feature: create multitasking

2026-02-04 02:19:50 +03:00
parent 67e0f22b4f
commit a25bf623ea
24 changed files with 5227 additions and 21 deletions
@@ -0,0 +1,159 @@
+"""
+Tests for authentication endpoints.
+"""
+
+from __future__ import annotations
+
+from datetime import timedelta
+
+import pytest
+from httpx import AsyncClient
+
+from cpv3.infrastructure.security import create_token
+from cpv3.modules.users.models import User
+
+
+class TestRegisterEndpoint:
+    """Tests for POST /auth/register."""
+
+    async def test_register_success(self, async_client: AsyncClient):
+        """Test successful user registration."""
+        response = await async_client.post(
+            "/auth/register",
+            json={
+                "username": "newuser",
+                "email": "newuser@example.com",
+                "password": "securepassword123",
+                "first_name": "New",
+                "last_name": "User",
+            },
+        )
+
+        assert response.status_code == 201
+        data = response.json()
+        assert "access" in data
+        assert "refresh" in data
+        assert data["user"]["username"] == "newuser"
+        assert data["user"]["email"] == "newuser@example.com"
+
+    async def test_register_duplicate_username(
+        self, async_client: AsyncClient, test_user: User
+    ):
+        """Test registration fails with duplicate username."""
+        response = await async_client.post(
+            "/auth/register",
+            json={
+                "username": test_user.username,  # existing username
+                "email": "another@example.com",
+                "password": "password123",
+            },
+        )
+
+        assert response.status_code == 400
+
+    async def test_register_missing_required_fields(self, async_client: AsyncClient):
+        """Test registration fails with missing required fields."""
+        response = await async_client.post(
+            "/auth/register",
+            json={"username": "someuser"},  # missing email and password
+        )
+
+        assert response.status_code == 422
+
+
+class TestLoginEndpoint:
+    """Tests for POST /auth/login."""
+
+    async def test_login_success(self, async_client: AsyncClient, test_user: User):
+        """Test successful login."""
+        response = await async_client.post(
+            "/auth/login",
+            json={
+                "username": "testuser",
+                "password": "testpassword",
+            },
+        )
+
+        assert response.status_code == 200
+        data = response.json()
+        assert "access" in data
+        assert "refresh" in data
+        assert data["user"]["username"] == "testuser"
+
+    async def test_login_invalid_password(
+        self, async_client: AsyncClient, test_user: User
+    ):
+        """Test login fails with wrong password."""
+        response = await async_client.post(
+            "/auth/login",
+            json={
+                "username": "testuser",
+                "password": "wrongpassword",
+            },
+        )
+
+        assert response.status_code == 401
+        assert response.json()["detail"] == "Invalid credentials"
+
+    async def test_login_nonexistent_user(self, async_client: AsyncClient):
+        """Test login fails for nonexistent user."""
+        response = await async_client.post(
+            "/auth/login",
+            json={
+                "username": "nonexistent",
+                "password": "password123",
+            },
+        )
+
+        assert response.status_code == 401
+        assert response.json()["detail"] == "Invalid credentials"
+
+
+class TestRefreshEndpoint:
+    """Tests for POST /auth/refresh."""
+
+    async def test_refresh_success(self, async_client: AsyncClient, test_user: User):
+        """Test successful token refresh."""
+        refresh_token = create_token(
+            subject=str(test_user.id),
+            token_type="refresh",
+            expires_in=timedelta(days=7),
+        )
+
+        response = await async_client.post(
+            "/auth/refresh",
+            json={"refresh": refresh_token},
+        )
+
+        assert response.status_code == 200
+        data = response.json()
+        assert "access" in data
+        assert "refresh" in data
+
+    async def test_refresh_with_access_token_fails(
+        self, async_client: AsyncClient, test_user: User
+    ):
+        """Test refresh fails when using access token instead of refresh token."""
+        access_token = create_token(
+            subject=str(test_user.id),
+            token_type="access",
+            expires_in=timedelta(minutes=15),
+        )
+
+        response = await async_client.post(
+            "/auth/refresh",
+            json={"refresh": access_token},
+        )
+
+        assert response.status_code == 401
+        assert response.json()["detail"] == "Invalid refresh token"
+
+    async def test_refresh_with_invalid_token(self, async_client: AsyncClient):
+        """Test refresh fails with invalid token."""
+        response = await async_client.post(
+            "/auth/refresh",
+            json={"refresh": "invalid.token.here"},
+        )
+
+        assert response.status_code == 401
+        assert response.json()["detail"] == "Invalid refresh token"