| """Tests for /keys endpoints (Phase 4)."""
|
|
|
| import pytest
|
|
|
|
|
| @pytest.mark.asyncio
|
| async def test_get_my_key(client, auth_headers, test_user):
|
| resp = await client.get("/api/v1/keys/my-key", headers=auth_headers)
|
| assert resp.status_code == 200
|
| data = resp.json()
|
| assert "key_prefix" in data
|
| assert "key_suffix" in data
|
| assert data["status"] == "active"
|
|
|
|
|
| @pytest.mark.asyncio
|
| async def test_get_my_key_unauthenticated(client):
|
| resp = await client.get("/api/v1/keys/my-key")
|
| assert resp.status_code == 403
|
|
|
|
|
| @pytest.mark.asyncio
|
| async def test_generate_key(client, auth_headers):
|
|
|
| resp = await client.post("/api/v1/keys/generate", headers=auth_headers)
|
| assert resp.status_code == 200
|
| data = resp.json()
|
| assert "api_key" in data
|
| assert data["api_key"].startswith("mac_sk_live_")
|
|
|
|
|
| @pytest.mark.asyncio
|
| async def test_key_stats(client, auth_headers):
|
| resp = await client.get("/api/v1/keys/my-key/stats", headers=auth_headers)
|
| assert resp.status_code == 200
|
| data = resp.json()
|
| assert "tokens_today" in data
|
| assert "requests_today" in data
|
|
|
|
|
| @pytest.mark.asyncio
|
| async def test_revoke_key(client, auth_headers):
|
| resp = await client.delete("/api/v1/keys/my-key", headers=auth_headers)
|
| assert resp.status_code == 200
|
|
|
|
|
| @pytest.mark.asyncio
|
| async def test_admin_list_keys(client, admin_headers):
|
| resp = await client.get("/api/v1/keys/admin/all", headers=admin_headers)
|
| assert resp.status_code == 200
|
| data = resp.json()
|
| assert "keys" in data
|
|
|
|
|
| @pytest.mark.asyncio
|
| async def test_admin_list_keys_requires_admin(client, auth_headers):
|
| resp = await client.get("/api/v1/keys/admin/all", headers=auth_headers)
|
| assert resp.status_code == 403
|
|
|
|
|
| @pytest.mark.asyncio
|
| async def test_admin_revoke_key(client, admin_headers, test_user):
|
| user, _ = test_user
|
| resp = await client.post("/api/v1/keys/admin/revoke", headers=admin_headers,
|
| json={"roll_number": user.roll_number, "reason": "test"})
|
| assert resp.status_code == 200
|
|
|
