Портал технической службы: наряды и чек-листы, задачи, отказы и неисправности, анализ надёжности, карты, склады, приложение для Android
This commit is contained in:
darkorion
@@ -0,0 +1,116 @@
|
||||
"""Демо-режим персональный: в демо работает только тот, кто его включил (или кого включил администратор)."""
|
||||
import os
|
||||
import sqlite3
|
||||
import tempfile
|
||||
from datetime import datetime, timedelta
|
||||
from pathlib import Path
|
||||
|
||||
os.environ.setdefault("DATABASE_URL", os.environ.get("TEST_DATABASE_URL") or "sqlite:///" + os.path.join(tempfile.mkdtemp(), "dm.db").replace("\\", "/"))
|
||||
os.environ.setdefault("SCHEDULER_INTERVAL", "3600")
|
||||
os.environ.setdefault("SECRET_KEY", "test-secret-key-for-pytest-0123456789abcdef")
|
||||
os.environ.setdefault("DATA_DIR", tempfile.mkdtemp())
|
||||
|
||||
from fastapi.testclient import TestClient # noqa: E402
|
||||
|
||||
from app import config, db as dbm, demo, mode # noqa: E402
|
||||
from app.main import app # noqa: E402
|
||||
|
||||
|
||||
def test_demo_mode_personal():
|
||||
real_path = os.environ["DATABASE_URL"].replace("sqlite:///", "")
|
||||
data_dir = Path(config.DATA_DIR)
|
||||
with TestClient(app) as c:
|
||||
H = lambda t: {"Authorization": "Bearer " + t}
|
||||
tk = c.post("/api/v1/auth/login", json={"username": "admin", "password": "admin"}).json()
|
||||
adm = H(tk["access_token"])
|
||||
rt_user = c.post("/api/v1/users", headers=adm, json={"username": "realtech_dm", "password": "Pass1234567"}).json()
|
||||
c.post("/api/v1/equipment", headers=adm, json={"name": "БОЕВОЙ-СТАНОК"})
|
||||
rt = H(c.post("/api/v1/auth/login", json={"username": "realtech_dm", "password": "Pass1234567"}).json()["access_token"])
|
||||
|
||||
def real_snapshot():
|
||||
con = sqlite3.connect(real_path)
|
||||
try:
|
||||
return {t: con.execute(f"select count(*) from {t}").fetchone()[0] for t in ("users", "equipment", "orders", "checklists", "positions")}
|
||||
finally:
|
||||
con.close()
|
||||
real_names = sorted(e["name"] for e in c.get("/api/v1/equipment", headers=adm).json())
|
||||
before = real_snapshot()
|
||||
|
||||
assert c.post("/api/v1/demo/enable", headers=rt, json={"confirm": True}).status_code == 403
|
||||
assert c.post("/api/v1/demo/enable", headers=adm, json={"confirm": False}).status_code == 422
|
||||
assert c.get("/api/v1/demo/status").json() == {"active": False}
|
||||
|
||||
new = c.post("/api/v1/demo/enable", headers=adm, json={"confirm": True})
|
||||
assert new.status_code == 200, new.text
|
||||
dadm = H(new.json()["access_token"])
|
||||
assert c.get("/api/v1/demo/status").json() == {"active": True}
|
||||
me = c.get("/api/v1/me", headers=dadm).json()
|
||||
assert me["demo_mode"] and me["is_admin"] and me["username"] == "admin"
|
||||
# прежний боевой токен админа больше не годится — обновление выдаёт демо-сессию
|
||||
assert c.get("/api/v1/me", headers=adm).status_code == 401
|
||||
ref = c.post("/api/v1/auth/refresh", json={"refresh_token": tk["refresh_token"]}).json()
|
||||
assert c.get("/api/v1/me", headers=H(ref["access_token"])).json()["demo_mode"] is True
|
||||
# ГЛАВНОЕ: остальные работают в боевой БД, как будто демо нет
|
||||
assert c.get("/api/v1/me", headers=rt).json()["demo_mode"] is False
|
||||
assert "БОЕВОЙ-СТАНОК" in [e["name"] for e in c.get("/api/v1/equipment", headers=rt).json()]
|
||||
assert c.post("/api/v1/auth/login", json={"username": "realtech_dm", "password": "Pass1234567"}).status_code == 200
|
||||
names = [e["name"] for e in c.get("/api/v1/equipment", headers=dadm).json()]
|
||||
assert len(names) >= 8 and "БОЕВОЙ-СТАНОК" not in names
|
||||
info = c.get("/api/v1/demo", headers=dadm).json()
|
||||
assert info["active"] and info["in_demo"] and any(a["role"] == "Модератор" for a in info["accounts"])
|
||||
assert {u["username"]: u["in_demo"] for u in info["users"]}["realtech_dm"] is False
|
||||
# демо-учётная запись входит по паролю demo1234, обновляет сессию
|
||||
tech = [a for a in info["accounts"] if a["role"] == "Техник" and a["on_shift"]][0]
|
||||
