mirror of
https://github.com/langbot-app/LangBot.git
synced 2026-09-26 19:36:35 +08:00
RockChinQ
61 lines
2.7 KiB
Python
61 lines
2.7 KiB
Python
import importlib
|
|
import importlib.util
|
|
from types import SimpleNamespace as NS
|
|
from unittest.mock import AsyncMock
|
|
|
|
import pytest
|
|
import quart
|
|
|
|
from langbot.pkg.api.http.context import RequestContext, WorkspaceContext, PrincipalContext, PrincipalType
|
|
from langbot.pkg.api.http.authz import permissions_for_role
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_manual_routes_user_token_permissions_and_strict_request():
|
|
path = 'langbot.pkg.api.http.controller.groups.pipelines.migration'
|
|
assert importlib.util.find_spec(path), 'manual migration routes missing'
|
|
cls = importlib.import_module(path).PipelineMigrationRouterGroup
|
|
from langbot.pkg.api.http.service.pipeline_migration import MigrationError
|
|
|
|
app = quart.Quart(__name__)
|
|
router = cls(NS(persistence_mgr=NS()), app)
|
|
router._authenticate_support_admin = AsyncMock(return_value=None)
|
|
router._authenticate_account = AsyncMock(return_value=(NS(uuid='account'), 'test@example.invalid'))
|
|
viewer = RequestContext(
|
|
'instance',
|
|
1,
|
|
'request',
|
|
'user_token',
|
|
PrincipalContext(PrincipalType.ACCOUNT, account_uuid='account'),
|
|
WorkspaceContext('workspace', 'membership', 'viewer', permissions_for_role('viewer')),
|
|
)
|
|
router._resolve_account_context = AsyncMock(return_value=viewer)
|
|
await router.initialize()
|
|
router.service = NS(
|
|
preview=AsyncMock(return_value={'items': [], 'total': 0}), execute=AsyncMock(return_value={'task_id': 1})
|
|
)
|
|
client = app.test_client()
|
|
base = '/api/v1/pipelines/_/migration'
|
|
assert (await client.get(base + '/preview')).status_code == 401
|
|
assert (await client.get(base + '/preview', headers={'X-API-Key': 'synthetic'})).status_code == 401
|
|
headers = {'Authorization': 'Bearer synthetic'}
|
|
assert (await client.get(base + '/preview', headers=headers)).status_code == 200
|
|
assert (await client.post(base + '/execute', headers=headers, json={})).status_code == 403
|
|
router.service.execute.assert_not_awaited()
|
|
manager = RequestContext(
|
|
'instance',
|
|
1,
|
|
'request',
|
|
'user_token',
|
|
viewer.principal,
|
|
WorkspaceContext('workspace', 'membership', 'developer', permissions_for_role('developer')),
|
|
)
|
|
router._resolve_account_context.return_value = manager
|
|
router.service.execute.side_effect = MigrationError('confirmation_required', 400)
|
|
response = await client.post(base + '/execute', headers=headers, json={'confirmed': 'true'})
|
|
assert response.status_code == 400
|
|
assert 'confirmation_required' in await response.get_data(as_text=True)
|
|
router.service.execute.side_effect = None
|
|
response = await client.post(base + '/execute', headers=headers, json={'confirmed': True, 'items': []})
|
|
assert (await response.get_json())['data']['task_id'] == 1
|