v1.5.4: test infrastructure + bug fixes + CI/CD + deploy gate

- 6 new test files: route discovery, strict permissions, role switch, CRUD operations, 500 error protection - permission_config.py: central permission definitions for all 110+ routes - Bug fixes: is_active checkbox in users_edit, int(id) 500 crash, missing validation in users_create/users_delete - Pre-commit hooks: lint + static routing tests - GitHub Actions CI: full pytest suite on push - Deploy gate: pytest runs before deploy, aborts on failure - All 3 deploy scripts: --skip-tests flag support
2026-05-22 20:45:27 +03:00
parent 64991f0228
commit bd048ea23d
18 changed files with 1989 additions and 10 deletions
@@ -0,0 +1,97 @@
+"""Smoke test — проверяет что сервер отвечает на все основные маршруты.
+Запуск: TEST_SERVER_URL=http://localhost:8000 pytest tests/test_smoke_server.py -v
+
+Работает против запущенного сервера (локально или удалённо).
+Не требует БД — просто проверяет что ответ не 404 и не 502.
+"""
+
+import os
+import httpx
+import pytest
+
+SERVER_URL = os.environ.get("TEST_SERVER_URL", "http://localhost:8000")
+
+# All GET routes from the sidebar + common pages
+ROUTES_TO_CHECK = [
+    "/service/dashboard",
+    "/service/charts",
+    "/service/ceo",
+    "/service/customers",
+    "/service/objects",
+    "/service/sla",
+    "/service/questionnaire",
+    "/service/passports",
+    "/service/users",
+    "/service/assignments",
+    "/service/tasks",
+    "/service/reports",
+    "/service/incidents",
+    "/service/checklist",
+    "/service/documents/",
+    "/service/documents/tech-access",
+    "/service/blog",
+    "/service/cases",
+    "/service/ideas",
+    "/service/questionnaire-config",
+    "/service/formulas",
+    "/service/coefficients",
+    "/service/coefficients/test",
+    "/service/bot-settings",
+    "/service/bot-settings/responses",
+    "/service/bot-settings/features",
+    "/service/bot-settings/categories",
+    "/service/bot-settings/kb",
+    "/service/bot-settings/conversations",
+    "/service/bot-settings/users",
+    "/service/bot-settings/test-runner",
+    "/service/bot-settings/analytics",
+    "/service/portal-settings",
+    "/service/role-settings",
+    "/service/quick-menu",
+]
+
+# API routes (should work with or without auth)
+API_ROUTES = [
+    "/service/api/shs",
+    "/service/api/changelog",
+    "/service/api/quick-menu",
+]
+
+
+@pytest.fixture(scope="module")
+def client():
+    with httpx.Client(base_url=SERVER_URL, follow_redirects=False, timeout=10) as c:
+        yield c
+
+
+class TestServerReachable:
+    def test_health(self, client):
+        resp = client.get("/health")
+        assert resp.status_code == 200
+
+    def test_login_page(self, client):
+        resp = client.get("/service/login")
+        assert resp.status_code == 200
+
+    def test_root_redirect(self, client):
+        resp = client.get("/")
+        assert resp.status_code == 200 or resp.status_code == 302
+
+
+class TestAuthPagesRedirect:
+    """Without auth, should redirect to login (302) or show login page (200)."""
+
+    @pytest.mark.parametrize("path", ROUTES_TO_CHECK)
+    def test_redirect_to_login(self, client, path):
+        resp = client.get(path, follow_redirects=False)
+        assert resp.status_code in (200, 302, 403), \
+            f"GET {path}: got {resp.status_code} (expected 302 redirect or 200/403)"
+
+
+class TestApiRoutes:
+    """API routes bypass auth middleware — should not 404."""
+
+    @pytest.mark.parametrize("path", API_ROUTES)
+    def test_api_not_404(self, client, path):
+        resp = client.get(path)
+        assert resp.status_code != 404, f"API {path} returned 404 (route missing)"