63 lines
2.6 KiB
Python
63 lines
2.6 KiB
Python
"""Знание URL занятия не даёт курсанту доступ к чужому АРМ."""
|
||
|
||
import importlib
|
||
import time
|
||
from uuid import uuid4
|
||
|
||
import pytest
|
||
from fastapi.testclient import TestClient
|
||
|
||
from app.api.auth import Principal
|
||
from app.domain.roles import Role
|
||
from app.main import app
|
||
from app.session.hub import hub
|
||
|
||
|
||
@pytest.fixture
|
||
def client():
|
||
with TestClient(app) as test_client:
|
||
test_client.post("/api/auth/dev-token")
|
||
hub.journal = None
|
||
yield test_client
|
||
|
||
|
||
def test_trainee_cannot_open_foreign_or_unassigned_call_or_station(client, monkeypatch):
|
||
session_id = uuid4()
|
||
with client.websocket_connect(f"/ws/control/{session_id}") as control:
|
||
control.send_json({"type": "scenario.start", "scenario_id": "fire-apartment-l2",
|
||
"trainee": "Назначенный", "mode": "training"})
|
||
deadline = time.monotonic() + 3
|
||
while hub.get(session_id) is None and time.monotonic() < deadline:
|
||
time.sleep(0.02)
|
||
state = hub.get(session_id)
|
||
assert state is not None
|
||
|
||
owner_id, foreign_id = uuid4(), uuid4()
|
||
modules = {
|
||
"call": importlib.import_module("app.api.ws.call"),
|
||
"station": importlib.import_module("app.api.ws.station"),
|
||
}
|
||
for assigned in (owner_id, None):
|
||
state.trainee_id = assigned
|
||
for role_name, module in modules.items():
|
||
who = Principal(login="foreign", full_name="Чужой",
|
||
role=Role.TRAINEE, trainee_id=foreign_id)
|
||
monkeypatch.setattr(module, "principal_of", lambda _ws, user=who: user)
|
||
with client.websocket_connect(f"/ws/{role_name}/{session_id}") as socket:
|
||
event = socket.receive_json()
|
||
assert event["type"] == "error" and event["code"] == "forbidden"
|
||
|
||
state.trainee_id = owner_id
|
||
for role_name, module in modules.items():
|
||
who = Principal(login="owner", full_name="Назначенный",
|
||
role=Role.TRAINEE, trainee_id=owner_id)
|
||
monkeypatch.setattr(module, "principal_of", lambda _ws, user=who: user)
|
||
with client.websocket_connect(f"/ws/{role_name}/{session_id}") as socket:
|
||
socket.send_json({"type": "unknown"})
|
||
for _ in range(8):
|
||
event = socket.receive_json()
|
||
if event["type"] == "error":
|
||
assert event["code"] == "unsupported_event"
|
||
break
|
||
else:
|
||
raise AssertionError("владелец занятия не допущен")
|