224 lines
8.7 KiB
Python
224 lines
8.7 KiB
Python
"""技术交流两类栏目文章：工作人员写入 → 门户公开读取。"""
|
|
|
|
import pytest
|
|
from fastapi.testclient import TestClient
|
|
|
|
from app.core.config import get_settings
|
|
from app.core.security import create_access_token
|
|
|
|
|
|
@pytest.fixture
|
|
def client(monkeypatch):
|
|
monkeypatch.setenv("JWT_SECRET", "test-secret-must-be-32-characters!")
|
|
monkeypatch.setenv("API_PAYLOAD_ENCRYPT", "false")
|
|
get_settings.cache_clear()
|
|
if not get_settings().database_url.strip():
|
|
pytest.skip("DATABASE_URL 为空")
|
|
from app.main import create_app
|
|
|
|
with TestClient(create_app()) as api:
|
|
yield api
|
|
get_settings.cache_clear()
|
|
|
|
|
|
def _headers(token_type: str) -> dict[str, str]:
|
|
return {"Authorization": f"Bearer {create_access_token('1', token_type)}"}
|
|
|
|
|
|
def _minio_ready() -> bool:
|
|
try:
|
|
from app.services.storage import ensure_buckets
|
|
|
|
ensure_buckets()
|
|
return True
|
|
except Exception:
|
|
return False
|
|
|
|
|
|
def _clear_category(client, staff: dict[str, str], category: str) -> None:
|
|
listed = client.get(f"/api/admin/about/articles/{category}", headers=staff)
|
|
assert listed.status_code == 200, listed.text
|
|
for item in listed.json().get("items") or []:
|
|
deleted = client.delete(f"/api/admin/home/articles/{item['id']}", headers=staff)
|
|
assert deleted.status_code in (200, 204), deleted.text
|
|
|
|
|
|
def _png() -> bytes:
|
|
return (
|
|
b"\x89PNG\r\n\x1a\n\x00\x00\x00\rIHDR\x00\x00\x00\x01\x00\x00\x00\x01"
|
|
b"\x08\x02\x00\x00\x00\x90wS\xde\x00\x00\x00\x0cIDATx\x9cc\xf8\x0f"
|
|
b"\x00\x00\x01\x01\x00\x05\x18\xd8N\x00\x00\x00\x00IEND\xaeB`\x82"
|
|
)
|
|
|
|
|
|
def test_tech_exchange_publish_filter_placeholder_cover_and_pagination(client):
|
|
if not _minio_ready():
|
|
pytest.skip("MinIO 不可达")
|
|
staff = _headers("staff")
|
|
article_ids: list[int] = []
|
|
file_ids: list[int] = []
|
|
try:
|
|
for category in ("tech_seminars", "tech_exchange"):
|
|
_clear_category(client, staff, category)
|
|
|
|
empty_seminars = client.get("/api/site/about/articles/tech_seminars")
|
|
assert empty_seminars.status_code == 200, empty_seminars.text
|
|
assert "暂无技术研讨" in empty_seminars.text
|
|
assert "暂无技术交流" in client.get("/api/site/about/articles/tech_exchange").text
|
|
|
|
cover = client.post(
|
|
"/api/admin/files",
|
|
headers=staff,
|
|
data={"bucket": "public"},
|
|
files={"file": ("cover.png", _png(), "image/png")},
|
|
)
|
|
assert cover.status_code == 200, cover.text
|
|
file_ids.append(cover.json()["id"])
|
|
|
|
pdf = client.post(
|
|
"/api/admin/files",
|
|
headers=staff,
|
|
data={"bucket": "public"},
|
|
files={"file": ("研讨通知.pdf", b"%PDF-1.4\nnotice", "application/pdf")},
|
|
)
|
|
assert pdf.status_code == 200, pdf.text
|
|
file_ids.append(pdf.json()["id"])
|
|
|
|
award = client.post(
|
|
"/api/admin/files",
|
|
headers=staff,
|
|
data={"bucket": "public"},
|
|
files={"file": ("获奖名单公示.pdf", b"%PDF-1.4\nawards", "application/pdf")},
|
|
)
|
|
assert award.status_code == 200, award.text
|
|
file_ids.append(award.json()["id"])
|
|
|
|
seminar = client.post(
|
|
"/api/admin/home/articles",
|
|
headers=staff,
|
|
json={
|
|
"category": "tech_seminars",
|
|
"title": "城市更新中的房地产估价服务专题研讨",
|
|
"publishedAt": "2025-11-08T08:00:00",
|
|
"published": True,
|
|
"bodyHtml": "<p>城市更新研讨</p><script>alert(1)</script>",
|
|
"imageFileId": file_ids[0],
|
|
"attachmentFileIds": [file_ids[1]],
|
|
},
|
|
)
|
|
assert seminar.status_code == 200, seminar.text
|
|
article_ids.append(seminar.json()["id"])
|
|
|
|
draft = client.post(
|
|
"/api/admin/home/articles",
|
|
headers=staff,
|
|
json={
|
|
"category": "tech_seminars",
|
|
"title": "内部筹备研讨",
|
|
"publishedAt": "2025-11-09T08:00:00",
|
|
"published": False,
|
|
"bodyHtml": "<p>内部</p>",
|
|
"attachmentFileIds": [],
