test: add integration tests for configuration API and database operations

2026-03-13 15:18:46 +08:00
parent 490a2172b8
commit 72745456d2
3 changed files with 566 additions and 0 deletions
@@ -0,0 +1,127 @@
+import { test, expect } from '@playwright/test';
+
+test.describe('配置权限验证测试', () => {
+  test('未登录访问配置API - GET请求', async ({ request }) => {
+    const response = await request.get('/api/admin/config');
+    
+    expect(response.status()).toBe(403);
+    const body = await response.json();
+    expect(body.success).toBe(false);
+    expect(body.error).toBeDefined();
+  });
+
+  test('未登录访问配置API - POST请求', async ({ request }) => {
+    const newConfig = {
+      key: 'test_config',
+      value: { enabled: true },
+      category: 'feature'
+    };
+    
+    const response = await request.post('/api/admin/config', {
+      data: newConfig
+    });
+    
+    expect(response.status()).toBe(403);
+    const body = await response.json();
+    expect(body.success).toBe(false);
+    expect(body.error).toBeDefined();
+  });
+
+  test('未登录访问配置API - PUT请求', async ({ request }) => {
+    const updates = [
+      { key: 'feature_services', value: { enabled: false } }
+    ];
+    
+    const response = await request.put('/api/admin/config', {
+      data: { configs: updates }
+    });
+    
+    expect(response.status()).toBe(403);
+    const body = await response.json();
+    expect(body.success).toBe(false);
+    expect(body.error).toBeDefined();
+  });
+
+  test('未登录访问配置API - DELETE请求', async ({ request }) => {
+    const response = await request.delete('/api/admin/config?key=feature_services');
+    
+    expect(response.status()).toBe(403);
+    const body = await response.json();
+    expect(body.success).toBe(false);
+    expect(body.error).toBeDefined();
+  });
+
+  test('管理员访问配置API - GET请求成功', async ({ page, request }) => {
+    await page.goto('/admin/login');
+    await page.fill('input[type="email"]', 'admin@novalon.cn');
+    await page.fill('input[type="password"]', 'admin123456');
+    await page.click('button[type="submit"]');
+    await page.waitForURL('/admin');
+    
+    const response = await request.get('/api/admin/config');
+    
+    expect(response.status()).toBe(200);
+    const body = await response.json();
+    expect(body.success).toBe(true);
+    expect(body.configs).toBeDefined();
+  });
+
+  test('管理员访问配置API - POST请求成功', async ({ page, request }) => {
+    await page.goto('/admin/login');
+    await page.fill('input[type="email"]', 'admin@novalon.cn');
+    await page.fill('input[type="password"]', 'admin123456');
+    await page.click('button[type="submit"]');
+    await page.waitForURL('/admin');
+    
+    const newConfig = {
+      key: 'test_config_' + Date.now(),
+      value: { enabled: true },
+      category: 'feature'
+    };
+    
+    const response = await request.post('/api/admin/config', {
+      data: newConfig
+    });
+    
+    expect(response.status()).toBe(201);
+    const body = await response.json();
+    expect(body.success).toBe(true);
+    expect(body.configs).toBeDefined();
+  });
+
+  test('管理员访问配置API - PUT请求成功', async ({ page, request }) => {
+    await page.goto('/admin/login');
+    await page.fill('input[type="email"]', 'admin@novalon.cn');
+    await page.fill('input[type="password"]', 'admin123456');
+    await page.click('button[type="submit"]');
+    await page.waitForURL('/admin');
+    
+    const updates = [
+      { key: 'feature_services', value: { enabled: false } }
+    ];
+    
+    const response = await request.put('/api/admin/config', {
+      data: { configs: updates }
+    });
+    
+    expect(response.status()).toBe(200);
+    const body = await response.json();
+    expect(body.success).toBe(true);
+    expect(body.configs).toBeDefined();
+  });
+
+  test('管理员访问配置API - DELETE请求成功', async ({ page, request }) => {
+    await page.goto('/admin/login');
+    await page.fill('input[type="email"]', 'admin@novalon.cn');
+    await page.fill('input[type="password"]', 'admin123456');
+    await page.click('button[type="submit"]');
+    await page.waitForURL('/admin');
+    
+    const response = await request.delete('/api/admin/config?key=feature_services');
+    
+    expect(response.status()).toBe(200);
+    const body = await response.json();
+    expect(body.success).toBe(true);
+    expect(body.data).toBeDefined();
+  });
+});