cryptorugmunch
9db3f26f95
Some checks failed
- AST-extract all remaining routes from api.py into routers/*.py - Group routes by OpenAPI tag (AI, Advanced, Agency, ..., x402) - Keep existing auth/health/scraping/templates routers; add *_api.py for remaining routes of those tags - Move shared helpers/models/variables with the routes that need them - Update tests/test_api.py to import vision helpers from routers.vision - Regenerate openapi.json (186 paths) - All 497 tests pass; ruff clean
70 lines
2.4 KiB
Python
70 lines
2.4 KiB
Python
# SPDX-License-Identifier: MIT
|
|
# Copyright (c) 2026 Rug Munch Media LLC
|
|
#
|
|
# Part of Pry — https://git.rugmunch.io/RugMunchMedia/pryscraper
|
|
# Licensed under MIT.
|
|
"""Tests for API helpers and auth."""
|
|
|
|
from unittest.mock import patch
|
|
|
|
import pytest
|
|
from fastapi.testclient import TestClient
|
|
|
|
from api import app
|
|
|
|
|
|
@pytest.fixture
|
|
def client() -> TestClient:
|
|
return TestClient(app)
|
|
|
|
|
|
def test_get_or_key_from_env(monkeypatch) -> None:
|
|
monkeypatch.setattr("api.settings.openrouter_api_key", "sk-test-key-123")
|
|
from routers.vision import _get_or_key
|
|
|
|
key = _get_or_key()
|
|
assert key == "sk-test-key-123"
|
|
|
|
|
|
def test_get_or_key_empty_when_not_set(monkeypatch) -> None:
|
|
monkeypatch.setattr("api.settings.openrouter_api_key", "")
|
|
monkeypatch.setattr("os.path.isfile", lambda p: False)
|
|
from routers.vision import _get_or_key
|
|
|
|
key = _get_or_key()
|
|
assert key is None
|
|
|
|
|
|
def test_vision_models_fallback_list() -> None:
|
|
from routers.vision import VISION_MODELS_FALLBACK
|
|
|
|
assert len(VISION_MODELS_FALLBACK) >= 3
|
|
assert all("free" in m for m in VISION_MODELS_FALLBACK)
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_api_key_required_when_set(client: TestClient, monkeypatch) -> None:
|
|
"""Protected endpoints require a valid Bearer PRY_API_KEY."""
|
|
monkeypatch.setattr("api.settings.api_key", "secret-pry-key")
|
|
# Disable x402 payment gating so we can test auth in isolation.
|
|
with patch("x402_middleware.X402Middleware.__call__", lambda self, scope, receive, send: self.app(scope, receive, send)):
|
|
resp = client.post("/v1/scrape", json={"url": "https://example.com"})
|
|
assert resp.status_code == 401
|
|
|
|
with patch("x402_middleware.X402Middleware.__call__", lambda self, scope, receive, send: self.app(scope, receive, send)):
|
|
resp = client.post(
|
|
"/v1/scrape",
|
|
json={"url": "https://example.com"},
|
|
headers={"authorization": "Bearer wrong-key"},
|
|
)
|
|
assert resp.status_code == 401
|
|
|
|
with patch("x402_middleware.X402Middleware.__call__", lambda self, scope, receive, send: self.app(scope, receive, send)):
|
|
resp = client.post(
|
|
"/v1/scrape",
|
|
json={"url": "https://example.com"},
|
|
headers={"authorization": "Bearer secret-pry-key"},
|
|
)
|
|
# auth passes; endpoint returns 402 because we did not mock scraper, which is fine
|
|
assert resp.status_code in (200, 402)
|
|
|