qzl
58 lines
2.1 KiB
Python
58 lines
2.1 KiB
Python
from __future__ import annotations
|
|
|
|
from uuid import UUID
|
|
|
|
import pytest
|
|
from pydantic import SecretStr
|
|
|
|
from core.config.settings import config
|
|
from core.http.errors import ApiProblemError
|
|
from v1.auth.dev_phone_session import create_dev_phone_session, refresh_dev_phone_session
|
|
from v1.auth.schemas import PhoneSessionCreateRequest, SessionRefreshRequest
|
|
|
|
|
|
_TEST_JWT_SECRET = "test-secret-key-with-32-bytes-minimum!!"
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_dev_session_refresh_round_trip(monkeypatch: pytest.MonkeyPatch) -> None:
|
|
monkeypatch.setattr(config.runtime, "environment", "dev")
|
|
monkeypatch.setattr(config.supabase, "jwt_secret", SecretStr(_TEST_JWT_SECRET))
|
|
monkeypatch.setattr(config.supabase, "jwt_issuer", "http://localhost:8001/auth/v1")
|
|
async def _fake_find_or_create_user_by_phone(_phone: str) -> UUID:
|
|
return UUID("00000000-0000-0000-0000-000000000123")
|
|
|
|
monkeypatch.setattr(
|
|
"v1.auth.dev_phone_session._find_or_create_user_by_phone",
|
|
_fake_find_or_create_user_by_phone,
|
|
)
|
|
|
|
created = await create_dev_phone_session(
|
|
request=PhoneSessionCreateRequest(phone="+8613812345678", token="123456")
|
|
)
|
|
refreshed = await refresh_dev_phone_session(
|
|
request=SessionRefreshRequest(refresh_token=created.refresh_token)
|
|
)
|
|
|
|
assert refreshed.user.id == "00000000-0000-0000-0000-000000000123"
|
|
assert refreshed.user.phone == "+8613812345678"
|
|
assert refreshed.access_token
|
|
assert refreshed.refresh_token
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_dev_session_refresh_rejects_invalid_token(
|
|
monkeypatch: pytest.MonkeyPatch,
|
|
) -> None:
|
|
monkeypatch.setattr(config.runtime, "environment", "dev")
|
|
monkeypatch.setattr(config.supabase, "jwt_secret", SecretStr(_TEST_JWT_SECRET))
|
|
monkeypatch.setattr(config.supabase, "jwt_issuer", "http://localhost:8001/auth/v1")
|
|
|
|
with pytest.raises(ApiProblemError) as exc_info:
|
|
await refresh_dev_phone_session(
|
|
request=SessionRefreshRequest(refresh_token="invalid-token")
|
|
)
|
|
|
|
assert exc_info.value.status_code == 401
|
|
assert exc_info.value.code == "AUTH_REFRESH_TOKEN_INVALID"
|