recipes/cookbook/tests/api/test_api_space.py

import json

import pytest
from django.contrib import auth
from django.contrib.auth.models import Group
from django.urls import reverse
from django_scopes import scopes_disabled

from cookbook.models import UserSpace
from recipes import settings

LIST_URL = 'api:space-list'
DETAIL_URL = 'api:space-detail'


@pytest.mark.parametrize("arg", [
    ['a_u', 403, 0],
    ['g1_s1', 200, 1],
    ['u1_s1', 200, 1],
    ['a1_s1', 200, 1],
    ['a2_s1', 200, 1],
])
def test_list_permission(arg, request, space_1, a1_s1):
    space_1.created_by = auth.get_user(a1_s1)
    space_1.save()
    c = request.getfixturevalue(arg[0])
    result = c.get(reverse(LIST_URL))
    assert result.status_code == arg[1]
    if arg[1] == 200:
        assert len(json.loads(result.content)['results']) == arg[2]


def test_list_multiple(u1_s1, space_1, space_2):
    # only member of one space
    u1_response = json.loads(u1_s1.get(reverse(LIST_URL)).content)
    assert len(u1_response['results']) == 1

    # add user to a second space
    us = UserSpace.objects.create(user=auth.get_user(u1_s1), space=space_2)
    us.groups.add(Group.objects.get(name='admin'))
    u1_response = json.loads(u1_s1.get(reverse(LIST_URL)).content)
    assert len(u1_response['results']) == 2

    # test /current/ endpoint to only return active space
    u1_response = json.loads(u1_s1.get(reverse('api:space-current')).content)
    assert u1_response['id'] == space_1.id


@pytest.mark.parametrize("arg", [
    ['a_u', 403],
    ['g1_s1', 403],
    ['u1_s1', 403],
    ['a1_s1', 200],
    ['g1_s2', 403],
    ['u1_s2', 403],
    ['a1_s2', 404],
])
def test_update(arg, request, space_1, a1_s1):
    space_1.created_by = auth.get_user(a1_s1)
    space_1.save()
    with scopes_disabled():
        c = request.getfixturevalue(arg[0])
        r = c.patch(reverse(DETAIL_URL, args={space_1.id}), {'message': 'new'},
                    content_type='application/json')
        response = json.loads(r.content)
        assert r.status_code == arg[1]
        if r.status_code == 200:
            assert response['message'] == 'new'


@pytest.mark.parametrize("arg", [
    ['a_u', 403],
    ['g1_s1', 201],
    ['u1_s1', 201],
    ['a1_s1', 201],
])
def test_add(arg, request, u1_s2):
    c = request.getfixturevalue(arg[0])
    r = c.post(reverse(LIST_URL), {'name': 'test'}, content_type='application/json')
    assert r.status_code == arg[1]


def test_delete(u1_s1, u1_s2, a1_s1, space_1):
    space_1.created_by = auth.get_user(a1_s1)
    space_1.save()
    # user cannot delete space
    r = u1_s1.delete(reverse(DETAIL_URL, args={space_1.id}))
    assert r.status_code == 403

    # event the space owner cannot delete his space over the api (this might change later but for now it's only available in the UI)
    r = a1_s1.delete(reverse(DETAIL_URL, args={space_1.id}))
    assert r.status_code == 405


def test_superuser_parameters(space_1, a1_s1, s1_s1):
    # ------- test as normal user -------
    response = a1_s1.post(reverse(LIST_URL), {'name': 'test', 'ai_enabled': not settings.SPACE_AI_ENABLED, 'ai_credits_monthly': settings.SPACE_AI_CREDITS_MONTHLY + 100, 'ai_credits_balance': 100},
                           content_type='application/json')

    assert response.status_code == 201
    response = json.loads(response.content)
    assert response['ai_enabled'] == settings.SPACE_AI_ENABLED
    assert response['ai_credits_monthly'] == settings.SPACE_AI_CREDITS_MONTHLY
    assert response['ai_credits_balance'] == 0

    space_1.created_by = auth.get_user(a1_s1)
    space_1.ai_enabled = False
    space_1.ai_credits_monthly = 0
    space_1.ai_credits_balance = 0
    space_1.save()

    response = a1_s1.patch(reverse(DETAIL_URL, args={space_1.id}), {'ai_enabled': True, 'ai_credits_monthly': 100, 'ai_credits_balance': 100},
                           content_type='application/json')

    assert response.status_code == 200

    space_1.refresh_from_db()
    assert space_1.ai_enabled == False
    assert space_1.ai_credits_monthly == 0
    assert space_1.ai_credits_balance == 0

    # ------- test as superuser -------

    response = s1_s1.post(reverse(LIST_URL),
                          {'name': 'test', 'ai_enabled': not settings.SPACE_AI_ENABLED, 'ai_credits_monthly': settings.SPACE_AI_CREDITS_MONTHLY + 100, 'ai_credits_balance': 100},
                          content_type='application/json')

    assert response.status_code == 201
    response = json.loads(response.content)
    assert response['ai_enabled'] == settings.SPACE_AI_ENABLED
    assert response['ai_credits_monthly'] == settings.SPACE_AI_CREDITS_MONTHLY
    assert response['ai_credits_balance'] == 0

    space_1.created_by = auth.get_user(s1_s1)
    space_1.ai_enabled = False
    space_1.ai_credits_monthly = 0
    space_1.ai_credits_balance = 0
    space_1.save()

    response = s1_s1.patch(reverse(DETAIL_URL, args={space_1.id}), {'ai_enabled': True, 'ai_credits_monthly': 100, 'ai_credits_balance': 100},
                           content_type='application/json')

    assert response.status_code == 200

    space_1.refresh_from_db()
    assert space_1.ai_enabled == True
    assert space_1.ai_credits_monthly == 100
    assert space_1.ai_credits_balance == 100