test: baseline test suite — 86 tests covering auth, CRUD, settings, chat, terraform, reports, terminal

backend/tests/test_oci_config.py

@@ -0,0 +1,101 @@
+"""
+Tests for OCI Config CRUD operations.
+"""
+import io
+import pytest
+
+# Dummy PEM key for uploads (valid RSA format header/footer, not a real key)
+_DUMMY_PEM = b"""-----BEGIN RSA PRIVATE KEY-----
+MIIBogIBAAJBALRiMLAHudeSA/x3hB2f+2NRkJmcOUNKwNuvTT0GKQFYSNDF0FNv
+TESTDATAFORTHEMOCKPEMFILEXYZABC0123456789ABCDEF0123456789
+-----END RSA PRIVATE KEY-----
+"""
+
+# Module-level storage for IDs across ordered tests
+_state: dict = {}
+
+
+@pytest.mark.anyio
+async def test_create_oci_config(client, admin_headers):
+    """POST /api/oci/config — create via multipart form."""
+    r = await client.post(
+        "/api/oci/config",
+        data={
+            "tenancy_name": "TestTenancy",
+            "tenancy_ocid": "ocid1.tenancy.oc1..test",
+            "user_ocid": "ocid1.user.oc1..test",
+            "fingerprint": "aa:bb:cc:dd",
+            "region": "us-ashburn-1",
+            "compartment_id": "ocid1.compartment.oc1..test",
+            "auth_type": "api_key",
+        },
+        files={"private_key": ("key.pem", io.BytesIO(_DUMMY_PEM), "application/x-pem-file")},
+        headers=admin_headers,
+    )
+    assert r.status_code == 200, r.text
+    body = r.json()
+    assert "id" in body
+    _state["cid"] = body["id"]
+
+
+@pytest.mark.anyio
+async def test_list_oci_configs(client, admin_headers):
+    """GET /api/oci/configs — list must include the created config."""
+    r = await client.get("/api/oci/configs", headers=admin_headers)
+    assert r.status_code == 200
+    configs = r.json()
+    assert isinstance(configs, list)
+    assert any(c["id"] == _state["cid"] for c in configs)
+
+
+@pytest.mark.anyio
+async def test_update_oci_config(client, admin_headers):
+    """PUT /api/oci/configs/{cid} — update tenancy_name via multipart form."""
+    cid = _state["cid"]
+    r = await client.put(
+        f"/api/oci/configs/{cid}",
+        data={
+            "tenancy_name": "Updated",
+            "region": "us-ashburn-1",
+        },
+        headers=admin_headers,
+    )
+    assert r.status_code == 200, r.text
+
+
+@pytest.mark.anyio
+async def test_delete_oci_config(client, admin_headers):
+    """DELETE /api/oci/configs/{cid} — remove config."""
+    cid = _state["cid"]
+    r = await client.delete(f"/api/oci/configs/{cid}", headers=admin_headers)
+    assert r.status_code == 200, r.text
+
+
+@pytest.mark.anyio
+async def test_user_isolation(client, admin_headers, user_headers):
+    """User A creates a config; user B cannot see it in their list."""
+    # Admin creates a config
+    r = await client.post(
+        "/api/oci/config",
+        data={
+            "tenancy_name": "IsolationTest",
+            "tenancy_ocid": "ocid1.tenancy.oc1..isolation",
+            "user_ocid": "ocid1.user.oc1..isolation",
+            "fingerprint": "ee:ff:00:11",
+            "region": "eu-frankfurt-1",
+            "auth_type": "api_key",
+        },
+        files={"private_key": ("key.pem", io.BytesIO(_DUMMY_PEM), "application/x-pem-file")},
+        headers=admin_headers,
+    )
+    assert r.status_code == 200
+    admin_cid = r.json()["id"]
+
+    # Regular user lists configs — should NOT see admin's config
+    r2 = await client.get("/api/oci/configs", headers=user_headers)
+    assert r2.status_code == 200
+    user_ids = [c["id"] for c in r2.json()]
+    assert admin_cid not in user_ids
+
+    # Cleanup
+    await client.delete(f"/api/oci/configs/{admin_cid}", headers=admin_headers)