import pytest import uuid from auth import COOKIE_NAME def unique_email(prefix: str = "counter") -> str: """Generate a unique email for tests sharing the same database.""" return f"{prefix}-{uuid.uuid4().hex[:8]}@example.com" # Protected endpoint tests - without auth @pytest.mark.asyncio async def test_get_counter_requires_auth(client): response = await client.get("/api/counter") assert response.status_code == 401 @pytest.mark.asyncio async def test_increment_counter_requires_auth(client): response = await client.post("/api/counter/increment") assert response.status_code == 401 @pytest.mark.asyncio async def test_get_counter_invalid_cookie(client_factory): async with client_factory.create(cookies={COOKIE_NAME: "invalidtoken"}) as authed: response = await authed.get("/api/counter") assert response.status_code == 401 @pytest.mark.asyncio async def test_increment_counter_invalid_cookie(client_factory): async with client_factory.create(cookies={COOKIE_NAME: "invalidtoken"}) as authed: response = await authed.post("/api/counter/increment") assert response.status_code == 401 # Authenticated counter tests @pytest.mark.asyncio async def test_get_counter_authenticated(client_factory): reg = await client_factory.post( "/api/auth/register", json={"email": unique_email(), "password": "testpass123"}, ) cookies = dict(reg.cookies) async with client_factory.create(cookies=cookies) as authed: response = await authed.get("/api/counter") assert response.status_code == 200 assert "value" in response.json() @pytest.mark.asyncio async def test_increment_counter(client_factory): reg = await client_factory.post( "/api/auth/register", json={"email": unique_email(), "password": "testpass123"}, ) cookies = dict(reg.cookies) async with client_factory.create(cookies=cookies) as authed: # Get current value before = await authed.get("/api/counter") before_value = before.json()["value"] # Increment response = await authed.post("/api/counter/increment") assert response.status_code == 200 assert response.json()["value"] == before_value + 1 @pytest.mark.asyncio async def test_increment_counter_multiple(client_factory): reg = await client_factory.post( "/api/auth/register", json={"email": unique_email(), "password": "testpass123"}, ) cookies = dict(reg.cookies) async with client_factory.create(cookies=cookies) as authed: # Get starting value before = await authed.get("/api/counter") start = before.json()["value"] # Increment 3 times await authed.post("/api/counter/increment") await authed.post("/api/counter/increment") response = await authed.post("/api/counter/increment") assert response.json()["value"] == start + 3 @pytest.mark.asyncio async def test_get_counter_after_increment(client_factory): reg = await client_factory.post( "/api/auth/register", json={"email": unique_email(), "password": "testpass123"}, ) cookies = dict(reg.cookies) async with client_factory.create(cookies=cookies) as authed: before = await authed.get("/api/counter") start = before.json()["value"] await authed.post("/api/counter/increment") await authed.post("/api/counter/increment") response = await authed.get("/api/counter") assert response.json()["value"] == start + 2 # Counter is shared between users @pytest.mark.asyncio async def test_counter_shared_between_users(client_factory): # Create first user reg1 = await client_factory.post( "/api/auth/register", json={"email": unique_email("share1"), "password": "testpass123"}, ) cookies1 = dict(reg1.cookies) async with client_factory.create(cookies=cookies1) as user1: # Get starting value before = await user1.get("/api/counter") start = before.json()["value"] await user1.post("/api/counter/increment") await user1.post("/api/counter/increment") # Create second user - should see the increments reg2 = await client_factory.post( "/api/auth/register", json={"email": unique_email("share2"), "password": "testpass123"}, ) cookies2 = dict(reg2.cookies) async with client_factory.create(cookies=cookies2) as user2: response = await user2.get("/api/counter") assert response.json()["value"] == start + 2 # Second user increments await user2.post("/api/counter/increment") # First user sees the increment async with client_factory.create(cookies=cookies1) as user1: response = await user1.get("/api/counter") assert response.json()["value"] == start + 3