import pytest from l4d2web.app import create_app from l4d2web.auth import hash_password from l4d2web.db import init_db, session_scope from l4d2web.models import User @pytest.fixture def client(tmp_path, monkeypatch): db_url = f"sqlite:///{tmp_path/'auth.db'}" monkeypatch.setenv("DATABASE_URL", db_url) app = create_app({"TESTING": True, "DATABASE_URL": db_url, "SECRET_KEY": "test"}) init_db() return app.test_client() @pytest.fixture def seed_user(tmp_path, monkeypatch): db_url = f"sqlite:///{tmp_path/'seed.db'}" monkeypatch.setenv("DATABASE_URL", db_url) app = create_app({"TESTING": True, "DATABASE_URL": db_url, "SECRET_KEY": "test"}) init_db() with app.app_context(): with session_scope() as session: user = User(username="alice", password_digest=hash_password("secret"), admin=False) session.add(user) session.flush() user_id = user.id return user_id def test_public_signup(client) -> None: response = client.post("/signup", data={"username": "alice", "password": "secret"}) assert response.status_code == 302 def test_login_sets_session(client) -> None: with session_scope() as session: session.add(User(username="alice", password_digest=hash_password("secret"), admin=False)) response = client.post("/login", data={"username": "alice", "password": "secret"}) assert response.status_code == 302 with client.session_transaction() as sess: assert sess.get("user_id") is not None