35 lines
1.3 KiB
Python
35 lines
1.3 KiB
Python
|
"""权限覆盖守卫：新接口未登记时必须明确失败。"""
|
||
|
|
from fastapi.routing import APIRoute
|
||
|
|
|
||
|
|
from app.services.authorization_policy import permission_for
|
||
|
|
from app.services.permission_catalog import CATALOG
|
||
|
|
|
||
|
|
|
||
|
|
def test_全部受保护接口都有权限映射():
|
||
|
|
from app.main import app
|
||
|
|
|
||
|
|
missing=[]
|
||
|
|
checked = 0
|
||
|
|
def routes(items):
|
||
|
|
for item in items:
|
||
|
|
if isinstance(item, APIRoute):
|
||
|
|
yield item
|
||
|
|
elif hasattr(item, 'original_router'):
|
||
|
|
yield from routes(item.original_router.routes)
|
||
|
|
for route in routes(app.routes):
|
||
|
|
if not route.endpoint.__module__.startswith('app.api.v1.'):
|
||
|
|
continue
|
||
|
|
checked += 1
|
||
|
|
module=route.endpoint.__module__.removeprefix('app.api.v1.')
|
||
|
|
for method in route.methods:
|
||
|
|
code=permission_for(module,route.endpoint.__name__,method,
|
||
|
|
params={'code':'personal-detail'},body={'kind':'MASTER_PREVIEW'})
|
||
|
|
if code is None or (code and code not in CATALOG):
|
||
|
|
missing.append((method,route.path,code))
|
||
|
|
assert checked >= 100, '路由枚举未覆盖全部业务接口'
|
||
|
|
assert not missing, missing
|
||
|
|
|
||
|
|
|
||
|
|
def test_未知接口没有默认放行():
|
||
|
|
assert permission_for('future_module','new_action','GET') is None
|