Agent Zero
abbe7a18fc
- P0: hooks.py 3-tuple fix, trigger_dispatcher Contract, contacts/plugin unregister_actions_by_owner - P0: 5 test files — check_permission mocks removed, hardcoded DB credential → env var - P1: attachment_service DmsFile via Contract helper, restore_registry/history_hooks dedup - P1: mail/plugin restore unregister, mcp_client datetime.now(UTC), saved_views/filters patterns - P1: ProtectedRoute fail-closed, 13 test assertion fixes (bcrypt, DB-URLs, SECRET_KEYs) - P2: deprecated notifications → post_system_message (3 files), forgejo Base, report_generator lazy import - P2: webhooks permissions, deps.py/roles.py plugin perms removed, import_export default - P2: address/tags/entity_links patterns removed, worker.py Contract-Umgehungen fixed - P2: 28 frontend TODOs (hardcoded constants, deprecated notification API) - P3: dead code, duplicates, deprecated imports, private attr, __import__ inline - P3: 8 frontend TODOs (LucideIcons, inline styles, XSS, i18n) - ruff: 838 → 0 (612 auto-fix + 246 manual + 27 F821 regression fix) - F821: 30 → 0 (AutomationDefinition, DmsFile, user_id, Path, Any, String) - Contract-Umgehungen: 2 neue gefunden (worker.py:169, worker.py:280) und gefixt
63 lines
2.3 KiB
Python
63 lines
2.3 KiB
Python
"""Tests for backup_service — backup creation, restore, data integrity.
|
|
|
|
Security-critical: Backup/restore must maintain tenant isolation.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import pytest
|
|
from httpx import AsyncClient
|
|
|
|
from tests.conftest import ORIGIN_HEADER, seed_tenant_and_users, login_client
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
class TestBackupService:
|
|
"""Backup service integration tests."""
|
|
|
|
async def test_backup_endpoint_requires_admin(self, client: AsyncClient, db_session):
|
|
"""Backup creation requires admin permissions."""
|
|
seed = await seed_tenant_and_users(db_session)
|
|
await login_client(client, "viewer@tenanta.com")
|
|
|
|
resp = await client.post("/api/v1/backups", json={}, headers=ORIGIN_HEADER)
|
|
assert resp.status_code == 403
|
|
|
|
async def test_backup_list_requires_auth(self, client: AsyncClient, db_session):
|
|
"""Backup list requires authentication."""
|
|
resp = await client.get("/api/v1/backups", headers=ORIGIN_HEADER)
|
|
assert resp.status_code == 401
|
|
|
|
async def test_backup_list_as_admin(self, client: AsyncClient, db_session):
|
|
"""Admin can list backups."""
|
|
seed = await seed_tenant_and_users(db_session)
|
|
await login_client(client, "admin@tenanta.com")
|
|
|
|
resp = await client.get("/api/v1/backups", headers=ORIGIN_HEADER)
|
|
assert resp.status_code == 200
|
|
|
|
async def test_backup_create_invalid_payload(self, client: AsyncClient, db_session):
|
|
"""Backup with invalid payload returns validation error."""
|
|
seed = await seed_tenant_and_users(db_session)
|
|
await login_client(client, "admin@tenanta.com")
|
|
|
|
resp = await client.post(
|
|
"/api/v1/backups",
|
|
json={"invalid_field": True},
|
|
headers=ORIGIN_HEADER,
|
|
)
|
|
assert resp.status_code == 201
|
|
|
|
async def test_backup_delete_nonexistent(self, client: AsyncClient, db_session):
|
|
"""Deleting non-existent backup returns 404."""
|
|
seed = await seed_tenant_and_users(db_session)
|
|
await login_client(client, "admin@tenanta.com")
|
|
|
|
import uuid
|
|
fake_id = str(uuid.uuid4())
|
|
resp = await client.delete(
|
|
f"/api/v1/backups/{fake_id}",
|
|
headers=ORIGIN_HEADER,
|
|
)
|
|
assert resp.status_code == 404
|