Kris
696f5f44ec
这一批提交包含： 1. 配置项敏感字段标记与测试用例修复 2. 路由绑定乐观锁支持与静态路径校验 3. 微信WOC插件能力适配与新增单元测试 4. 多个适配器的接口对齐与测试补全 5. 新增定时任务清理处理器与依赖注入容器测试 6. 错误码体系扩展与整合测试 7. 删除临时验证脚本与代码清理
113 lines
4.5 KiB
Python
113 lines
4.5 KiB
Python
"""Integration tests for channels capability_router endpoints.
|
||
|
||
覆盖能力查询域（CAP-01 列出全部渠道能力 / CAP-02 查询单渠道能力 /
|
||
CAP-03 能力画像矩阵）的鉴权矩阵与渠道类型校验。``ChannelType`` 为路径
|
||
参数（str 子类，无白名单），未注册插件的渠道类型返回 404。``/capabilities
|
||
/matrix`` 静态路径先于 ``/capabilities/{channel_type}`` 声明，避免 "matrix"
|
||
被捕获为 channel_type（规范 §6.5）。
|
||
"""
|
||
|
||
from __future__ import annotations
|
||
|
||
import httpx
|
||
import pytest
|
||
|
||
from .conftest import BASE_URL, DEFAULT_CHANNEL_TYPE
|
||
|
||
pytestmark = [pytest.mark.asyncio, pytest.mark.integration]
|
||
|
||
CAPABILITIES_URL = f"{BASE_URL}/capabilities"
|
||
|
||
|
||
# =============================================================================
|
||
# === Auth three-tier for GET /capabilities ===
|
||
# =============================================================================
|
||
|
||
|
||
async def test_list_capabilities_requires_auth(test_client: httpx.AsyncClient):
|
||
# Act
|
||
response = await test_client.get(CAPABILITIES_URL)
|
||
# Assert
|
||
assert response.status_code == 401
|
||
|
||
|
||
async def test_list_capabilities_requires_admin(test_client: httpx.AsyncClient, standard_user):
|
||
# Act
|
||
response = await test_client.get(CAPABILITIES_URL, headers=standard_user["headers"])
|
||
# Assert
|
||
assert response.status_code == 403
|
||
|
||
|
||
async def test_admin_can_list_capabilities(test_client: httpx.AsyncClient, admin_headers):
|
||
# Act
|
||
response = await test_client.get(CAPABILITIES_URL, headers=admin_headers)
|
||
# Assert
|
||
assert response.status_code == 200, response.text
|
||
|
||
payload = response.json()
|
||
assert payload["success"] is True
|
||
assert isinstance(payload["data"], dict)
|
||
|
||
|
||
# =============================================================================
|
||
# === GET /capabilities/matrix — CAP-03 capability matrix ===
|
||
# =============================================================================
|
||
|
||
|
||
async def test_list_capability_matrix_requires_auth(test_client: httpx.AsyncClient):
|
||
# Act
|
||
response = await test_client.get(f"{CAPABILITIES_URL}/matrix")
|
||
# Assert
|
||
assert response.status_code == 401
|
||
|
||
|
||
async def test_list_capability_matrix_requires_admin(test_client: httpx.AsyncClient, standard_user):
|
||
# Act
|
||
response = await test_client.get(f"{CAPABILITIES_URL}/matrix", headers=standard_user["headers"])
|
||
# Assert
|
||
assert response.status_code == 403
|
||
|
||
|
||
async def test_admin_can_list_capability_matrix(test_client: httpx.AsyncClient, admin_headers):
|
||
# Act
|
||
response = await test_client.get(f"{CAPABILITIES_URL}/matrix", headers=admin_headers)
|
||
# Assert
|
||
assert response.status_code == 200, response.text
|
||
|
||
payload = response.json()
|
||
assert payload["success"] is True
|
||
assert isinstance(payload["data"], dict)
|
||
|
||
|
||
async def test_matrix_static_path_not_captured_as_channel_type(test_client: httpx.AsyncClient, admin_headers):
|
||
# Act — /capabilities/matrix 是静态路径，必须先于 /capabilities/{channel_type}
|
||
# 声明，避免 "matrix" 被捕获为 channel_type。若路由顺序错误，此请求会走
|
||
# getCapability("matrix") 并返回 404（未注册插件），而非 matrix 端点的 200。
|
||
response = await test_client.get(f"{CAPABILITIES_URL}/matrix", headers=admin_headers)
|
||
# Assert — 命中 matrix 端点返回 200，证明静态路径未被动态参数捕获
|
||
assert response.status_code == 200, response.text
|
||
assert response.json()["success"] is True
|
||
|
||
|
||
# =============================================================================
|
||
# === GET /capabilities/{channel_type} ===
|
||
# =============================================================================
|
||
|
||
|
||
async def test_admin_can_get_capability_for_channel_type(test_client: httpx.AsyncClient, admin_headers):
|
||
# Act — DEFAULT_CHANNEL_TYPE 已注册则 200，未注册则 404
|
||
response = await test_client.get(f"{CAPABILITIES_URL}/{DEFAULT_CHANNEL_TYPE}", headers=admin_headers)
|
||
# Assert
|
||
assert response.status_code in (200, 404), response.text
|
||
|
||
if response.status_code == 200:
|
||
payload = response.json()
|
||
assert payload["success"] is True
|
||
|
||
|
||
async def test_get_capability_unregistered_channel_type(test_client: httpx.AsyncClient, admin_headers):
|
||
# Act — "foo" 是合法字符串但未注册插件
|
||
response = await test_client.get(f"{CAPABILITIES_URL}/foo", headers=admin_headers)
|
||
# Assert - channel_type 无白名单,任何字符串都合法,但未注册插件返回 404
|
||
assert response.status_code == 404, response.text
|