"""报告备案对照，以及首页报告查询、报告审核固定打开站内页。""" from uuid import uuid4 import pytest from fastapi.testclient import TestClient from app.core.config import get_settings from app.core.security import create_access_token FOUND = "以出具机构数据为准，协会结果仅供参考。" MISSING = "协会备案库没有该编号，请向出具机构核实。" @pytest.fixture def client(monkeypatch): monkeypatch.setenv("JWT_SECRET", "test-secret-must-be-32-characters!") monkeypatch.setenv("API_PAYLOAD_ENCRYPT", "false") get_settings.cache_clear() if not get_settings().database_url.strip(): pytest.skip("DATABASE_URL 为空") from app.main import create_app with TestClient(create_app()) as api: yield api get_settings.cache_clear() def _headers(token_type: str) -> dict[str, str]: return {"Authorization": f"Bearer {create_access_token('1', token_type)}"} def _filing(number: str, *, published: bool, institution: str = "兰州示例估价") -> dict: return { "institutionName": institution, "reportNumber": number, "issuedOn": "2026-03-18", "published": published, } def test_public_query_reads_only_published_filings(client: TestClient): staff = _headers("staff") member = _headers("member") number = f"GS-{uuid4().hex[:10]}" other = f"GS-{uuid4().hex[:10]}" filing_id = None other_id = None try: body = _filing(f" {number} ", published=False, institution=" 兰州示例估价 ") assert client.post("/api/admin/reports", json=body).status_code == 401 assert client.post("/api/admin/reports", headers=member, json=body).status_code == 403 created = client.post("/api/admin/reports", headers=staff, json=body) assert created.status_code == 200, created.text filing_id = created.json()["id"] hidden = client.get("/api/site/reports/query", params={"number": number}) assert hidden.status_code == 200, hidden.text assert hidden.json() == {"found": False, "notice": MISSING} assert "兰州示例估价" not in hidden.text assert "真" not in hidden.text assert "伪" not in hidden.text published = client.put( f"/api/admin/reports/{filing_id}", headers=staff, json=_filing(number, published=True), ) assert published.status_code == 200, published.text found = client.get("/api/site/reports/query", params={"number": number}) assert found.json() == { "found": True, "institutionName": "兰州示例估价", "reportNumber": number, "issuedOn": "2026-03-18", "notice": FOUND, } assert "真" not in found.text assert "伪" not in found.text duplicate = client.post("/api/admin/reports", headers=staff, json=_filing(number, published=True)) assert duplicate.status_code == 400 assert duplicate.json()["detail"] == "报告编号已存在" second = client.post("/api/admin/reports", headers=staff, json=_filing(other, published=True)) assert second.status_code == 200, second.text other_id = second.json()["id"] clash = client.put( f"/api/admin/reports/{filing_id}", headers=staff, json=_filing(other, published=True), ) assert clash.status_code == 400 assert clash.json()["detail"] == "报告编号已存在" blank = client.get("/api/site/reports/query", params={"number": " "}) assert blank.status_code == 400 assert blank.json()["detail"] == "请填写报告编号" listed = client.get("/api/admin/reports", headers=staff) assert listed.status_code == 200 assert any(item["id"] == filing_id and item["published"] is True for item in listed.json()["items"]) assert client.get("/api/admin/reports", headers=member).status_code == 403 finally: for item_id in (filing_id, other_id): if item_id is not None: client.delete(f"/api/admin/reports/{item_id}", headers=staff) gone = client.get("/api/site/reports/query", params={"number": number}) assert gone.json()["found"] is False def test_hot_links_open_report_pages_on_site(client: TestClient): staff = _headers("staff") before = client.get("/api/admin/home", headers=staff).json()["hotLinks"]["links"] hidden = [ {"key": "reportQuery", "label": "报告查询", "url": "/reports/query", "visible": False, "sortOrder": 0}, {"key": "reportReview", "label": "报告审核", "url": "/reports/review", "visible": False, "sortOrder": 1}, {"key": "complaint", "label": "投诉举报", "url": "", "visible": False, "sortOrder": 2}, ] try: saved = client.put( "/api/admin/home/hot-links", headers=staff, json={ "links": [ { "key": "reportReview", "label": "辅助审核", "url": "https://example.com/review", "visible": True, "sortOrder": 0, }, { "key": "complaint", "label": "投诉举报", "url": "https://example.com/complaint", "visible": True, "sortOrder": 1, }, { "key": "reportQuery", "label": "查备案", "url": "https://example.com/report-check", "visible": True, "sortOrder": 2, }, ] }, ) assert saved.status_code == 200, saved.text home = client.get("/api/site/home") assert home.json()["hotLinks"]["links"] == [ {"label": "辅助审核", "url": "/reports/review", "navigation": "sameWindow"}, {"label": "投诉举报", "url": "https://example.com/complaint", "navigation": "newWindow"}, {"label": "查备案", "url": "/reports/query", "navigation": "sameWindow"}, ] assert "example.com/report-check" not in home.text assert "example.com/review" not in home.text rejected = client.put( "/api/admin/home/hot-links", headers=staff, json={"links": [{"key": "reportQuery", "label": "报告查询", "url": "/reports/query", "visible": True, "sortOrder": 0}]}, ) assert rejected.status_code == 400 cleared = client.put("/api/admin/home/hot-links", headers=staff, json={"links": hidden}) assert cleared.status_code == 200, cleared.text assert client.get("/api/site/home").json()["hotLinks"]["placeholder"] == "报告查询、报告审核与投诉举报入口即将开放" finally: restore = before or hidden client.put("/api/admin/home/hot-links", headers=staff, json={"links": restore})