|
|
},
|
|
)
|
|
assert draft.status_code == 200, draft.text
|
|
article_ids.append(draft.json()["id"])
|
|
|
|
exchange = client.post(
|
|
"/api/admin/home/articles",
|
|
headers=staff,
|
|
json={
|
|
"category": "tech_exchange",
|
|
"title": "2018年度优秀报告评选表彰与实践分享（公示）",
|
|
"publishedAt": "2019-04-26T08:00:00",
|
|
"published": True,
|
|
"bodyHtml": "<p>优秀报告公示</p>",
|
|
"attachmentFileIds": [file_ids[2]],
|
|
},
|
|
)
|
|
assert exchange.status_code == 200, exchange.text
|
|
article_ids.append(exchange.json()["id"])
|
|
|
|
seminars = client.get("/api/site/about/articles/tech_seminars")
|
|
assert seminars.status_code == 200, seminars.text
|
|
assert "城市更新中的房地产估价服务专题研讨" in seminars.text
|
|
assert "内部筹备研讨" not in seminars.text
|
|
assert seminars.json()["items"][0].get("imageUrl")
|
|
|
|
detail = client.get(f"/api/site/home/articles/{article_ids[0]}")
|
|
assert detail.status_code == 200, detail.text
|
|
body = detail.json()["bodyHtml"].lower()
|
|
assert "城市更新研讨" in detail.json()["bodyHtml"]
|
|
assert "script" not in body
|
|
assert "alert" not in body
|
|
assert detail.json().get("imageUrl")
|
|
assert [item["filename"] for item in detail.json()["attachments"]] == ["研讨通知.pdf"]
|
|
|
|
hidden = client.get(f"/api/site/home/articles/{article_ids[1]}")
|
|
assert hidden.status_code == 404
|
|
|
|
exchanges = client.get("/api/site/about/articles/tech_exchange")
|
|
assert exchanges.status_code == 200, exchanges.text
|
|
assert "2018年度优秀报告评选表彰与实践分享（公示）" in exchanges.text
|
|
exchange_detail = client.get(f"/api/site/home/articles/{article_ids[2]}")
|
|
assert exchange_detail.status_code == 200, exchange_detail.text
|
|
assert [item["filename"] for item in exchange_detail.json()["attachments"]] == ["获奖名单公示.pdf"]
|
|
|
|
for index in range(10):
|
|
created = client.post(
|
|
"/api/admin/home/articles",
|
|
headers=staff,
|
|
json={
|
|
"category": "tech_seminars",
|
|
"title": f"研讨分页样例-{index:02d}",
|
|
"publishedAt": f"2025-01-{index + 1:02d}T08:00:00",
|
|
"published": True,
|
|
"bodyHtml": f"<p>研讨分页样例-{index:02d}</p>",
|
|
"attachmentFileIds": [],
|
|
},
|
|
)
|
|
assert created.status_code == 200, created.text
|
|
article_ids.append(created.json()["id"])
|
|
|
|
page1 = client.get("/api/site/about/articles/tech_seminars?current=1&size=10")
|
|
assert page1.status_code == 200, page1.text
|
|
assert page1.json()["total"] == 11
|
|
assert page1.json()["size"] == 10
|
|
assert len(page1.json()["items"]) == 10
|
|
|
|
page2 = client.get("/api/site/about/articles/tech_seminars?current=2&size=10")
|
|
assert page2.status_code == 200, page2.text
|
|
assert len(page2.json()["items"]) == 1
|
|
|
|
size20 = client.get("/api/site/about/articles/tech_seminars?current=1&size=20")
|
|
assert size20.json()["size"] == 20
|
|
assert len(size20.json()["items"]) == 11
|
|
|
|
bad_size = client.get("/api/site/about/articles/tech_seminars?current=1&size=15")
|
|
assert bad_size.json()["size"] == 10
|
|
|
|
home = client.get("/api/admin/home", headers=staff)
|
|
assert home.status_code == 200, home.text
|
|
categories = {item["category"] for item in home.json()["articles"]}
|
|
assert "tech_seminars" not in categories
|
|
assert "tech_exchange" not in categories
|
|
|
|
rejected = client.post(
|
|
"/api/admin/home/articles",
|
|
headers=_headers("member"),
|
|
json={
|
|
"category": "tech_seminars",
|
|
"title": "会员不得发布研讨",
|
|
"published": True,
|
|
"bodyHtml": "<p>x</p>",
|
|
"attachmentFileIds": [],
|
|
},
|
|
)
|
|
assert rejected.status_code in (401, 403)
|
|
assert "会员不得发布研讨" not in client.get("/api/site/about/articles/tech_seminars").text
|
|
finally:
|
|
for article_id in article_ids:
|
|
client.delete(f"/api/admin/home/articles/{article_id}", headers=staff)
|
|
for file_id in file_ids:
|
|
client.delete(f"/api/admin/files/{file_id}", headers=staff)
|