dl = c.post("/api/v1/auth/login", json={"username": tech["username"], "password": info["password"]})
|
||||
assert dl.status_code == 200 and c.get("/api/v1/me", headers=H(dl.json()["access_token"])).json()["demo_mode"]
|
||||
dref = c.post("/api/v1/auth/refresh", json={"refresh_token": dl.json()["refresh_token"]})
|
||||
assert dref.status_code == 200 and c.get("/api/v1/me", headers=H(dref.json()["access_token"])).json()["username"] == tech["username"]
|
||||
imp = c.post("/api/v1/demo/impersonate", headers=dadm, json={"user_id": tech["id"]}).json()
|
||||
assert c.get("/api/v1/me", headers=H(imp["access_token"])).json()["username"] == tech["username"]
|
||||
assert c.post("/api/v1/demo/destroy", headers=H(imp["access_token"])).status_code == 403
|
||||
now = datetime.now()
|
||||
rep = c.get("/api/v1/reports/completed-orders", headers=dadm, params={"from": (now - timedelta(days=15)).isoformat(), "to": (now + timedelta(days=1)).isoformat()}).json()
|
||||
assert rep["total"] > 20
|
||||
c.post("/api/v1/equipment", headers=dadm, json={"name": "демо-правка"})
|
||||
assert c.post("/api/v1/backups", headers=dadm, json={}).status_code == 409 # копия — только боевой БД
|
||||
assert real_snapshot() == before # боевая БД не тронута демо-правками
|
||||
|
||||
# администратор включает демо другому пользователю и выключает
|
||||
assert c.post(f"/api/v1/demo/users/{rt_user['id']}", headers=rt, json={"on": True}).status_code == 403
|
||||
assert c.post(f"/api/v1/demo/users/{rt_user['id']}", headers=dadm, json={"on": True}).json()["in_demo"] is True
|
||||
assert c.get("/api/v1/me", headers=rt).status_code == 401
|
||||
rl = c.post("/api/v1/auth/login", json={"username": "realtech_dm", "password": "Pass1234567"}).json()
|
||||
rtd = H(rl["access_token"])
|
||||
assert c.get("/api/v1/me", headers=rtd).json()["demo_mode"] is True
|
||||
assert "БОЕВОЙ-СТАНОК" not in [e["name"] for e in c.get("/api/v1/equipment", headers=rtd).json()]
|
||||
assert c.post(f"/api/v1/demo/users/{rt_user['id']}", headers=dadm, json={"on": False}).json()["in_demo"] is False
|
||||
assert c.get("/api/v1/me", headers=rtd).status_code == 401
|
||||
back = c.post("/api/v1/auth/refresh", json={"refresh_token": rl["refresh_token"]}).json()
|
||||
assert c.get("/api/v1/me", headers=H(back["access_token"])).json()["demo_mode"] is False
|
||||
|
||||
# перезапуск сервера во время демо: демо-БД подключается снова
|
||||
dbm.set_demo_engine(None).dispose() # как при перезапуске: соединения закрыты
|
||||
mode.State.active = False
|
||||
demo.activate_on_startup()
|
||||
assert mode.State.active and dbm.demo_engine is not None
|
||||
assert c.get("/api/v1/me", headers=dadm).status_code == 200
|
||||
|
||||
# пересоздание: старые демо-токены недействительны, refresh выдаёт новые
|
||||
assert c.post("/api/v1/demo/reset", headers=dadm).status_code == 200
|
||||
assert c.get("/api/v1/me", headers=dadm).status_code == 401
|
||||
ref = c.post("/api/v1/auth/refresh", json={"refresh_token": new.json()["refresh_token"]}).json()
|
||||
dadm = H(ref["access_token"])
|
||||
assert "демо-правка" not in [e["name"] for e in c.get("/api/v1/equipment", headers=dadm).json()]
|
||||
assert len(list(data_dir.glob("demo_*.db*")) + list(data_dir.glob("demo_photos_*"))) == 2
|
||||
|
||||
# сам выходит из демо, затем удаляет демо-данные
|
||||
off = c.post("/api/v1/demo/leave", headers=dadm)
|
||||
assert off.status_code == 200, off.text
|
||||
backh = H(off.json()["access_token"])
|
||||
assert c.get("/api/v1/me", headers=backh).json()["demo_mode"] is False
|
||||
assert sorted(e["name"] for e in c.get("/api/v1/equipment", headers=backh).json()) == real_names
|
||||
assert c.post("/api/v1/demo/destroy", headers=backh).status_code == 200
|
||||
assert c.get("/api/v1/demo/status").json() == {"active": False}
|
||||
assert list(data_dir.glob("demo_*.db*")) + list(data_dir.glob("demo_photos_*")) == []
|
||||
assert c.post("/api/v1/auth/login", json={"username": tech["username"], "password": "demo1234"}).status_code == 401
|
||||
assert real_snapshot()["equipment"] == before["equipment"]
|
||||
Reference in New Issue
Block a user