rar-autopass/tests/test_web_badge.py

"""Teste US-011 (PRD 3.5): badge cu contoare pe tab-uri (atentionari).

Badge doar cand contorul > 0; numar corect scoped pe cont; aria-label cu sens.
"""

from __future__ import annotations

import json
import os
import re
import tempfile

import pytest
from starlette.testclient import TestClient


def _create_account_user(email: str, name: str = "Service", password: str = "parolasecreta10"):
    from app.accounts import create_account
    from app.users import create_user
    from app.db import get_connection

    conn = get_connection()
    try:
        acct_id = create_account(conn, name, active=True)
        create_user(conn, acct_id, email, password)
        return acct_id
    finally:
        conn.close()


def _login(client, email: str, password: str = "parolasecreta10") -> None:
    resp = client.get("/login")
    m = re.search(r'name="csrf_token"\s+value="([^"]+)"', resp.text) or \
        re.search(r'value="([^"]+)"\s+name="csrf_token"', resp.text)
    assert m
    resp = client.post("/login", data={"email": email, "parola": password, "csrf_token": m.group(1)})
    assert resp.status_code == 303


def _ins(acct: int, status: str) -> None:
    from app.db import get_connection
    conn = get_connection()
    try:
        conn.execute(
            "INSERT INTO submissions (idempotency_key, account_id, status, payload_json) VALUES (?, ?, ?, ?)",
            (f"k-{os.urandom(5).hex()}", acct, status, json.dumps({"vin": "X", "prestatii": []})),
        )
        conn.commit()
    finally:
        conn.close()


def _tab_link(html: str, elem_id: str) -> str:
    """Extrage tag-ul <a ...>...</a> al tab-ului cu id-ul dat."""
    m = re.search(rf'<a id="{elem_id}".*?</a>', html, re.DOTALL)
    assert m, f"Tab {elem_id} negasit"
    return m.group(0)


@pytest.fixture()
def client(monkeypatch):
    tmp = tempfile.mkdtemp()
    monkeypatch.setenv("AUTOPASS_DB_PATH", os.path.join(tmp, "badge.db"))
    monkeypatch.setenv("AUTOPASS_WEB_AUTH_REQUIRED", "true")
    from app.config import get_settings
    get_settings.cache_clear()
    from app.web import ratelimit
    ratelimit._hits.clear()
    from app.main import app
    with TestClient(app, follow_redirects=False) as c:
        yield c
    ratelimit._hits.clear()
    get_settings.cache_clear()


def test_badge_mapari(client):
    """US-009: cu operatii needs_mapping, intrarea Mapari din meniu poarta un badge cu numar."""
    acct = _create_account_user("bm@test.com")
    _ins(acct, "needs_mapping")
    _ins(acct, "needs_mapping")
    _login(client, "bm@test.com")

    resp = client.get("/")
    assert resp.status_code == 200
    html = resp.text
    # US-009: Mapari e acum in meniu (nu tab); badgeul apare in intrarea meniului
    idx = html.find('href="/?tab=mapari"')
    assert idx != -1, "Intrarea Mapari lipseste din meniu"
    # Cauta badgeul in contextul link-ului Mapari
    window = html[idx:idx + 300]
    assert "tab-badge" in window, "Badgeul (tab-badge) trebuie sa apara langa intrarea Mapari"
    assert "2" in window, "Contorul 2 trebuie sa apara in badge-ul Mapari"


def test_badge_trimiteri_blocate(client):
    """US-003 (3.6): cu randuri blocate, marcajul de atentie apare in heading-ul
    sectiunii 'Trimiterile tale' de pe Acasa (tab-ul Trimiteri a disparut)."""
    acct = _create_account_user("bt@test.com")
    _ins(acct, "needs_data")
    _ins(acct, "error")
    _login(client, "bt@test.com")

    resp = client.get("/")
    assert resp.status_code == 200
    html = resp.text
    assert 'id="tab-coada"' not in html  # tab-ul a fost eliminat
    idx = html.find("Trimiterile tale")
    assert idx != -1, "sectiunea Trimiteri lipseste de pe Acasa"
    near = html[idx:idx + 400]
    assert "tab-badge" in near
    assert "2" in near


def test_badge_zero_ascuns(client):
    """Fara nimic de rezolvat, niciun badge."""
    _create_account_user("bz@test.com")
    _login(client, "bz@test.com")

    resp = client.get("/")
    assert resp.status_code == 200
    assert "tab-badge" not in resp.text


def test_badge_scoped_pe_cont(client):
    """Badge-ul numara doar submission-urile contului propriu."""
    acct1 = _create_account_user("bs1@test.com", name="C1")
    _create_account_user("bs2@test.com", name="C2")
    _ins(acct1, "needs_mapping")

    _login(client, "bs2@test.com")
    resp = client.get("/")
    assert "tab-badge" not in resp.text  # contul 2 nu are nimic