patrickandClaude Sonnet 5
48b6d6a5be
CI / backend-tests (push) Failing after 1s
- Vollständiges Ziel-Schema aus Prompt 20 als initiale Migration (inkl. Karte-13-Vorbereitung: UUID-PKs, systemknoten) - Seed-Migration für Hauptserver-Datensatz (Sprintplan E6) - JWT-Login + /auth/me, require_roles-Dependency (Prompt 05 Berechtigungsmatrix) - Tests: health, login/me, Rollen-Ablehnung/-Zulassung (S0-Abnahmekriterien) - Gitea-Actions-CI: install -> migrate -> pytest mit Coverage-Gate 50% Nur Code/Config erzeugt, nicht lokal installiert oder ausgeführt (Deployment-Regel). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01L85hmKbvX7Cqkq47KnQhFt
29 lines
895 B
Python
29 lines
895 B
Python
import pytest
|
|
|
|
|
|
async def _login(client, username: str) -> str:
|
|
response = await client.post(
|
|
"/api/v1/auth/login",
|
|
data={"username": username, "password": "test-passwort-123"},
|
|
)
|
|
return response.json()["access_token"]
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_admin_only_rejects_mitarbeiter(client, mitarbeiter_user):
|
|
token = await _login(client, "mitarbeiter1")
|
|
response = await client.get(
|
|
"/api/v1/health/admin-only", headers={"Authorization": f"Bearer {token}"}
|
|
)
|
|
assert response.status_code == 403
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_admin_only_allows_administration(client, admin_user):
|
|
token = await _login(client, "admin1")
|
|
response = await client.get(
|
|
"/api/v1/health/admin-only", headers={"Authorization": f"Bearer {token}"}
|
|
)
|
|
assert response.status_code == 200
|
|
assert response.json()["login"] == "admin1"
|