157 lines
5.3 KiB
Python
157 lines
5.3 KiB
Python
import unittest
|
|
|
|
from fastapi import HTTPException
|
|
from fastapi.testclient import TestClient
|
|
from sqlalchemy import create_engine
|
|
from sqlalchemy.orm import sessionmaker
|
|
|
|
from app.api.tenant_settings import get_audit_log_service, get_tenant_service, require_current_user
|
|
from app.db import Base
|
|
from app.main import app
|
|
from app.services.tenant_service import TenantService
|
|
|
|
|
|
def create_tenant_service_for_validation():
|
|
engine = create_engine("sqlite:///:memory:", future=True)
|
|
Base.metadata.create_all(engine)
|
|
session = sessionmaker(bind=engine, future=True)()
|
|
service = TenantService(session)
|
|
service.ensure_default_tenant()
|
|
return service
|
|
|
|
|
|
class StubAuditLogService:
|
|
def __init__(self):
|
|
self.events = []
|
|
|
|
def record_event(self, **kwargs):
|
|
self.events.append(kwargs)
|
|
return kwargs
|
|
|
|
|
|
class StubTenantService:
|
|
def get_current_settings(self, current_user):
|
|
if current_user["role"] != "admin":
|
|
raise HTTPException(status_code=403, detail="forbidden")
|
|
return {
|
|
"id": current_user["tenant_id"],
|
|
"name": "演示企业",
|
|
"code": "demo",
|
|
"status": "active",
|
|
"plan_name": "professional",
|
|
"max_users": 20,
|
|
"max_storage_mb": 10240,
|
|
"created_at": "2026-04-16T00:00:00+00:00",
|
|
"updated_at": "2026-04-16T00:00:00+00:00",
|
|
}
|
|
|
|
def update_current_settings(self, current_user, name, code, status_value):
|
|
if current_user["role"] != "admin":
|
|
raise HTTPException(status_code=403, detail="forbidden")
|
|
return {
|
|
"id": current_user["tenant_id"],
|
|
"name": name,
|
|
"code": code,
|
|
"status": status_value,
|
|
"plan_name": "professional",
|
|
"max_users": 20,
|
|
"max_storage_mb": 10240,
|
|
"created_at": "2026-04-16T00:00:00+00:00",
|
|
"updated_at": "2026-04-16T00:00:00+00:00",
|
|
}
|
|
|
|
|
|
class TenantSettingsApiTestCase(unittest.TestCase):
|
|
def setUp(self):
|
|
self.audit_log_service = StubAuditLogService()
|
|
app.dependency_overrides[get_tenant_service] = lambda: StubTenantService()
|
|
app.dependency_overrides[get_audit_log_service] = lambda: self.audit_log_service
|
|
self.client = TestClient(app)
|
|
|
|
def tearDown(self):
|
|
app.dependency_overrides.clear()
|
|
|
|
def test_admin_can_get_tenant_settings(self):
|
|
app.dependency_overrides[require_current_user] = lambda: {
|
|
"id": "user-admin",
|
|
"tenant_id": "tenant-demo-001",
|
|
"role": "admin",
|
|
}
|
|
|
|
response = self.client.get("/api/v1/tenant-settings/me")
|
|
|
|
self.assertEqual(response.status_code, 200)
|
|
self.assertEqual(response.json()["data"]["code"], "demo")
|
|
|
|
def test_admin_can_update_tenant_settings(self):
|
|
app.dependency_overrides[require_current_user] = lambda: {
|
|
"id": "user-admin",
|
|
"tenant_id": "tenant-demo-001",
|
|
"role": "admin",
|
|
}
|
|
|
|
response = self.client.put(
|
|
"/api/v1/tenant-settings/me",
|
|
data={
|
|
"name": "演示企业集团",
|
|
"code": "demo-group",
|
|
"status": "disabled",
|
|
},
|
|
)
|
|
|
|
self.assertEqual(response.status_code, 200)
|
|
body = response.json()
|
|
self.assertEqual(body["data"]["name"], "演示企业集团")
|
|
self.assertEqual(body["data"]["status"], "disabled")
|
|
self.assertEqual(self.audit_log_service.events[0]["action"], "update_tenant_settings")
|
|
self.assertEqual(
|
|
self.audit_log_service.events[0]["detail_json"],
|
|
{
|
|
"name": "演示企业集团",
|
|
"code": "demo-group",
|
|
"status": "disabled",
|
|
"plan_name": "professional",
|
|
"max_users": 20,
|
|
"max_storage_mb": 10240,
|
|
},
|
|
)
|
|
|
|
def test_rejects_blank_tenant_identity_fields(self):
|
|
service = create_tenant_service_for_validation()
|
|
|
|
with self.assertRaises(HTTPException) as name_context:
|
|
service.update_current_settings(
|
|
{"id": "user-admin", "tenant_id": "tenant-demo-001", "role": "admin"},
|
|
" ",
|
|
"demo",
|
|
"active",
|
|
)
|
|
self.assertEqual(name_context.exception.status_code, 400)
|
|
self.assertEqual(name_context.exception.detail, "tenant name is required")
|
|
|
|
with self.assertRaises(HTTPException) as code_context:
|
|
service.update_current_settings(
|
|
{"id": "user-admin", "tenant_id": "tenant-demo-001", "role": "admin"},
|
|
"演示企业",
|
|
" ",
|
|
"active",
|
|
)
|
|
self.assertEqual(code_context.exception.status_code, 400)
|
|
self.assertEqual(code_context.exception.detail, "tenant code is required")
|
|
|
|
def test_member_cannot_access_tenant_settings(self):
|
|
app.dependency_overrides[require_current_user] = lambda: {
|
|
"id": "user-member",
|
|
"tenant_id": "tenant-demo-001",
|
|
"role": "member",
|
|
}
|
|
|
|
response = self.client.get("/api/v1/tenant-settings/me")
|
|
|
|
self.assertEqual(response.status_code, 403)
|
|
self.assertEqual(response.json()["message"], "forbidden")
|
|
|
|
|
|
if __name__ == "__main__":
|
|
unittest.main()
|