import pytest from types import SimpleNamespace from sqlalchemy import create_engine, event from sqlalchemy.orm import sessionmaker from web.backend.database import Base from web.backend.models import Account, AuditLog, LoginTask, User from web.backend.routers.users import delete_user, list_users, rename_user from web.backend.schemas import UserRename class TestUserDeletion: def setup_method(self): self.engine = create_engine("sqlite://") @event.listens_for(self.engine, "connect") def enable_foreign_keys(connection, _): connection.execute("PRAGMA foreign_keys=ON") Base.metadata.create_all(self.engine) self.session = sessionmaker(bind=self.engine)() self.admin = User(username="admin", password_hash="hash", role="super_admin") self.user = User(username="support", password_hash="hash", role="support") self.session.add_all([self.admin, self.user]) self.session.commit() self.session.add( Account( username="douyu-user", password="password", email="mail@example.com", email_password="mail-password", assigned_to=self.user.id, ) ) self.session.commit() account = self.session.query(Account).one() self.session.add( LoginTask( batch_id="batch-1", account_id=account.id, created_by=self.user.id, ) ) self.session.commit() def teardown_method(self): self.session.close() Base.metadata.drop_all(self.engine) self.engine.dispose() def test_delete_user_soft_deletes_and_releases_assigned_accounts(self): result = delete_user( self.user.id, db=self.session, current=SimpleNamespace(id=self.admin.id, username=self.admin.username), ) deleted = self.session.get(User, self.user.id) account = self.session.query(Account).one() assert result["success"] assert result["released_accounts"] == 1 assert not deleted.is_active assert deleted.deleted_at is not None assert deleted.deleted_username == "support" assert deleted.username.startswith(f"deleted-{deleted.id}-") assert account.assigned_to is None assert self.session.query(AuditLog).one().target == "support" assert self.session.query(LoginTask).one().created_by == deleted.id assert [item.id for item in list_users(db=self.session)] == [self.admin.id] def test_cannot_delete_current_user(self): with pytest.raises(Exception, match="不能删除当前登录用户"): delete_user( self.user.id, db=self.session, current=SimpleNamespace(id=self.user.id, username=self.user.username), ) def test_rename_preserves_user_id_and_related_data(self): result = rename_user( self.user.id, UserRename(username="renamed-support"), db=self.session, current=SimpleNamespace(id=self.admin.id, username=self.admin.username), ) renamed = self.session.get(User, self.user.id) account = self.session.query(Account).one() task = self.session.query(LoginTask).one() assert result.username == "renamed-support" assert renamed.id == self.user.id assert account.assigned_to == self.user.id assert task.created_by == self.user.id assert self.session.query(AuditLog).one().target == "support -> renamed-support"