Initial commit - DesignerCEP Project with Caddy deployment

Server/tests/test_new_flows.py

@@ -0,0 +1,192 @@
+import pytest
+from fastapi.testclient import TestClient
+from sqlalchemy import create_engine
+from sqlalchemy.orm import sessionmaker
+from sqlalchemy.pool import StaticPool
+from unittest.mock import MagicMock
+import sys
+import os
+
+# Add Server directory to path
+sys.path.append(os.path.abspath(os.path.join(os.path.dirname(__file__), "..")))
+
+from app.main import app
+from app.db import Base, get_db
+from app.models.group import PluginGroup
+from app.models.user import User
+from app.services.email_service import email_service
+
+# Mock Email Service
+email_service.send_email = MagicMock()
+
+# In-memory SQLite database
+SQLALCHEMY_DATABASE_URL = "sqlite:///:memory:"
+
+engine = create_engine(
+    SQLALCHEMY_DATABASE_URL,
+    connect_args={"check_same_thread": False},
+    poolclass=StaticPool,
+)
+TestingSessionLocal = sessionmaker(autocommit=False, autoflush=False, bind=engine)
+
+def override_get_db():
+    try:
+        db = TestingSessionLocal()
+        yield db
+    finally:
+        db.close()
+
+app.dependency_overrides[get_db] = override_get_db
+
+client = TestClient(app)
+
+@pytest.fixture(autouse=True)
+def setup_db():
+    Base.metadata.create_all(bind=engine)
+    # Create default group
+    db = TestingSessionLocal()
+    if not db.query(PluginGroup).filter(PluginGroup.name == "default").first():
+        default_group = PluginGroup(name="default", comment="Default Group")
+        db.add(default_group)
+        db.commit()
+    db.close()
+    yield
+    Base.metadata.drop_all(bind=engine)
+    # Reset mock
+    email_service.send_email.reset_mock()
+
+def test_single_form_registration_flow():
+    email = "newuser@example.com"
+    password = "securepassword123"
+    username = "realusername"
+
+    # 1. Send verification code
+    response = client.post(
+        "/api/v1/auth/send-verification-code",
+        json={"email": email}
+    )
+    assert response.status_code == 200
+    assert response.json()["detail"] == "验证码已发送"
+    assert email_service.send_email.called
+
+    # 2. Retrieve code from DB
+    db = TestingSessionLocal()
+    temp_user = db.query(User).filter(User.email == email).first()
+    assert temp_user is not None
+    assert temp_user.verification_code is not None
+    assert len(temp_user.verification_code) == 6
+    code = temp_user.verification_code
+    db.close()
+
+    # 3. Try register with WRONG code
+    response = client.post(
+        "/api/v1/auth/register",
+        json={
+            "username": username,
+            "password": password,
+            "confirm_password": password,
+            "email": email,
+            "code": "000000",
+            "device_id": "test_device"
+        }
+    )
+    assert response.status_code == 400
+    assert response.json()["detail"] == "验证码错误"
+
+    # 4. Register with CORRECT code
+    response = client.post(
+        "/api/v1/auth/register",
+        json={
+            "username": username,
+            "password": password,
+            "confirm_password": password,
+            "email": email,
+            "code": code,
+            "device_id": "test_device"
+        }
+    )
+    assert response.status_code == 200
+    data = response.json()
+    assert data["username"] == username
+    assert "access_token" in data
+
+    # 5. Verify user status in DB
+    db = TestingSessionLocal()
+    user = db.query(User).filter(User.username == username).first()
+    assert user is not None
+    assert user.email == email
+    assert user.is_verified is True
+    # Ensure temp username is gone or updated (logic: update existing temp user)
+    # The logic in auth_service.register finds the user by email (which was the temp user) 
+    # and updates username and password.
+    assert user.hashed_password != "temp_password_placeholder"
+    db.close()
+
+def test_reset_password_flow():
+    # Setup: Create a verified user
+    db = TestingSessionLocal()
+    from app.core.security import get_password_hash
+    user = User(
+        username="resetuser",
+        email="reset@example.com",
+        hashed_password=get_password_hash("oldpassword"),
+        is_verified=True
+    )
+    db.add(user)
+    db.commit()
+    db.close()
+
+    email = "reset@example.com"
+    new_password = "newpassword123"
+
+    # 1. Request password reset (Forgot Password)
+    response = client.post(
+        "/api/v1/auth/forgot-password",
+        json={"email": email}
+    )
+    assert response.status_code == 200
+    assert email_service.send_email.called
+
+    # 2. Retrieve reset token (6-digit code) from DB
+    db = TestingSessionLocal()
+    user = db.query(User).filter(User.email == email).first()
+    assert user.reset_token is not None
+    assert len(user.reset_token) == 6
+    token = user.reset_token
+    db.close()
+
+    # 3. Reset password with code
+    response = client.post(
+        "/api/v1/auth/reset-password",
+        json={
+            "email": email,
+            "token": token,
+            "new_password": new_password,
+            "confirm_password": new_password
+        }
+    )
+    assert response.status_code == 200
+    assert response.json()["detail"] == "密码重置成功"
+
+    # 4. Login with new password
+    response = client.post(
+        "/api/v1/auth/login",
+        json={
+            "username": "resetuser",
+            "password": new_password,
+            "device_id": "test_device"
+        }
+    )
+    assert response.status_code == 200
+    assert "access_token" in response.json()
+
+    # 5. Login with old password should fail
+    response = client.post(
+        "/api/v1/auth/login",
+        json={
+            "username": "resetuser",
+            "password": "oldpassword",
+            "device_id": "test_device"
+        }
+    )
+    assert response.status_code == 401