile/preferences", json={
"show_only_my_dashboards": False,
})
assert resp.status_code == 200
data = resp.json()
assert data["preference"]["show_only_my_dashboards"] is False
def test_update_validation_error_422(self):
from src.services.profile_service import ProfileValidationError
with patch("src.api.routes.profile.ProfileService") as MockService:
instance = MockService.return_value
instance.update_my_preference.side_effect = ProfileValidationError(
[{"field": "show_only_my_dashboards", "message": "Invalid value"}]
)
client = _make_client()
resp = client.patch("/api/profile/preferences", json={
"show_only_my_dashboards": "not-a-boolean",
})
assert resp.status_code == 422
def test_update_authorization_error_403(self):
from src.services.profile_service import ProfileAuthorizationError
with patch("src.api.routes.profile.ProfileService") as MockService:
instance = MockService.return_value
instance.update_my_preference.side_effect = ProfileAuthorizationError(
"Cross-user mutation blocked"
)
client = _make_client()
resp = client.patch("/api/profile/preferences", json={
"show_only_my_dashboards": True,
})
assert resp.status_code == 403
assert "Cross-user mutation" in resp.text
# ── lookup_superset_accounts ──
class TestLookupSupersetAccounts:
"""GET /api/profile/superset-accounts"""
def test_lookup_success(self):
with patch("src.api.routes.profile.ProfileService") as MockService:
instance = MockService.return_value
instance.lookup_superset_accounts = AsyncMock(return_value={
"status": "success",
"environment_id": "env-1",
"page_index": 0,
"page_size": 20,
"total": 1,
"items": [{"environment_id": "env-1", "username": "admin"}],
})
client = _make_client()
resp = client.get("/api/profile/superset-accounts?environment_id=env-1")
assert resp.status_code == 200
data = resp.json()
assert len(data["items"]) == 1
def test_lookup_with_search_and_pagination(self):
with patch("src.api.routes.profile.ProfileService") as MockService:
instance = MockService.return_value
instance.lookup_superset_accounts = AsyncMock(return_value={
"status": "success",
"environment_id": "env-1",
"page_index": 0,
"page_size": 10,
"total": 1,
"items": [{"environment_id": "env-1", "username": "analyst"}],
})
client = _make_client()
resp = client.get(
"/api/profile/superset-accounts?environment_id=env-1"
"&search=analyst&page_index=0&page_size=10"
"&sort_column=username&sort_order=asc"
)
assert resp.status_code == 200
data = resp.json()
assert data["items"][0]["username"] == "analyst"
def test_lookup_env_not_found_404(self):
from src.services.profile_service import EnvironmentNotFoundError
with patch("src.api.routes.profile.ProfileService") as MockService:
instance = MockService.return_value
instance.lookup_superset_accounts = AsyncMock(
side_effect=EnvironmentNotFoundError("Environment not found: env-ghost")
)
client = _make_client()
resp = client.get("/api/profile/superset-accounts?environment_id=env-ghost")
assert resp.status_code == 404
def test_lookup_missing_environment_id_422(self):
# Required Query parameter environment_id missing -> FastAPI 422
client = _make_client()
resp = client.get("/api/profile/superset-accounts")
assert resp.status_code == 422
# #endregion Test.Api.ProfileRoutes