2f2b6382fa
Expand JWT auth integration tests from 17 to 33 cases
...
Add comprehensive edge-case coverage for issue #1624 :
- Admin delete user endpoint (5 tests): successful delete, self-delete
prevention, nonexistent user 404, non-admin 403, missing token rejection
- Admin role change gaps (2 tests): nonexistent user 404, non-admin 403
- Input validation (3 tests): invalid email 422, short password 422,
missing fields 422 for both register and login
- Token edge cases (4 tests): malformed token, wrong-secret token,
deleted user token, deleted user refresh
- Token claim verification (1 test): login tokens contain correct claims
All tests use mocked DB fixtures and require no live database.
Closes leeworks-agents/SPARC#1624
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-20 06:05:54 +00:00
b32eebff8a
ci: enable ruff linting and pytest in CI pipeline
...
Uncomment the ruff check and pytest steps in the Gitea Actions build
workflow so that linting violations and test failures block image builds.
Fix all pre-existing ruff violations (E402 import ordering in analyzer.py,
F821 undefined name in api.py, I001 unsorted imports in test files, F401
unused import in test_rate_limit.py).
Closes leeworks-agents/SPARC#1559
Closes leeworks-agents/SPARC#1560
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-19 20:06:10 +00:00
ae9f257dcb
test(auth): add comprehensive JWT authentication test suite
...
Add 17 tests in tests/test_auth.py covering all auth flows:
- Registration: first user admin, subsequent user, duplicate email
- Login: valid credentials, invalid credentials
- Protected routes: valid token, missing token, expired token, wrong token type
- Token refresh: valid refresh, invalid refresh, access-as-refresh rejected
- Admin endpoints: list users, change role, own-role prevention, permission checks
All tests use mocked database (no live DB required).
Closes leeworks-agents/SPARC#10
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-26 04:24:12 +00:00
agent-company