classquiz-ai/classquiz/tests/test_server.py

import uuid

import pytest
from redis import Redis
from classquiz.db import database, models
from classquiz.config import settings
from classquiz.tests import test_user_email, test_user_password
from classquiz.tests import test_client, example_quiz, ValueStorage


@pytest.fixture(scope="module")
def start_db():
    if not database.is_connected:
        database.connect()


class TestUsers:
    @pytest.mark.asyncio
    async def test_create_test_user(self, test_client):
        resp = test_client.post(
            "/api/v1/users/create",
            json={"email": test_user_email, "password": test_user_password, "username": "mawoka"},
        )
        assert resp.status_code == 200
        assert resp.json()["email"] == test_user_email
        resp = test_client.post(
            "/api/v1/users/create",
            json={"email": test_user_email, "password": test_user_password, "username": "mawoka"},
        )
        assert resp.status_code == 409
        resp = test_client.post(
            "/api/v1/users/create",
            json={"email": "doesntexist@hidsadawadsdaads.ghsxd", "password": test_user_password, "username": "dieter"},
        )
        assert resp.status_code == 400

        resp = test_client.post(
            "/api/v1/users/create",
            json={
                "email": "doesntexist@hidsadawadsdaads.ghsxd",
                "password": test_user_password,
                "username": "12345678978978978978945632145678",
            },
        )
        assert resp.status_code == 400

    @pytest.mark.asyncio
    async def test_verify_email(self, test_client):
        resp = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": test_user_password}
        )
        assert resp.status_code == 401
        user = await models.User.objects.filter(email=test_user_email).get()
        assert (test_client.get("/api/v1/users/verify/dasadsasdadsasdsaddassad")).status_code == 404

        test_client.get(f"/api/v1/users/verify/{user.verify_key}")
        resp = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": test_user_password}
        )
        assert resp.status_code == 200

    @pytest.mark.asyncio
    async def test_check(self, test_client):
        resp = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": test_user_password}
        )
        token = resp.json()["access_token"]
        resp = test_client.get("/api/v1/users/check", cookies={"access_token": f"Bearer {token}"})
        assert resp.status_code == 200
        resp = test_client.get("/api/v1/users/check", cookies={"access_token": "Bearer dasasdasddasadsasdadssadsd"})
        assert resp.status_code == 401

    @pytest.mark.asyncio
    async def test_me(self, test_client):
        resp = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": test_user_password}
        )
        token = resp.json()["access_token"]
        resp = test_client.get("/api/v1/users/me", cookies={"access_token": f"Bearer {token}"})
        data = resp.json()
        assert resp.status_code == 200
        assert data["verified"] is True
        assert data["email"] == test_user_email
        assert data["username"] == "mawoka"

    @pytest.mark.asyncio
    async def test_rememberme(self, test_client):
        resp = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": test_user_password}
        )
        rememberme_cookie = resp.cookies["rememberme_token"]
        resp = test_client.get("/api/v1/users/token/rememberme", cookies={"rememberme_token": rememberme_cookie})
        assert resp.cookies["access_token"] is not None
        assert resp.status_code == 200
        resp = test_client.get(
            "/api/v1/users/token/rememberme", cookies={"rememberme_token": "dsahgvjadsvsahgxddsvhgdsvhg"}
        )
        assert resp.status_code == 401

    @pytest.mark.asyncio
    async def test_logout(self, test_client):
        resp = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": test_user_password}
        )
        rememberme_cookie = resp.cookies["rememberme_token"]
        access_token = resp.cookies["access_token"]
        resp = test_client.get("/api/v1/users/me", cookies={"access_token": access_token})
        assert resp.status_code == 200
        resp = test_client.get(
            "/api/v1/users/logout", cookies={"rememberme_cookie": rememberme_cookie}, allow_redirects=False
        )
        assert resp.status_code == 302
        resp = test_client.get("/api/v1/users/me", cookies={"rememberme_cookie": rememberme_cookie})
        assert resp.status_code == 401

