import os import unittest from types import SimpleNamespace os.environ.setdefault("DATABASE_URL", "sqlite://") os.environ.setdefault("APP_ENCRYPTION_KEY", "MDEyMzQ1Njc4OWFiY2RlZjAxMjM0NTY3ODlhYmNkZWY=") from sqlalchemy import create_engine, event from sqlalchemy.orm import sessionmaker from web.backend.database import Base from web.backend.models import Account, AuditLog, LoginTask, User from web.backend.routers.users import delete_user, list_users, rename_user from web.backend.schemas import UserRename class UserDeletionTests(unittest.TestCase): def setUp(self): self.engine = create_engine("sqlite://") @event.listens_for(self.engine, "connect") def enable_foreign_keys(connection, _): connection.execute("PRAGMA foreign_keys=ON") Base.metadata.create_all(self.engine) self.session = sessionmaker(bind=self.engine)() self.admin = User(username="admin", password_hash="hash", role="super_admin") self.user = User(username="support", password_hash="hash", role="support") self.session.add_all([self.admin, self.user]) self.session.commit() self.session.add(Account( username="douyu-user", password="password", email="mail@example.com", email_password="mail-password", assigned_to=self.user.id, )) self.session.commit() account = self.session.query(Account).one() self.session.add(LoginTask( batch_id="batch-1", account_id=account.id, created_by=self.user.id, )) self.session.commit() def tearDown(self): self.session.close() Base.metadata.drop_all(self.engine) self.engine.dispose() def test_delete_user_soft_deletes_and_releases_assigned_accounts(self): result = delete_user( self.user.id, db=self.session, current=SimpleNamespace(id=self.admin.id, username=self.admin.username), ) deleted = self.session.get(User, self.user.id) account = self.session.query(Account).one() self.assertTrue(result["success"]) self.assertEqual(result["released_accounts"], 1) self.assertFalse(deleted.is_active) self.assertIsNotNone(deleted.deleted_at) self.assertEqual(deleted.deleted_username, "support") self.assertTrue(deleted.username.startswith(f"deleted-{deleted.id}-")) self.assertIsNone(account.assigned_to) self.assertEqual(self.session.query(AuditLog).one().target, "support") self.assertEqual(self.session.query(LoginTask).one().created_by, deleted.id) self.assertEqual([item.id for item in list_users(db=self.session)], [self.admin.id]) def test_cannot_delete_current_user(self): with self.assertRaisesRegex(Exception, "不能删除当前登录用户"): delete_user( self.user.id, db=self.session, current=SimpleNamespace(id=self.user.id, username=self.user.username), ) def test_rename_preserves_user_id_and_related_data(self): result = rename_user( self.user.id, UserRename(username="renamed-support"), db=self.session, current=SimpleNamespace(id=self.admin.id, username=self.admin.username), ) renamed = self.session.get(User, self.user.id) account = self.session.query(Account).one() task = self.session.query(LoginTask).one() self.assertEqual(result.username, "renamed-support") self.assertEqual(renamed.id, self.user.id) self.assertEqual(account.assigned_to, self.user.id) self.assertEqual(task.created_by, self.user.id) self.assertEqual(self.session.query(AuditLog).one().target, "support -> renamed-support") if __name__ == "__main__": unittest.main()