mirror of
https://github.com/DRYTRIX/TimeTracker.git
synced 2026-05-03 02:39:47 -05:00
Dries Peeters
f54ab9934f
Backend: add Black/isort/Flake8 configs and .editorconfig; switch health/readiness to locale-based time. Fix service worker asset list; add smoke test. Admin scopes UI: add read:* and write:* wildcards; add granular scopes for invoices, expenses, payments, mileage, per diem, budget alerts, calendar, comments, recurring invoices. API v1: add endpoints for invoices, expenses, payments, mileage, per diem (+rates), budget alerts, calendar, kanban, saved filters, time entry templates, comments, recurring invoices, credit notes, client notes (paginated), project costs (paginated), currencies, exchange rates, favorites, audit logs, activities, and invoice PDF/templates (admin). Extend /api/v1/info with all resources. No schema changes. Tests: add coverage for new endpoints (CRUD/list/pagination) and service worker route smoke test.
57 lines
1.3 KiB
Python
57 lines
1.3 KiB
Python
import pytest
|
|
|
|
from app import create_app, db
|
|
from app.models import User, ApiToken
|
|
|
|
|
|
@pytest.fixture
|
|
def app():
|
|
app = create_app({
|
|
'TESTING': True,
|
|
'SQLALCHEMY_DATABASE_URI': 'sqlite:///test_api_audit_activities.sqlite',
|
|
'WTF_CSRF_ENABLED': False,
|
|
})
|
|
with app.app_context():
|
|
db.create_all()
|
|
yield app
|
|
db.session.remove()
|
|
db.drop_all()
|
|
|
|
|
|
@pytest.fixture
|
|
def client(app):
|
|
return app.test_client()
|
|
|
|
|
|
@pytest.fixture
|
|
def admin_user(app):
|
|
u = User(username='admin', email='admin@example.com', role='admin')
|
|
u.is_active = True
|
|
db.session.add(u)
|
|
db.session.commit()
|
|
return u
|
|
|
|
|
|
@pytest.fixture
|
|
def admin_token(app, admin_user):
|
|
token, plain = ApiToken.create_token(
|
|
user_id=admin_user.id,
|
|
name='Admin Token',
|
|
scopes='admin:all,read:reports'
|
|
)
|
|
db.session.add(token)
|
|
db.session.commit()
|
|
return plain
|
|
|
|
|
|
def _auth(t):
|
|
return {'Authorization': f'Bearer {t}', 'Content-Type': 'application/json'}
|
|
|
|
|
|
def test_audit_and_activities_list(client, admin_token):
|
|
r = client.get('/api/v1/audit-logs', headers=_auth(admin_token))
|
|
assert r.status_code == 200
|
|
r = client.get('/api/v1/activities', headers=_auth(admin_token))
|
|
assert r.status_code == 200
|
|
|