daddy
af85048deb
New avatar_loadouts table (one row per user, loadout stored as a single JSONB document matching the client's AvatarLoadout.to_json() shape) and GET/PUT /api/avatar/loadout. The server has no copy of the asset catalog, so it validates only the envelope (JSON object, non-empty base_body, object slots, size cap) -- which-asset-in-which-slot validation stays client-side. New accounts get a server default (base_human_male_01, no slots) with is_default:true so the client can tell "never customised" from "customised back to base". - models/avatar_loadout.py + 0004 migration + User.avatar_loadout relation - routers/avatar.py wired into main.py - tests/test_avatar_loadout.py (7 tests: default, save/read, replace, validation, auth) -- full suite 68 passed - lifted the duplicated _override_db fixture from 3 test files into conftest.py (new test files need it too) - docs/architecture/avatar.md §9a: the persistence design Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_015jtxAiu5dAW4WxCNdGkrkJ
92 lines
3.3 KiB
Python
92 lines
3.3 KiB
Python
"""Integration tests for GET/PUT /api/avatar/loadout.
|
|
|
|
Hits the real app against the configured Postgres (same contract as the
|
|
other integration tests -- migrations applied first).
|
|
"""
|
|
|
|
import pytest
|
|
from fastapi.testclient import TestClient
|
|
|
|
from app.main import app
|
|
from app.models.avatar_loadout import DEFAULT_LOADOUT
|
|
|
|
|
|
def _auth_headers(client: TestClient, username: str) -> dict:
|
|
resp = client.post(
|
|
"/api/auth/register",
|
|
json={
|
|
"username": username,
|
|
"email": f"{username}@example.com",
|
|
"password": "secret123",
|
|
"over_18": True,
|
|
},
|
|
)
|
|
assert resp.status_code == 201, resp.text
|
|
return {"Authorization": f"Bearer {resp.json()['access_token']}"}
|
|
|
|
|
|
class TestGetLoadout:
|
|
def test_new_user_gets_the_default(self):
|
|
client = TestClient(app)
|
|
headers = _auth_headers(client, "av_default")
|
|
resp = client.get("/api/avatar/loadout", headers=headers)
|
|
assert resp.status_code == 200
|
|
body = resp.json()
|
|
assert body["is_default"] is True
|
|
assert body["data"] == DEFAULT_LOADOUT
|
|
|
|
def test_requires_auth(self):
|
|
client = TestClient(app)
|
|
assert client.get("/api/avatar/loadout").status_code == 401
|
|
|
|
|
|
class TestPutLoadout:
|
|
def test_save_then_read_back(self):
|
|
client = TestClient(app)
|
|
headers = _auth_headers(client, "av_save")
|
|
loadout = {
|
|
"base_body": "base_human_male_01",
|
|
"slots": {"hair": "hair_mohawk_01", "accessory": ["accessory_belt_01"]},
|
|
"skin_tone": {"r": 0.8, "g": 0.6, "b": 0.5, "a": 1.0},
|
|
}
|
|
put = client.put("/api/avatar/loadout", headers=headers, json={"data": loadout})
|
|
assert put.status_code == 200, put.text
|
|
assert put.json()["is_default"] is False
|
|
|
|
got = client.get("/api/avatar/loadout", headers=headers)
|
|
assert got.status_code == 200
|
|
assert got.json()["is_default"] is False
|
|
assert got.json()["data"] == loadout
|
|
|
|
def test_put_is_idempotent_replace(self):
|
|
client = TestClient(app)
|
|
headers = _auth_headers(client, "av_replace")
|
|
client.put(
|
|
"/api/avatar/loadout", headers=headers,
|
|
json={"data": {"base_body": "base_human_male_01", "slots": {"hair": "hair_mohawk_01"}}},
|
|
)
|
|
second = {"base_body": "base_human_male_01", "slots": {"chest": "chest_bandit_01"}}
|
|
client.put("/api/avatar/loadout", headers=headers, json={"data": second})
|
|
got = client.get("/api/avatar/loadout", headers=headers)
|
|
assert got.json()["data"] == second
|
|
|
|
def test_rejects_missing_base_body(self):
|
|
client = TestClient(app)
|
|
headers = _auth_headers(client, "av_nobase")
|
|
resp = client.put("/api/avatar/loadout", headers=headers, json={"data": {"slots": {}}})
|
|
assert resp.status_code == 422
|
|
|
|
def test_rejects_non_object_slots(self):
|
|
client = TestClient(app)
|
|
headers = _auth_headers(client, "av_badslots")
|
|
resp = client.put(
|
|
"/api/avatar/loadout", headers=headers,
|
|
json={"data": {"base_body": "base_human_male_01", "slots": "nope"}},
|
|
)
|
|
assert resp.status_code == 422
|
|
|
|
def test_requires_auth(self):
|
|
client = TestClient(app)
|
|
resp = client.put("/api/avatar/loadout", json={"data": {"base_body": "x", "slots": {}}})
|
|
assert resp.status_code == 401
|