96 lines
3.5 KiB
Python
96 lines
3.5 KiB
Python
import pytest
|
|
from sqlalchemy import create_engine, event
|
|
from sqlalchemy.orm import sessionmaker
|
|
|
|
from web.backend.database import Base
|
|
from web.backend.models import Account, AuditLog, LoginTask, User
|
|
from web.backend.routers.users import delete_user, list_users, rename_user
|
|
from web.backend.schemas import UserRename
|
|
|
|
|
|
class TestUserDeletion:
|
|
def setup_method(self):
|
|
self.engine = create_engine("sqlite://")
|
|
|
|
@event.listens_for(self.engine, "connect")
|
|
def enable_foreign_keys(connection, _):
|
|
connection.execute("PRAGMA foreign_keys=ON")
|
|
|
|
Base.metadata.create_all(self.engine)
|
|
self.session = sessionmaker(bind=self.engine)()
|
|
self.admin = User(username="admin", password_hash="hash", role="super_admin")
|
|
self.user = User(username="support", password_hash="hash", role="support")
|
|
self.session.add_all([self.admin, self.user])
|
|
self.session.commit()
|
|
self.session.add(
|
|
Account(
|
|
username="douyu-user",
|
|
password="password",
|
|
email="mail@example.com",
|
|
email_password="mail-password",
|
|
assigned_to=self.user.id,
|
|
)
|
|
)
|
|
self.session.commit()
|
|
account = self.session.query(Account).one()
|
|
self.session.add(
|
|
LoginTask(
|
|
batch_id="batch-1",
|
|
account_id=account.id,
|
|
created_by=self.user.id,
|
|
)
|
|
)
|
|
self.session.commit()
|
|
|
|
def teardown_method(self):
|
|
self.session.close()
|
|
Base.metadata.drop_all(self.engine)
|
|
self.engine.dispose()
|
|
|
|
def test_delete_user_soft_deletes_and_releases_assigned_accounts(self):
|
|
result = delete_user(
|
|
self.user.id,
|
|
db=self.session,
|
|
current=self.admin,
|
|
)
|
|
|
|
deleted = self.session.get(User, self.user.id)
|
|
account = self.session.query(Account).one()
|
|
assert deleted is not None
|
|
assert result["success"]
|
|
assert result["released_accounts"] == 1
|
|
assert not deleted.is_active
|
|
assert deleted.deleted_at is not None
|
|
assert deleted.deleted_username == "support"
|
|
assert deleted.username.startswith(f"deleted-{deleted.id}-")
|
|
assert account.assigned_to is None
|
|
assert self.session.query(AuditLog).one().target == "support"
|
|
assert self.session.query(LoginTask).one().created_by == deleted.id
|
|
assert [item.id for item in list_users(db=self.session)] == [self.admin.id]
|
|
|
|
def test_cannot_delete_current_user(self):
|
|
with pytest.raises(Exception, match="不能删除当前登录用户"):
|
|
delete_user(
|
|
self.user.id,
|
|
db=self.session,
|
|
current=self.user,
|
|
)
|
|
|
|
def test_rename_preserves_user_id_and_related_data(self):
|
|
result = rename_user(
|
|
self.user.id,
|
|
UserRename(username="renamed-support"),
|
|
db=self.session,
|
|
current=self.admin,
|
|
)
|
|
|
|
renamed = self.session.get(User, self.user.id)
|
|
account = self.session.query(Account).one()
|
|
task = self.session.query(LoginTask).one()
|
|
assert renamed is not None
|
|
assert result.username == "renamed-support"
|
|
assert renamed.id == self.user.id
|
|
assert account.assigned_to == self.user.id
|
|
assert task.created_by == self.user.id
|
|
assert self.session.query(AuditLog).one().target == "support -> renamed-support"
|