import pytest from l4d2web.app import create_app from l4d2web.auth import hash_password from l4d2web.db import init_db, session_scope from l4d2web.models import Blueprint, Server, User @pytest.fixture def auth_client_with_server(tmp_path, monkeypatch): db_url = f"sqlite:///{tmp_path/'pages.db'}" monkeypatch.setenv("DATABASE_URL", db_url) app = create_app({"TESTING": True, "DATABASE_URL": db_url, "SECRET_KEY": "test"}) init_db() with session_scope() as session: user = User(username="alice", password_digest=hash_password("secret"), admin=False) session.add(user) session.flush() blueprint = Blueprint(user_id=user.id, name="default", arguments="[]", config="[]") session.add(blueprint) session.flush() session.add(Server(user_id=user.id, blueprint_id=blueprint.id, name="alpha", port=27015)) session.flush() user_id = user.id client = app.test_client() with client.session_transaction() as sess: sess["user_id"] = user_id return client @pytest.fixture def user_client_and_other_blueprint(tmp_path, monkeypatch): db_url = f"sqlite:///{tmp_path/'otherbp.db'}" monkeypatch.setenv("DATABASE_URL", db_url) app = create_app({"TESTING": True, "DATABASE_URL": db_url, "SECRET_KEY": "test"}) init_db() with session_scope() as session: owner = User(username="owner", password_digest=hash_password("secret"), admin=False) other = User(username="other", password_digest=hash_password("secret"), admin=False) session.add_all([owner, other]) session.flush() blueprint = Blueprint(user_id=other.id, name="private", arguments="[]", config="[]") session.add(blueprint) session.flush() owner_id = owner.id blueprint_id = blueprint.id client = app.test_client() with client.session_transaction() as sess: sess["user_id"] = owner_id return client, blueprint_id def test_dashboard_renders_server_and_status(auth_client_with_server) -> None: response = auth_client_with_server.get("/dashboard") text = response.get_data(as_text=True) assert response.status_code == 200 assert "alpha" in text def test_blueprint_page_private_visibility(user_client_and_other_blueprint) -> None: client, blueprint_id = user_client_and_other_blueprint response = client.get(f"/blueprints/{blueprint_id}") assert response.status_code == 403