Phillip Tarrant
23754ea239
Build the core user-facing experience with admin login (bcrypt + signed session cookies), profile switcher, workout day viewer with warmups and exercise cards, and HTMX-powered exercise browser with search/filter. - AuthService with bcrypt password verification and itsdangerous session tokens - Auth dependency redirects to /login (303) for unauthenticated requests - NavContextMiddleware injects admin/profiles/active_profile into all templates - Profile management (list, switch, edit) with cookie-based active profile - Workout day viewer shows warmups + exercises + per-user programming targets - Exercise browser with HTMX filter dropdowns (no page reloads) - Flash message partial for success/error feedback - 12 new tests (66 total passing) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
25 lines
794 B
Python
25 lines
794 B
Python
"""Tests for exercise browser routes."""
|
|
|
|
from fastapi.testclient import TestClient
|
|
|
|
|
|
class TestExerciseBrowser:
|
|
"""Tests for GET /exercises."""
|
|
|
|
def test_exercise_browser_requires_auth(self, client: TestClient) -> None:
|
|
"""GET /exercises should require admin login."""
|
|
response = client.get("/exercises", follow_redirects=False)
|
|
assert response.status_code in (401, 303)
|
|
|
|
|
|
class TestExerciseSearch:
|
|
"""Tests for HTMX exercise search."""
|
|
|
|
def test_exercise_search_requires_auth(self, client: TestClient) -> None:
|
|
"""GET /exercises/search should require admin login."""
|
|
response = client.get(
|
|
"/exercises/search?workout_day=Push",
|
|
follow_redirects=False,
|
|
)
|
|
assert response.status_code in (401, 303)
|