workflows testing

tests/unit/middleware/test_middleware.py

@@ -0,0 +1,72 @@
+# tests/test_middleware.py
+from unittest.mock import Mock, patch
+
+import pytest
+
+from middleware.auth import AuthManager
+from middleware.rate_limiter import RateLimiter
+
+@pytest.mark.unit
+@pytest.mark.auth  # for auth manager tests
+class TestRateLimiter:
+    def test_rate_limiter_allows_requests(self):
+        """Test rate limiter allows requests within limit"""
+        limiter = RateLimiter()
+        client_id = "test_client"
+
+        # Should allow first request
+        assert (
+            limiter.allow_request(client_id, max_requests=10, window_seconds=3600)
+            is True
+        )
+
+        # Should allow subsequent requests within limit
+        for _ in range(5):
+            assert (
+                limiter.allow_request(client_id, max_requests=10, window_seconds=3600)
+                is True
+            )
+
+    def test_rate_limiter_blocks_excess_requests(self):
+        """Test rate limiter blocks requests exceeding limit"""
+        limiter = RateLimiter()
+        client_id = "test_client_blocked"
+        max_requests = 3
+
+        # Use up the allowed requests
+        for _ in range(max_requests):
+            assert limiter.allow_request(client_id, max_requests, 3600) is True
+
+        # Next request should be blocked
+        assert limiter.allow_request(client_id, max_requests, 3600) is False
+
+
+class TestAuthManager:
+    def test_password_hashing_and_verification(self):
+        """Test password hashing and verification"""
+        auth_manager = AuthManager()
+        password = "test_password_123"
+
+        # Hash password
+        hashed = auth_manager.hash_password(password)
+
+        # Verify correct password
+        assert auth_manager.verify_password(password, hashed) is True
+
+        # Verify incorrect password
+        assert auth_manager.verify_password("wrong_password", hashed) is False
+
+    def test_jwt_token_creation_and_validation(self, test_user):
+        """Test JWT token creation and validation"""
+        auth_manager = AuthManager()
+
+        # Create token
+        token_data = auth_manager.create_access_token(test_user)
+
+        assert "access_token" in token_data
+        assert token_data["token_type"] == "bearer"
+        assert isinstance(token_data["expires_in"], int)
+
+        # Token should be a string
+        assert isinstance(token_data["access_token"], str)
+        assert len(token_data["access_token"]) > 50  # JWT tokens are long