Refactoring code for modular approach

tests/test_auth.py

@@ -0,0 +1,119 @@
+# tests/test_auth.py
+import pytest
+from fastapi import HTTPException
+
+
+class TestAuthenticationAPI:
+    def test_register_user_success(self, client, db):
+        """Test successful user registration"""
+        response = client.post("/api/v1/auth/register", json={
+            "email": "newuser@example.com",
+            "username": "newuser",
+            "password": "securepass123"
+        })
+
+        assert response.status_code == 200
+        data = response.json()
+        assert data["email"] == "newuser@example.com"
+        assert data["username"] == "newuser"
+        assert data["role"] == "user"
+        assert data["is_active"] == True
+        assert "hashed_password" not in data
+
+    def test_register_user_duplicate_email(self, client, test_user):
+        """Test registration with duplicate email"""
+        response = client.post("/api/v1/auth/register", json={
+            "email": "test@example.com",  # Same as test_user
+            "username": "newuser",
+            "password": "securepass123"
+        })
+
+        assert response.status_code == 400
+        assert "Email already registered" in response.json()["detail"]
+
+    def test_register_user_duplicate_username(self, client, test_user):
+        """Test registration with duplicate username"""
+        response = client.post("/api/v1/auth/register", json={
+            "email": "new@example.com",
+            "username": "testuser",  # Same as test_user
+            "password": "securepass123"
+        })
+
+        assert response.status_code == 400
+        assert "Username already taken" in response.json()["detail"]
+
+    def test_login_success(self, client, test_user):
+        """Test successful login"""
+        response = client.post("/api/v1/auth/login", json={
+            "username": "testuser",
+            "password": "testpass123"
+        })
+
+        assert response.status_code == 200
+        data = response.json()
+        assert "access_token" in data
+        assert data["token_type"] == "bearer"
+        assert "expires_in" in data
+        assert data["user"]["username"] == "testuser"
+
+    def test_login_wrong_password(self, client, test_user):
+        """Test login with wrong password"""
+        response = client.post("/api/v1/auth/login", json={
+            "username": "testuser",
+            "password": "wrongpassword"
+        })
+
+        assert response.status_code == 401
+        assert "Incorrect username or password" in response.json()["detail"]
+
+    def test_login_nonexistent_user(self, client):
+        """Test login with nonexistent user"""
+        response = client.post("/api/v1/auth/login", json={
+            "username": "nonexistent",
+            "password": "password123"
+        })
+
+        assert response.status_code == 401
+
+    def test_get_current_user_info(self, client, auth_headers):
+        """Test getting current user info"""
+        response = client.get("/api/v1/auth/me", headers=auth_headers)
+
+        assert response.status_code == 200
+        data = response.json()
+        assert data["username"] == "testuser"
+        assert data["email"] == "test@example.com"
+
+    def test_get_current_user_no_auth(self, client):
+        """Test getting current user without authentication"""
+        response = client.get("/api/v1/auth/me")
+
+        assert response.status_code == 403  # No authorization header
+
+
+class TestAuthManager:
+    def test_hash_password(self, auth_manager):
+        """Test password hashing"""
+        password = "testpassword123"
+        hashed = auth_manager.hash_password(password)
+
+        assert hashed != password
+        assert len(hashed) > 20  # bcrypt hashes are long
+
+    def test_verify_password(self, auth_manager):
+        """Test password verification"""
+        password = "testpassword123"
+        hashed = auth_manager.hash_password(password)
+
+        assert auth_manager.verify_password(password, hashed) == True
+        assert auth_manager.verify_password("wrongpassword", hashed) == False
+
+    def test_create_access_token(self, auth_manager, test_user):
+        """Test JWT token creation"""
+        token_data = auth_manager.create_access_token(test_user)
+
+        assert "access_token" in token_data
+        assert token_data["token_type"] == "bearer"
+        assert "expires_in" in token_data
+        assert isinstance(token_data["expires_in"], int)
+