webshop/tests/test_product.py

import os

import pytest
from asgi_csrf import asgi_csrf
from fastapi.testclient import TestClient
from lxml import html
from starsessions import (
    CookieStore,
    SessionStore,
)

from app.main import app

client = TestClient(app)


@pytest.fixture
def app_csrf():
    """Return a CSRF token."""
    return asgi_csrf(app, signing_secret=os.getenv("CSRF_SECRET_KEY"))


@pytest.fixture()
def session_store() -> SessionStore:
    """WIP."""
    return CookieStore(secret_key=os.getenv("SESSION_SECRET_KEY"))


def prepare_request(product_id: str) -> tuple[dict[str, str], str]:
    """Machinery to get back a tuple with headers and a valid CSRF token
    to then use to send a POST request.
    """
    headers = {
        "Accept-Language": "en-US,en;q=0.5",
        "Referer": f"http://localhost:5014/products/{product_id}",
    }
    response_get = client.get(f"/products/{product_id}", headers=headers)

    tree = html.fromstring(response_get.content)
    csrf_token = tree.xpath("//input[@name='csrftoken']")[0].get("value")

    return (headers, csrf_token)


def test_add_product(capsys, app_csrf, session_store):
    """Run tests for:
    - adding a product with no options (size, style), good
    - adding a product with no options, bad (wrong query, missing param)
    - adding a product with options, good
    - adding a product with options, bad (wrong options)

    - removing a product with no options (size, style), good
    - removing a product with no options, bad (wrong query, missing param)
    - removing a product with options, good
    - removing a product with options, bad (wrong options)

    - remove a product entirely using the remove button
    """
    # -- product with no options (size, style)
    headers_no_options, csrf_token_no_options = prepare_request("cap-01")

    data_good_no_options_add = {
        "page": "product",
        "operation": "add",
        "product_id": "stripe_product_abc",
        "product_path": "products/cap-01",
        "price": 30,
        "quantity": 2,
        "csrftoken": csrf_token_no_options,
    }

    response_good_no_options_add = client.post(
        "/checkout", data=data_good_no_options_add, headers=headers_no_options
    )

    with capsys.disabled():
        print(f"client => {client.cookies}")

    assert response_good_no_options_add.status_code == 200

    data_good_no_options_remove = {
        "page": "product",
        "operation": "remove",
        "product_id": "stripe_product_abc",
        "product_path": "products/cap-01",
        "price": 30,
        "quantity": 1,
        "csrftoken": csrf_token_no_options,
    }

    response_good_no_options_remove = client.post(
        "/checkout", data=data_good_no_options_remove, headers=headers_no_options
    )

    assert response_good_no_options_remove.status_code == 200

    # wrong options
    data_bad_no_options_wrong_add = {
        "page": "product",
        "product_id": "stripe_product_abc",
        "product_path": "products/cap-01",
        "price": 30,
        "size": None,
        "style": "black",
        "quantity": 2,
        "csrftoken": csrf_token_no_options,
    }

    response_bad_no_options_add = client.post(
        "/checkout", data=data_bad_no_options_wrong_add, headers=headers_no_options
    )

    assert response_bad_no_options_add.status_code == 422

    data_bad_no_options_wrong_remove = {
        "page": "product",
        "product_id": "stripe_product_abc",
        "product_path": "products/cap-01",
        "price": 30,
        "size": None,
        "style": "black",
        "quantity": 2,
        "csrftoken": csrf_token_no_options,
    }

    response_bad_no_options_remove = client.post(
        "/checkout", data=data_bad_no_options_wrong_remove, headers=headers_no_options
    )

    assert response_bad_no_options_remove.status_code == 422

    # -- product with options (size, style)

    headers_with_options, csrf_token_with_options = prepare_request("tshirt-darkfi")

    data_good_with_options_add = {
        "page": "product",
        "operation": "add",
        "product_id": "stripe_product_tshirt-df",
        "product_path": "products/tshirt-darkfi",
        "price": 50,
        "quantity": 3,
        "size": "m",
        "style": "black",
        "csrftoken": csrf_token_with_options,
    }

    response_good_with_options_add = client.post(
        "/checkout", data=data_good_with_options_add, headers=headers_with_options
    )

    assert response_good_with_options_add.status_code == 200

    data_good_with_options_remove = {
        "page": "product",
        "operation": "remove",
        "product_id": "stripe_product_tshirt-df",
        "product_path": "products/tshirt-darkfi",
        "price": 50,
        "quantity": 2,
        "size": "m",
        "style": "black",
        "csrftoken": csrf_token_with_options,
    }

    response_good_with_options_remove = client.post(
        "/checkout", data=data_good_with_options_remove, headers=headers_with_options
    )

    assert response_good_with_options_remove.status_code == 200

    # wrong options
    data_bad_with_options_wrong_add = {
        "page": "product",
        "operation": "add",
        "product_id": "stripe_product_tshirt-df",
        "product_path": "products/tshirt-darkfi",
        "price": 50,
        "quantity": 5,
        "size": "x",
        "style": "yellow",
        "csrftoken": csrf_token_with_options,
    }

    response_bad_with_options_add = client.post(
        "/checkout", data=data_bad_with_options_wrong_add, headers=headers_with_options
    )

    assert response_bad_with_options_add.status_code == 422

    data_bad_with_options_wrong_remove = {
        "page": "product",
        "operation": "remove",
        "product_id": "stripe_product_tshirt-df",
        "product_path": "products/tshirt-darkfi",
        "price": 50,
        "quantity": 5,
        "size": "x",
        "style": "yellow",
        "csrftoken": csrf_token_with_options,
    }

    response_bad_with_options_remove = client.post(
        "/checkout",
        data=data_bad_with_options_wrong_remove,
        headers=headers_with_options,
    )

    assert response_bad_with_options_remove.status_code == 422