first commit

core/apps/accounts/tests/test_auth.py

@@ -0,0 +1,126 @@
+from unittest.mock import patch
+
+import pytest
+from core.apps.accounts.models import ResetToken
+from core.services import SmsService
+from django.contrib.auth import get_user_model
+from django.urls import reverse
+from django_core.models import SmsConfirm
+from pydantic import BaseModel
+from rest_framework import status
+from rest_framework.test import APIClient
+
+
+class TokenModel(BaseModel):
+    access: str
+    refresh: str
+
+
+@pytest.fixture
+def api_client():
+    return APIClient()
+
+
+@pytest.fixture
+def test_user(db):
+    phone = "998999999999"
+    password = "password"
+    user = get_user_model().objects.create_user(phone=phone, first_name="John", last_name="Doe", password=password)
+    return user
+
+
+@pytest.fixture
+def sms_code(test_user):
+    code = "1111"
+    SmsConfirm.objects.create(phone=test_user.phone, code=code)
+    return code
+
+
+@pytest.mark.django_db
+def test_reg_view(api_client):
+    data = {
+        "phone": "998999999991",
+        "first_name": "John",
+        "last_name": "Doe",
+        "password": "password",
+    }
+    with patch.object(SmsService, "send_confirm", return_value=True):
+        response = api_client.post(reverse("auth-register"), data=data)
+    assert response.status_code == status.HTTP_202_ACCEPTED
+    assert response.data["data"]["detail"] == f"Sms {data['phone']} raqamiga yuborildi"
+
+
+@pytest.mark.django_db
+def test_confirm_view(api_client, test_user, sms_code):
+    data = {"phone": test_user.phone, "code": sms_code}
+    response = api_client.post(reverse("auth-confirm"), data=data)
+    assert response.status_code == status.HTTP_202_ACCEPTED
+
+
+@pytest.mark.django_db
+def test_invalid_confirm_view(api_client, test_user):
+    data = {"phone": test_user.phone, "code": "1112"}
+    response = api_client.post(reverse("auth-confirm"), data=data)
+    assert response.status_code == status.HTTP_403_FORBIDDEN
+
+
+@pytest.mark.django_db
+def test_reset_confirmation_code_view(api_client, test_user, sms_code):
+    data = {"phone": test_user.phone, "code": sms_code}
+    response = api_client.post(reverse("auth-confirm"), data=data)
+    assert response.status_code == status.HTTP_202_ACCEPTED
+    assert "token" in response.data["data"]
+
+
+@pytest.mark.django_db
+def test_reset_confirmation_code_view_invalid_code(api_client, test_user):
+    data = {"phone": test_user.phone, "code": "123456"}
+    response = api_client.post(reverse("auth-confirm"), data=data)
+    assert response.status_code == status.HTTP_400_BAD_REQUEST
+
+
+@pytest.mark.django_db
+def test_reset_set_password_view(api_client, test_user):
+    token = ResetToken.objects.create(user=test_user, token="token")
+    data = {"token": token.token, "password": "new_password"}
+    response = api_client.post(reverse("reset-password-reset-password-set"), data=data)
+    assert response.status_code == status.HTTP_200_OK
+
+
+@pytest.mark.django_db
+def test_reset_set_password_view_invalid_token(api_client):
+    token = "test_token"
+    data = {"token": token, "password": "new_password"}
+    with patch.object(get_user_model().objects, "filter", return_value=get_user_model().objects.none()):
+        response = api_client.post(reverse("reset-password-reset-password-set"), data=data)
+    assert response.status_code == status.HTTP_403_FORBIDDEN
+    assert response.data["data"]["detail"] == "Invalid token"
+
+
+@pytest.mark.django_db
+def test_resend_view(api_client, test_user):
+    data = {"phone": test_user.phone}
+    response = api_client.post(reverse("auth-resend"), data=data)
+    assert response.status_code == status.HTTP_200_OK
+
+
+@pytest.mark.django_db
+def test_reset_password_view(api_client, test_user):
+    data = {"phone": test_user.phone}
+    response = api_client.post(reverse("reset-password-reset-password"), data=data)
+    assert response.status_code == status.HTTP_200_OK
+
+
+@pytest.mark.django_db
+def test_me_view(api_client, test_user):
+    api_client.force_authenticate(user=test_user)
+    response = api_client.get(reverse("me-me"))
+    assert response.status_code == status.HTTP_200_OK
+
+
+@pytest.mark.django_db
+def test_me_update_view(api_client, test_user):
+    api_client.force_authenticate(user=test_user)
+    data = {"first_name": "Updated"}
+    response = api_client.patch(reverse("me-user-update"), data=data)
+    assert response.status_code == status.HTTP_200_OK

core/apps/accounts/tests/test_change_password.py

@@ -0,0 +1,77 @@
+import pytest
+from core.apps.accounts.serializers import ChangePasswordSerializer
+from django.contrib.auth import get_user_model
+from django.urls import reverse
+from rest_framework import status
+from rest_framework.test import APIClient
+
+
+@pytest.fixture
+def api_client():
+    return APIClient()
+
+
+@pytest.fixture
+def test_user(db):
+    phone = "9981111111"
+    password = "12345670"
+    user = get_user_model().objects.create_user(phone=phone, password=password, email="test@example.com")
+    return user
+
+
+@pytest.fixture
+def change_password_url():
+    return reverse("change-password-change-password")
+
+
+@pytest.mark.django_db
+def test_change_password_success(api_client, test_user, change_password_url):
+    api_client.force_authenticate(user=test_user)
+    data = {
+        "old_password": "12345670",
+        "new_password": "newpassword",
+    }
+    response = api_client.post(change_password_url, data=data, format="json")
+    assert response.status_code == status.HTTP_200_OK
+    assert response.data["data"]["detail"] == "password changed successfully"
+
+    # Yangi parolni bazadan tekshiramiz
+    test_user.refresh_from_db()
+    assert test_user.check_password("newpassword")
+
+
+@pytest.mark.django_db
+def test_change_password_invalid_old_password(api_client, test_user, change_password_url):
+    api_client.force_authenticate(user=test_user)
+    data = {
+        "old_password": "wrongpassword",
+        "new_password": "newpassword",
+    }
+    response = api_client.post(change_password_url, data=data, format="json")
+    assert response.status_code == status.HTTP_403_FORBIDDEN
+    assert response.data["data"]["detail"] == "invalida password"
+
+
+@pytest.mark.django_db
+def test_change_password_serializer_validation():
+    valid_data = {
+        "old_password": "12345670",
+        "new_password": "newpassword",
+    }
+    serializer = ChangePasswordSerializer(data=valid_data)
+    assert serializer.is_valid()
+
+    invalid_data = {
+        "old_password": "12345670",
+        "new_password": "123",
+    }
+    serializer = ChangePasswordSerializer(data=invalid_data)
+    assert not serializer.is_valid()
+
+
+@pytest.mark.django_db
+def test_change_password_view_permissions(api_client, change_password_url):
+    # autentifikatsiyasiz request
+    api_client.force_authenticate(user=None)
+    response = api_client.post(change_password_url, data={}, format="json")
+    assert response.status_code == status.HTTP_401_UNAUTHORIZED