Phillip Tarrant
7b535bef6e
The auth dependency raises NotAuthenticatedError (not HTTPException), and the exception handler returns a 302 redirect. Updated the unit test to expect NotAuthenticatedError, and all route auth tests to accept 302 alongside 401/303.
58 lines
1.9 KiB
Python
58 lines
1.9 KiB
Python
"""Tests for the auth dependency (require_admin)."""
|
|
|
|
from unittest.mock import MagicMock
|
|
|
|
import pytest
|
|
|
|
from app.utils.auth import (
|
|
NotAuthenticatedError,
|
|
get_current_admin_user,
|
|
get_active_profile_id,
|
|
)
|
|
|
|
|
|
class TestAuthDependency:
|
|
"""Tests for the require_admin dependency."""
|
|
|
|
def test_redirects_when_no_session_cookie(self) -> None:
|
|
"""Should raise NotAuthenticatedError when no session cookie is present."""
|
|
request = MagicMock()
|
|
request.cookies = {}
|
|
|
|
with pytest.raises(NotAuthenticatedError):
|
|
get_current_admin_user(request=request, session=MagicMock())
|
|
|
|
def test_redirects_when_invalid_token(self) -> None:
|
|
"""Should raise NotAuthenticatedError when session cookie has invalid token."""
|
|
request = MagicMock()
|
|
request.cookies = {"session": "invalid-token"}
|
|
request.app.state.secret_key = "test-secret"
|
|
|
|
mock_session = MagicMock()
|
|
mock_session.get.return_value = None
|
|
|
|
with pytest.raises(NotAuthenticatedError):
|
|
get_current_admin_user(request=request, session=mock_session)
|
|
|
|
|
|
class TestGetActiveProfileId:
|
|
"""Tests for the get_active_profile_id dependency."""
|
|
|
|
def test_returns_profile_id_from_cookie(self) -> None:
|
|
"""Should return the integer profile ID from cookie."""
|
|
request = MagicMock()
|
|
request.cookies = {"active_profile_id": "5"}
|
|
assert get_active_profile_id(request) == 5
|
|
|
|
def test_returns_none_when_no_cookie(self) -> None:
|
|
"""Should return None when no active_profile_id cookie is set."""
|
|
request = MagicMock()
|
|
request.cookies = {}
|
|
assert get_active_profile_id(request) is None
|
|
|
|
def test_returns_none_for_non_numeric(self) -> None:
|
|
"""Should return None for non-numeric cookie values."""
|
|
request = MagicMock()
|
|
request.cookies = {"active_profile_id": "abc"}
|
|
assert get_active_profile_id(request) is None
|