test_fastapi_framework.py

import unittest
from unittest.mock import AsyncMock, MagicMock, patch

pytest = __import__("pytest")
pytest.importorskip("fastapi", reason="fastapi not installed")

from fastapi import FastAPI
from starlette.testclient import TestClient
from starlette.middleware.sessions import SessionMiddleware

from kinde_fastapi.framework.fastapi_framework import FastAPIFramework


class TestFastAPIFramework(unittest.TestCase):
    """Tests for the FastAPI framework implementation."""

    def setUp(self):
        self.app = FastAPI()
        self.app.add_middleware(SessionMiddleware, secret_key="test-secret")

        self.framework = FastAPIFramework(app=self.app)

        # Mock OAuth so no real auth happens
        self.mock_oauth = MagicMock()
        self.mock_oauth.login = AsyncMock(return_value="https://kinde.example.com/authorize")
        self.framework._oauth = self.mock_oauth

        # Register routes
        self.framework._register_kinde_routes()

        self.client = TestClient(self.app, follow_redirects=False)

    def test_login_with_invitation_code(self):
        """invitation_code query param is forwarded to oauth.login()."""
        resp = self.client.get("/login?invitation_code=inv_abc123")

        self.mock_oauth.login.assert_called_once()
        login_options = self.mock_oauth.login.call_args[0][0]
        self.assertEqual(login_options["invitation_code"], "inv_abc123")

    def test_login_without_invitation_code(self):
        """No invitation_code means oauth.login() gets an empty dict."""
        resp = self.client.get("/login")

        self.mock_oauth.login.assert_called_once()
        login_options = self.mock_oauth.login.call_args[0][0]
        self.assertNotIn("invitation_code", login_options)

    def test_login_with_empty_invitation_code(self):
        """An empty invitation_code query param is not forwarded."""
        resp = self.client.get("/login?invitation_code=")

        self.mock_oauth.login.assert_called_once()
        login_options = self.mock_oauth.login.call_args[0][0]
        self.assertNotIn("invitation_code", login_options)

    def test_login_redirects_to_oauth_url(self):
        """The route returns a redirect to the URL from oauth.login()."""
        resp = self.client.get("/login?invitation_code=inv_xyz")

        self.assertEqual(resp.status_code, 307)
        self.assertEqual(resp.headers["location"], "https://kinde.example.com/authorize")


if __name__ == "__main__":
    unittest.main()