mirror of
https://github.com/mealie-recipes/mealie.git
synced 2025-05-24 01:12:54 -04:00
ea7c4771ee
* add default assets for user profile * add recipe avatar * change user_id to UUID * add profile image upload * setup image cache keys * cleanup tests and add image tests * purge user data on delete * new user repository tests * add user_id validator for int -> UUID conversion * delete depreciated route * force set content type * refactor tests to use temp directory * validate parent exists before createing * set user_id to correct type * update instruction id * reset primary key on migration
112 lines
3.7 KiB
Python
112 lines
3.7 KiB
Python
import json
|
|
|
|
from fastapi.testclient import TestClient
|
|
|
|
from tests.utils.app_routes import AppRoutes
|
|
from tests.utils.fixture_schemas import TestUser
|
|
|
|
|
|
def test_init_superuser(api_client: TestClient, api_routes: AppRoutes, admin_user: TestUser):
|
|
response = api_client.get(api_routes.users_id(admin_user.user_id), headers=admin_user.token)
|
|
assert response.status_code == 200
|
|
|
|
admin_data = response.json()
|
|
|
|
assert admin_data["id"] == admin_user.user_id
|
|
assert admin_data["groupId"] == admin_user.group_id
|
|
|
|
assert admin_data["fullName"] == "Change Me"
|
|
assert admin_data["email"] == "changeme@email.com"
|
|
|
|
|
|
def test_create_user(api_client: TestClient, api_routes: AppRoutes, admin_token):
|
|
create_data = {
|
|
"fullName": "My New User",
|
|
"email": "newuser@email.com",
|
|
"password": "MyStrongPassword",
|
|
"group": "Home",
|
|
"admin": False,
|
|
"tokens": [],
|
|
}
|
|
|
|
response = api_client.post(api_routes.users, json=create_data, headers=admin_token)
|
|
|
|
assert response.status_code == 201
|
|
|
|
user_data = response.json()
|
|
|
|
assert user_data["fullName"] == create_data["fullName"]
|
|
assert user_data["email"] == create_data["email"]
|
|
assert user_data["group"] == create_data["group"]
|
|
assert user_data["admin"] == create_data["admin"]
|
|
|
|
|
|
def test_create_user_as_non_admin(api_client: TestClient, api_routes: AppRoutes, user_token):
|
|
create_data = {
|
|
"fullName": "My New User",
|
|
"email": "newuser@email.com",
|
|
"password": "MyStrongPassword",
|
|
"group": "Home",
|
|
"admin": False,
|
|
"tokens": [],
|
|
}
|
|
|
|
response = api_client.post(api_routes.users, json=create_data, headers=user_token)
|
|
|
|
assert response.status_code == 403
|
|
|
|
|
|
def test_update_user(api_client: TestClient, api_routes: AppRoutes, admin_user: TestUser):
|
|
update_data = {
|
|
"id": admin_user.user_id,
|
|
"fullName": "Updated Name",
|
|
"email": "changeme@email.com",
|
|
"group": "Home",
|
|
"admin": True,
|
|
}
|
|
response = api_client.put(api_routes.users_id(admin_user.user_id), headers=admin_user.token, json=update_data)
|
|
|
|
assert response.status_code == 200
|
|
assert json.loads(response.text).get("access_token")
|
|
|
|
|
|
def test_update_other_user_as_not_admin(
|
|
api_client: TestClient, api_routes: AppRoutes, unique_user: TestUser, g2_user: TestUser
|
|
):
|
|
update_data = {
|
|
"id": unique_user.user_id,
|
|
"fullName": "Updated Name",
|
|
"email": "changeme@email.com",
|
|
"group": "Home",
|
|
"admin": True,
|
|
}
|
|
response = api_client.put(api_routes.users_id(g2_user.user_id), headers=unique_user.token, json=update_data)
|
|
|
|
assert response.status_code == 403
|
|
|
|
|
|
def test_self_demote_admin(api_client: TestClient, api_routes: AppRoutes, admin_user: TestUser):
|
|
update_data = {"fullName": "Updated Name", "email": "changeme@email.com", "group": "Home", "admin": False}
|
|
response = api_client.put(api_routes.users_id(admin_user.user_id), headers=admin_user.token, json=update_data)
|
|
|
|
assert response.status_code == 403
|
|
|
|
|
|
def test_self_promote_admin(api_client: TestClient, api_routes: AppRoutes, unique_user: TestUser):
|
|
update_data = {
|
|
"id": unique_user.user_id,
|
|
"fullName": "Updated Name",
|
|
"email": "user@email.com",
|
|
"group": "Home",
|
|
"admin": True,
|
|
}
|
|
response = api_client.put(api_routes.users_id(unique_user.user_id), headers=unique_user.token, json=update_data)
|
|
|
|
assert response.status_code == 403
|
|
|
|
|
|
def test_delete_user(api_client: TestClient, api_routes: AppRoutes, admin_token, unique_user: TestUser):
|
|
response = api_client.delete(api_routes.users_id(unique_user.user_id), headers=admin_token)
|
|
|
|
assert response.status_code == 200
|