pythonasyncioapiasyncfastapiframeworkjsonjson-schemaopenapiopenapi3pydanticpython-typespython3redocreststarletteswaggerswagger-uiuvicornweb
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
118 lines
3.6 KiB
118 lines
3.6 KiB
from unittest.mock import patch
|
|
|
|
from fastapi.testclient import TestClient
|
|
from sqlmodel import Session
|
|
|
|
from app.core.config import settings
|
|
from app.core.security import verify_password
|
|
from app.crud import create_user
|
|
from app.models import UserCreate
|
|
from app.tests.utils.user import user_authentication_headers
|
|
from app.tests.utils.utils import random_email, random_lower_string
|
|
from app.utils import generate_password_reset_token
|
|
|
|
|
|
def test_get_access_token(client: TestClient) -> None:
|
|
login_data = {
|
|
"username": settings.FIRST_SUPERUSER,
|
|
"password": settings.FIRST_SUPERUSER_PASSWORD,
|
|
}
|
|
r = client.post(f"{settings.API_V1_STR}/login/access-token", data=login_data)
|
|
tokens = r.json()
|
|
assert r.status_code == 200
|
|
assert "access_token" in tokens
|
|
assert tokens["access_token"]
|
|
|
|
|
|
def test_get_access_token_incorrect_password(client: TestClient) -> None:
|
|
login_data = {
|
|
"username": settings.FIRST_SUPERUSER,
|
|
"password": "incorrect",
|
|
}
|
|
r = client.post(f"{settings.API_V1_STR}/login/access-token", data=login_data)
|
|
assert r.status_code == 400
|
|
|
|
|
|
def test_use_access_token(
|
|
client: TestClient, superuser_token_headers: dict[str, str]
|
|
) -> None:
|
|
r = client.post(
|
|
f"{settings.API_V1_STR}/login/test-token",
|
|
headers=superuser_token_headers,
|
|
)
|
|
result = r.json()
|
|
assert r.status_code == 200
|
|
assert "email" in result
|
|
|
|
|
|
def test_recovery_password(
|
|
client: TestClient, normal_user_token_headers: dict[str, str]
|
|
) -> None:
|
|
with (
|
|
patch("app.core.config.settings.SMTP_HOST", "smtp.example.com"),
|
|
patch("app.core.config.settings.SMTP_USER", "admin@example.com"),
|
|
):
|
|
email = "test@example.com"
|
|
r = client.post(
|
|
f"{settings.API_V1_STR}/password-recovery/{email}",
|
|
headers=normal_user_token_headers,
|
|
)
|
|
assert r.status_code == 200
|
|
assert r.json() == {"message": "Password recovery email sent"}
|
|
|
|
|
|
def test_recovery_password_user_not_exits(
|
|
client: TestClient, normal_user_token_headers: dict[str, str]
|
|
) -> None:
|
|
email = "jVgQr@example.com"
|
|
r = client.post(
|
|
f"{settings.API_V1_STR}/password-recovery/{email}",
|
|
headers=normal_user_token_headers,
|
|
)
|
|
assert r.status_code == 404
|
|
|
|
|
|
def test_reset_password(client: TestClient, db: Session) -> None:
|
|
email = random_email()
|
|
password = random_lower_string()
|
|
new_password = random_lower_string()
|
|
|
|
user_create = UserCreate(
|
|
email=email,
|
|
full_name="Test User",
|
|
password=password,
|
|
is_active=True,
|
|
is_superuser=False,
|
|
)
|
|
user = create_user(session=db, user_create=user_create)
|
|
token = generate_password_reset_token(email=email)
|
|
headers = user_authentication_headers(client=client, email=email, password=password)
|
|
data = {"new_password": new_password, "token": token}
|
|
|
|
r = client.post(
|
|
f"{settings.API_V1_STR}/reset-password/",
|
|
headers=headers,
|
|
json=data,
|
|
)
|
|
|
|
assert r.status_code == 200
|
|
assert r.json() == {"message": "Password updated successfully"}
|
|
|
|
db.refresh(user)
|
|
assert verify_password(new_password, user.hashed_password)
|
|
|
|
|
|
def test_reset_password_invalid_token(
|
|
client: TestClient, superuser_token_headers: dict[str, str]
|
|
) -> None:
|
|
data = {"new_password": "changethis", "token": "invalid"}
|
|
r = client.post(
|
|
f"{settings.API_V1_STR}/reset-password/",
|
|
headers=superuser_token_headers,
|
|
json=data,
|
|
)
|
|
response = r.json()
|
|
|
|
assert "detail" in response
|
|
assert r.status_code == 400
|
|
assert response["detail"] == "Invalid token"
|
|
|