    @pytest.mark.asyncio
    async def test_password_update(self, test_client):
        resp = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": test_user_password}
        )
        token = resp.json()["access_token"]
        resp = test_client.put(
            "/api/v1/users/password/update",
            json={"new_password": "new_password", "old_password": test_user_password},
            cookies={"access_token": f"Bearer {token}"},
        )
        assert resp.status_code == 200
        resp = test_client.put(
            "/api/v1/users/password/update",
            json={"new_password": "asdsdadsasdaasd", "old_password": "asdasdsadadsasdsadasdasd"},
            cookies={"access_token": f"Bearer {token}"},
        )
        assert resp.status_code == 400
        resp = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": "new_password"}
        )
        assert resp.status_code == 200
        resp = test_client.put(
            "/api/v1/users/password/update",
            json={"new_password": test_user_password, "old_password": "new_password"},
            cookies={"access_token": f"Bearer {token}"},
        )
        assert resp.status_code == 200
        resp1 = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": test_user_password}
        )
        rememberme_cookie = resp1.cookies["rememberme_token"]
        response = test_client.get("/api/v1/users/me", cookies={"rememberme_cookie": rememberme_cookie})
        assert response.status_code == 200

    @pytest.mark.asyncio
    async def test_get_session(self, test_client):
        resp = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": test_user_password}
        )
        token = resp.cookies["access_token"]
        resp = test_client.get("/api/v1/users/session", cookies={"access_token": token})
        assert resp.status_code == 200
        assert resp.json()["ip_address"] == "testclient"

    @pytest.mark.asyncio
    async def test_delete_session(self, test_client):
        resp = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": test_user_password}
        )
        token = resp.cookies["access_token"]
        resp = test_client.get("/api/v1/users/session", cookies={"access_token": token})
        session_id = resp.json()["id"]
        resp = test_client.delete("/api/v1/users/sessions/" + str(session_id), cookies={"access_token": token})
        assert resp.status_code == 200
        resp = test_client.delete("/api/v1/users/sessions/asdsadasdasdsad", cookies={"access_token": token})
        assert resp.status_code == 400

    @pytest.mark.asyncio
    async def test_list_sessions(self, test_client):
        resp = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": test_user_password}
        )
        token = resp.cookies["access_token"]
        resp = test_client.get("/api/v1/users/sessions/list", cookies={"access_token": token})
        assert resp.status_code == 200
        assert len(resp.json()) >= 1

    @pytest.mark.asyncio
    async def test_forgotten_password(self, test_client):
        resp = test_client.post("/api/v1/users/forgot-password", json={"email": test_user_email})
        assert resp.status_code == 200
        resp = test_client.post("/api/v1/users/forgot-password", json={"email": "ddassad@dsa.ads"})
        assert resp.status_code == 404

    @pytest.mark.asyncio
    async def test_reset_password_with_token(self, test_client):
        resp = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": test_user_password}
        )
        token = resp.cookies["access_token"]
        me = test_client.get("/api/v1/users/me", cookies={"access_token": token}).json()
        redis = Redis().from_url(settings().redis)
        redis.set("reset_passwd:_1token_", str(me["id"]))
        redis.set("reset_passwd:_2token_", str(uuid.uuid4()))
        # test wtith wrong token
        resp = test_client.post(
            "/api/v1/users/reset-password", json={"token": "doesnt_exist", "password": "new_password"}
        )
        assert resp.status_code == 400
        resp = test_client.post("/api/v1/users/reset-password", json={"token": "_2token_", "password": "new_password"})
        assert resp.status_code == 400
        resp = test_client.post("/api/v1/users/reset-password", json={"token": "_1token_", "password": "new_password"})
        assert resp.status_code == 200
        resp = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": "new_password"}
        )
        token = resp.cookies["access_token"]
        test_client.put(
            "/api/v1/users/password/update",
            json={"new_password": test_user_password, "old_password": "new_password"},
            cookies={"access_token": token},
        )
        redis.flushdb()

