mirror of
https://github.com/mealie-recipes/mealie.git
synced 2025-05-24 01:12:54 -04:00
9ecef4c25f
This PR does too many things :(
1. Major refactoring of the dev/scripts and dev/code-generation folders.
Primarily this was removing duplicate code and cleaning up some poorly written code snippets as well as making them more idempotent so then can be re-run over and over again but still maintain the same results. This is working on my machine, but I've been having problems in CI and comparing diffs so running generators in CI will have to wait.
2. Re-Implement using the generated api routes for testing
This was a _huge_ refactor that touched damn near every test file but now we have auto-generated typed routes with inline hints and it's used for nearly every test excluding a few that use classes for better parameterization. This should greatly reduce errors when writing new tests.
3. Minor Perf improvements for the All Recipes endpoint
A. Removed redundant loops
B. Uses orjson to do the encoding directly and returns a byte response instead of relying on the default
jsonable_encoder.
4. Fix some TS type errors that cropped up for seemingly no reason half way through the PR.
See this issue https://github.com/phillipdupuis/pydantic-to-typescript/issues/28
Basically, the generated TS type is not-correct since Pydantic will automatically fill in null fields. The resulting TS type is generated with a ? to indicate it can be null even though we _know_ that i can't be.
96 lines
2.9 KiB
Python
96 lines
2.9 KiB
Python
from uuid import uuid4
|
|
|
|
from fastapi.testclient import TestClient
|
|
|
|
from mealie.repos.repository_factory import AllRepositories
|
|
from tests.utils import api_routes
|
|
from tests.utils.factories import random_bool
|
|
from tests.utils.fixture_schemas import TestUser
|
|
|
|
|
|
def get_permissions_payload(user_id: str, can_manage=None) -> dict:
|
|
return {
|
|
"user_id": user_id,
|
|
"can_manage": random_bool() if can_manage is None else can_manage,
|
|
"can_invite": random_bool(),
|
|
"can_organize": random_bool(),
|
|
}
|
|
|
|
|
|
def test_get_group_members(api_client: TestClient, user_tuple: list[TestUser]):
|
|
usr_1, usr_2 = user_tuple
|
|
|
|
response = api_client.get(api_routes.groups_members, headers=usr_1.token)
|
|
assert response.status_code == 200
|
|
|
|
members = response.json()
|
|
assert len(members) >= 2
|
|
|
|
all_ids = [x["id"] for x in members]
|
|
|
|
assert str(usr_1.user_id) in all_ids
|
|
assert str(usr_2.user_id) in all_ids
|
|
|
|
|
|
def test_set_memeber_permissions(api_client: TestClient, user_tuple: list[TestUser], database: AllRepositories):
|
|
usr_1, usr_2 = user_tuple
|
|
|
|
# Set Acting User
|
|
acting_user = database.users.get_one(usr_1.user_id)
|
|
acting_user.can_manage = True
|
|
database.users.update(acting_user.id, acting_user)
|
|
|
|
payload = get_permissions_payload(str(usr_2.user_id))
|
|
|
|
# Test
|
|
response = api_client.put(api_routes.groups_permissions, json=payload, headers=usr_1.token)
|
|
assert response.status_code == 200
|
|
|
|
|
|
def test_set_memeber_permissions_unauthorized(api_client: TestClient, unique_user: TestUser, database: AllRepositories):
|
|
# Setup
|
|
user = database.users.get_one(unique_user.user_id)
|
|
user.can_manage = False
|
|
database.users.update(user.id, user)
|
|
|
|
payload = get_permissions_payload(str(user.id))
|
|
payload = {
|
|
"user_id": str(user.id),
|
|
"can_manage": True,
|
|
"can_invite": True,
|
|
"can_organize": True,
|
|
}
|
|
|
|
# Test
|
|
response = api_client.put(api_routes.groups_permissions, json=payload, headers=unique_user.token)
|
|
assert response.status_code == 403
|
|
|
|
|
|
def test_set_memeber_permissions_other_group(
|
|
api_client: TestClient,
|
|
unique_user: TestUser,
|
|
g2_user: TestUser,
|
|
database: AllRepositories,
|
|
):
|
|
user = database.users.get_one(unique_user.user_id)
|
|
user.can_manage = True
|
|
database.users.update(user.id, user)
|
|
|
|
payload = get_permissions_payload(str(g2_user.user_id))
|
|
response = api_client.put(api_routes.groups_permissions, json=payload, headers=unique_user.token)
|
|
assert response.status_code == 403
|
|
|
|
|
|
def test_set_memeber_permissions_no_user(
|
|
api_client: TestClient,
|
|
unique_user: TestUser,
|
|
database: AllRepositories,
|
|
):
|
|
user = database.users.get_one(unique_user.user_id)
|
|
user.can_manage = True
|
|
database.users.update(user.id, user)
|
|
|
|
payload = get_permissions_payload(str(uuid4()))
|
|
response = api_client.put(api_routes.groups_permissions, json=payload, headers=unique_user.token)
|
|
assert response.status_code == 404
|