DonaldFang 方士碩
f810ddc2ea
Features: - FastAPI backend with JWT authentication - MySQL database with SQLAlchemy ORM - KPI workflow: draft → pending → approved → evaluation → completed - Ollama LLM API integration for AI features - Gitea API integration for version control - Complete API endpoints for KPI, dashboard, notifications Tables: KPI_D_* prefix naming convention 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
98 lines
2.7 KiB
Python
98 lines
2.7 KiB
Python
"""
|
|
認證 API 測試
|
|
"""
|
|
import pytest
|
|
from fastapi.testclient import TestClient
|
|
from sqlalchemy.orm import Session
|
|
|
|
from app.core.security import get_password_hash
|
|
from tests.factories import EmployeeFactory
|
|
|
|
|
|
class TestAuthAPI:
|
|
"""認證 API 測試"""
|
|
|
|
def test_login_success(self, client: TestClient, db: Session):
|
|
"""測試：登入成功"""
|
|
# Arrange
|
|
employee = EmployeeFactory.create(db)
|
|
|
|
# Act
|
|
response = client.post(
|
|
"/api/auth/login",
|
|
json={
|
|
"employee_no": employee.employee_no,
|
|
"password": "password123",
|
|
},
|
|
)
|
|
|
|
# Assert
|
|
assert response.status_code == 200
|
|
data = response.json()
|
|
assert "access_token" in data
|
|
assert "refresh_token" in data
|
|
assert data["token_type"] == "bearer"
|
|
|
|
def test_login_wrong_password(self, client: TestClient, db: Session):
|
|
"""測試：密碼錯誤"""
|
|
# Arrange
|
|
employee = EmployeeFactory.create(db)
|
|
|
|
# Act
|
|
response = client.post(
|
|
"/api/auth/login",
|
|
json={
|
|
"employee_no": employee.employee_no,
|
|
"password": "wrong_password",
|
|
},
|
|
)
|
|
|
|
# Assert
|
|
assert response.status_code == 401
|
|
|
|
def test_login_user_not_found(self, client: TestClient):
|
|
"""測試：使用者不存在"""
|
|
response = client.post(
|
|
"/api/auth/login",
|
|
json={
|
|
"employee_no": "NOTEXIST",
|
|
"password": "password123",
|
|
},
|
|
)
|
|
|
|
assert response.status_code == 401
|
|
|
|
def test_login_inactive_user(self, client: TestClient, db: Session):
|
|
"""測試：帳號停用"""
|
|
# Arrange
|
|
employee = EmployeeFactory.create(db, status="inactive")
|
|
|
|
# Act
|
|
response = client.post(
|
|
"/api/auth/login",
|
|
json={
|
|
"employee_no": employee.employee_no,
|
|
"password": "password123",
|
|
},
|
|
)
|
|
|
|
# Assert
|
|
assert response.status_code == 401
|
|
|
|
def test_get_me_success(
|
|
self, client: TestClient, auth_headers: dict, test_employee
|
|
):
|
|
"""測試：取得當前使用者"""
|
|
response = client.get("/api/auth/me", headers=auth_headers)
|
|
|
|
assert response.status_code == 200
|
|
data = response.json()
|
|
assert data["id"] == test_employee.id
|
|
assert data["employee_no"] == test_employee.employee_no
|
|
|
|
def test_get_me_unauthorized(self, client: TestClient):
|
|
"""測試：未認證"""
|
|
response = client.get("/api/auth/me")
|
|
|
|
assert response.status_code == 403
|