43 lines
1.1 KiB
Python
43 lines
1.1 KiB
Python
# -*- coding: utf-8 -*-
|
||
"""
|
||
管理端鉴权测试。POST /api/admin 登录，GET /api/admin 鉴权检查。
|
||
"""
|
||
import pytest
|
||
import requests
|
||
|
||
from util import admin_headers
|
||
|
||
|
||
def test_admin_login(base_url):
|
||
"""POST /api/admin 登录成功"""
|
||
r = requests.post(
|
||
f"{base_url}/api/admin",
|
||
json={"username": "admin", "password": "admin123"},
|
||
timeout=10,
|
||
)
|
||
assert r.status_code == 200
|
||
data = r.json()
|
||
assert data.get("success") is True
|
||
assert "token" in data
|
||
assert "user" in data
|
||
|
||
|
||
def test_admin_check_with_token(admin_token, base_url):
|
||
"""GET /api/admin 带 token 鉴权通过"""
|
||
if not admin_token:
|
||
pytest.skip("admin 登录失败，跳过鉴权测试")
|
||
r = requests.get(
|
||
f"{base_url}/api/admin",
|
||
headers=admin_headers(admin_token),
|
||
timeout=10,
|
||
)
|
||
assert r.status_code == 200
|
||
data = r.json()
|
||
assert data.get("success") is True
|
||
|
||
|
||
def test_admin_check_without_token(base_url):
|
||
"""GET /api/admin 无 token 返回 401"""
|
||
r = requests.get(f"{base_url}/api/admin", timeout=10)
|
||
assert r.status_code == 401
|