    @pytest.mark.asyncio
    async def test_signout_everywhere(self, test_client):
        resp = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": test_user_password}
        )
        token = resp.cookies["access_token"]
        resp = test_client.delete("/api/v1/users/signout-everywhere", cookies={"access_token": token})
        assert resp.status_code == 200


class TestUtils:
    @pytest.mark.asyncio
    async def test_get_ip_data(self, test_client):
        resp = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": test_user_password}
        )
        token = resp.cookies["access_token"]
        resp = test_client.get("/api/v1/utils/ip-lookup/1.1.1.1", cookies={"access_token": token})
        assert resp.status_code == 200
        assert resp.json()["query"] == "1.1.1.1"

    @pytest.mark.asyncio
    async def test_get_qr(self, test_client):
        resp = test_client.get("/api/v1/utils/qr/12345678")
        assert resp.status_code == 200
        assert resp.headers["Content-Type"] == "image/svg+xml"


class TestStats:
    @pytest.mark.asyncio
    async def test_get_quiz_count(self, test_client):
        redis = Redis().from_url(settings().redis)
        redis.flushdb()
        for i in range(2):
            resp = test_client.get("/api/v1/stats/quizzes")
            assert resp.status_code == 200
            assert resp.text == str(0)

    @pytest.mark.asyncio
    async def test_get_user_count(self, test_client):
        redis = Redis().from_url(settings().redis)
        redis.flushdb()
        for i in range(2):
            resp = test_client.get("/api/v1/stats/users")
            assert resp.status_code == 200
            assert resp.text == str(1)

    @pytest.mark.asyncio
    async def test_get_combined_count(self, test_client):
        redis = Redis().from_url(settings().redis)
        redis.flushdb()
        for i in range(2):
            resp = test_client.get("/api/v1/stats/combined")
            assert resp.status_code == 200
            assert resp.json()["quiz_count"] == 0
            assert resp.json()["user_count"] == 1


class TestQuiz:
    @pytest.mark.asyncio
    async def test_create_quiz(self, test_client):
        resp = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": test_user_password}
        )
        token = resp.cookies["access_token"]

        resp = test_client.post("/api/v1/quiz/create", json=example_quiz, cookies={"access_token": token})
        assert resp.status_code == 200
        ValueStorage.quiz_id = resp.json()["id"]
        example_quiz["questions"][1]["image"] = "https://imgur.com/sSNSy77.png"
        resp = test_client.post("/api/v1/quiz/create", json=example_quiz, cookies={"access_token": token})
        assert resp.status_code == 400

    @pytest.mark.asyncio
    async def test_get_quiz_from_id(self, test_client):
        resp = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": test_user_password}
        )
        token = resp.cookies["access_token"]
        resp = test_client.get(f"/api/v1/quiz/get/{ValueStorage.quiz_id}", cookies={"access_token": token})
        assert resp.status_code == 200
        resp = test_client.get(f"/api/v1/quiz/get/dasdsadsadsadsadsa", cookies={"access_token": token})
        assert resp.status_code == 400
        resp = test_client.get(
            f"/api/v1/quiz/get/847c64d3-39f9-4bb7-8f13-fae913f67858", cookies={"access_token": token}
        )
        assert resp.status_code == 404

    @pytest.mark.asyncio
    async def test_list_quizzes(self, test_client):
        resp = test_client.post(
            "/api/v1/users/token/cookie", data={"username": test_user_email, "password": test_user_password}
        )
        token = resp.cookies["access_token"]
        resp = test_client.get("/api/v1/quiz/list", cookies={"access_token": token})
        assert resp.status_code == 200
        assert resp.json()[0]["id"] == ValueStorage.quiz_id