add pytest tests for users and applications

tests/conftest.py

@@ -0,0 +1,92 @@
+from fastapi.testclient import TestClient
+from sqlalchemy import create_engine
+from sqlalchemy.orm import sessionmaker
+from app.cores.config import settings
+import pytest
+from app.cores.database import get_db, Base
+from app.cores.security import create_access_token
+from app.models.application import Application
+from app.main import app
+
+SQLALCHEMY_DATABASE_URL = f"postgresql://{settings.DATABASE_USERNAME}:{settings.DATABASE_PASSWORD}@{settings.DATABASE_HOSTNAME}:{settings.DATABASE_PORT}/{settings.DATABASE_NAME}_test"
+engine = create_engine(SQLALCHEMY_DATABASE_URL)
+TestingSessionMaker = sessionmaker(autoflush=False, autocommit=False, bind=engine)
+
+
+@pytest.fixture()
+def session():
+    Base.metadata.drop_all(bind=engine)
+    Base.metadata.create_all(bind=engine)
+    db = TestingSessionMaker()
+    try:
+        yield db
+    finally:
+        db.close()
+
+
+@pytest.fixture()
+def client(session):
+    def override_get_db():
+        try:
+            yield session
+        finally:
+            session.close()
+    app.dependency_overrides[get_db] = override_get_db
+    yield TestClient(app)
+
+
+@pytest.fixture
+def create_test_user(client):
+    user_data = {
+        "email": "abdullah@gmail.com",
+        "password": "abdullah1234"
+    }
+    response = client.post("/users", json=user_data)
+    assert response.status_code == 201
+    new_user = response.json()
+    new_user["password"] = "abdullah1234"
+    return new_user
+
+
+@pytest.fixture
+def create_test_user2(client):
+    user_data = {
+        "email": "ali@gmail.com",
+        "password": "ali1234"
+    }
+    response = client.post("/users", json=user_data)
+    assert response.status_code == 201
+    new_user = response.json()
+    new_user["password"] = "ali1234"
+    return new_user
+
+
+@pytest.fixture()
+def token(create_test_user):
+    return create_access_token({"user_id": create_test_user["id"]})
+
+
+@pytest.fixture()
+def authorized_client(client, token):
+    client.headers = {
+        **client.headers,
+        "Authorization": f"Bearer {token}"
+    }
+    return client
+
+
+def create_application(application_data):
+    return Application(**application_data)
+
+
+@pytest.fixture
+def test_applications(create_test_user, session):
+    applications_data = [
+        {"company": "Google", "role": "Backend Engineer", "status": "applied", "applied_date": "2026-06-01", "user_id": create_test_user["id"]},
+        {"company": "Meta", "role": "SWE", "status": "interview", "applied_date": "2026-06-10", "user_id": create_test_user["id"]},
+        {"company": "Amazon", "role": "SDE", "status": "rejected", "applied_date": "2026-06-15", "user_id": create_test_user["id"]},
+    ]
+    applications = list(map(create_application, applications_data))
+    session.add_all(applications)
+    session.commit()
+    return session.query(Application).all()

