Add meal tracker app: Flask + SQLite with auth, dashboard, 31 passing tests, Docker Compose

tests/test_auth.py

@@ -0,0 +1,131 @@
+"""Tests for authentication: registration, login, logout."""
+
+
+def test_register_page(client):
+    resp = client.get("/register")
+    assert resp.status_code == 200
+    assert b"Create Account" in resp.data
+
+
+def test_register_success(client):
+    resp = client.post("/register", data={
+        "username": "testuser",
+        "password": "secret123",
+        "confirm": "secret123",
+    }, follow_redirects=True)
+    assert resp.status_code == 200
+    assert b"Account created" in resp.data
+
+
+def test_register_first_user_is_admin(client):
+    """First registered user should be admin."""
+    client.post("/register", data={
+        "username": "firstuser",
+        "password": "secret123",
+        "confirm": "secret123",
+    })
+    from models import get_user_by_username
+    user = get_user_by_username("firstuser")
+    assert user is not None
+    assert user["is_admin"] == 1
+
+
+def test_register_duplicate_username(client):
+    client.post("/register", data={
+        "username": "dup",
+        "password": "pass1234",
+        "confirm": "pass1234",
+    })
+    client.get("/logout")
+    resp = client.post("/register", data={
+        "username": "dup",
+        "password": "other5678",
+        "confirm": "other5678",
+    }, follow_redirects=True)
+    assert b"Username already taken" in resp.data
+
+
+def test_register_password_mismatch(client):
+    resp = client.post("/register", data={
+        "username": "someone",
+        "password": "abc12345",
+        "confirm": "abc12346",
+    }, follow_redirects=True)
+    assert b"Passwords do not match" in resp.data
+
+
+def test_register_short_username(client):
+    resp = client.post("/register", data={
+        "username": "x",
+        "password": "pass1234",
+        "confirm": "pass1234",
+    }, follow_redirects=True)
+    assert b"at least 2 characters" in resp.data
+
+
+def test_register_short_password(client):
+    resp = client.post("/register", data={
+        "username": "validname",
+        "password": "ab",
+        "confirm": "ab",
+    }, follow_redirects=True)
+    assert b"at least 4 characters" in resp.data
+
+
+def test_login_page(client):
+    resp = client.get("/login")
+    assert resp.status_code == 200
+    assert b"Log In" in resp.data
+
+
+def test_login_success(client):
+    # Register first
+    client.post("/register", data={
+        "username": "logintest",
+        "password": "mypassword",
+        "confirm": "mypassword",
+    })
+    client.get("/logout")
+    # Then login
+    resp = client.post("/login", data={
+        "username": "logintest",
+        "password": "mypassword",
+    }, follow_redirects=True)
+    assert resp.status_code == 200
+    assert b"Today" in resp.data  # Dashboard
+
+
+def test_login_wrong_password(client):
+    client.post("/register", data={
+        "username": "logintest2",
+        "password": "mypassword",
+        "confirm": "mypassword",
+    })
+    client.get("/logout")
+    resp = client.post("/login", data={
+        "username": "logintest2",
+        "password": "wrongpassword",
+    }, follow_redirects=True)
+    assert b"Invalid username or password" in resp.data
+
+
+def test_login_nonexistent_user(client):
+    resp = client.post("/login", data={
+        "username": "nobody",
+        "password": "whatever",
+    }, follow_redirects=True)
+    assert b"Invalid username or password" in resp.data
+
+
+def test_logout(auth_client):
+    resp = auth_client.get("/logout", follow_redirects=True)
+    assert resp.status_code == 200
+    assert b"Log In" in resp.data  # Redirected to login
+
+
+def test_unauthenticated_redirect(client):
+    """Dashboard and root should redirect to login when not logged in."""
+    for path in ["/", "/dashboard", "/history"]:
+        resp = client.get(path, follow_redirects=True)
+        assert resp.status_code == 200
+        assert b"Log In" in resp.data