tests/test_applications.py

@@ -0,0 +1,96 @@
+import pytest
+from app.models.application import ApplicationStatus
+
+
+def test_create_application(authorized_client):
+    response = authorized_client.post("/applications", json={
+        "company": "Google",
+        "role": "Backend Engineer",
+        "status": "applied",
+        "applied_date": "2026-06-01",
+        "jd_text": "We need a Python developer",
+        "notes": "Referred by a friend"
+    })
+    assert response.status_code == 201
+    data = response.json()
+    assert data["company"] == "Google"
+    assert data["role"] == "Backend Engineer"
+    assert data["status"] == "applied"
+
+
+def test_create_application_unauthorized(client):
+    response = client.post("/applications", json={
+        "company": "Google",
+        "role": "Backend Engineer",
+        "status": "applied",
+        "applied_date": "2026-06-01"
+    })
+    assert response.status_code == 401
+
+
+def test_get_all_applications(authorized_client, test_applications):
+    response = authorized_client.get("/applications")
+    assert response.status_code == 200
+    assert len(response.json()) == len(test_applications)
+
+
+def test_get_all_applications_unauthorized(client):
+    response = client.get("/applications")
+    assert response.status_code == 401
+
+
+def test_get_one_application(authorized_client, test_applications):
+    response = authorized_client.get(f"/applications/{test_applications[0].id}")
+    assert response.status_code == 200
+    data = response.json()
+    assert data["id"] == test_applications[0].id
+    assert data["company"] == test_applications[0].company
+
+
+def test_get_one_application_not_found(authorized_client):
+    response = authorized_client.get("/applications/-99999")
+    assert response.status_code == 404
+
+
+def test_get_one_application_unauthorized(client, test_applications):
+    response = client.get(f"/applications/{test_applications[0].id}")
+    assert response.status_code == 401
+
+
+def test_update_application(authorized_client, test_applications):
+    response = authorized_client.put(f"/applications/{test_applications[0].id}", json={
+        "status": "interview",
+        "notes": "Got a call back"
+    })
+    assert response.status_code == 200
+    assert response.json()["status"] == "interview"
+    assert response.json()["notes"] == "Got a call back"
+
+
+def test_update_application_not_found(authorized_client):
+    response = authorized_client.put("/applications/-99999", json={
+        "status": "interview"
+    })
+    assert response.status_code == 404
+
+
+def test_update_application_unauthorized(client, test_applications):
+    response = client.put(f"/applications/{test_applications[0].id}", json={
+        "status": "interview"
+    })
+    assert response.status_code == 401
+
+
+def test_delete_application(authorized_client, test_applications):
+    response = authorized_client.delete(f"/applications/{test_applications[0].id}")
+    assert response.status_code == 204
+
+
+def test_delete_application_not_found(authorized_client):
+    response = authorized_client.delete("/applications/-99999")
+    assert response.status_code == 404
+
+
+def test_delete_application_unauthorized(client, test_applications):
+    response = client.delete(f"/applications/{test_applications[0].id}")
+    assert response.status_code == 401

tests/test_users.py

@@ -0,0 +1,72 @@
+import pytest
+from app.schemas.user import UserOut
+
+
+def test_create_user(client):
+    response = client.post("/users", json={
+        "email": "newuser@gmail.com",
+        "password": "password123"
+    })
+    assert response.status_code == 201
+    new_user = UserOut(**response.json())
+    assert new_user.email == "newuser@gmail.com"
+
+
+def test_create_user_duplicate_email(client):
+    client.post("/users", json={"email": "dup@gmail.com", "password": "pass123"})
+    response = client.post("/users", json={"email": "dup@gmail.com", "password": "pass123"})
+    assert response.status_code == 400
+
+
+def test_login_success(client, create_test_user):
+    response = client.post("/login", data={
+        "username": create_test_user["email"],
+        "password": create_test_user["password"]
+    })
+    assert response.status_code == 200
+    assert response.json()["token_type"] == "bearer"
+    assert "access_token" in response.json()
+
+
+def test_login_wrong_password(client, create_test_user):
+    response = client.post("/login", data={
+        "username": create_test_user["email"],
+        "password": "wrongpassword"
+    })
+    assert response.status_code == 401
+
+
+def test_login_wrong_email(client):
+    response = client.post("/login", data={
+        "username": "nonexistent@gmail.com",
+        "password": "somepassword"
+    })
+    assert response.status_code == 401
+
+
+def test_get_all_users(client, create_test_user):
+    response = client.get("/users")
+    assert response.status_code == 200
+    assert len(response.json()) > 0
+
+
+def test_update_password(authorized_client, create_test_user):
+    response = authorized_client.put("/users", json={
+        "old_password": create_test_user["password"],
+        "new_password": "newpassword123"
+    })
+    assert response.status_code == 200
+    assert response.json()["message"] == "Password updated successfully"
+
+
+def test_update_password_wrong_old(authorized_client):
+    response = authorized_client.put("/users", json={
+        "old_password": "wrongoldpassword",
+        "new_password": "newpassword123"
+    })
+    assert response.status_code == 400
+
+
+def test_delete_user(authorized_client, create_test_user):
+    response = authorized_client.delete(f"/users/{create_test_user['id']}")
+    assert response.status_code == 204