agatha
355014f975
- Extends GET /api/v1/tags with sort=count_desc and min_count query params - New TagsComponent at /tags (public, no auth guard) shows all tags sorted by image count - Clicking a tag navigates to /?tags=<name> for a pre-filtered library view - LibraryComponent reads ?tags= query param on init to support deep-linking from tag browser - Library header gains a "Browse tags" link to /tags for discoverability - All 15 TDD tasks complete; ruff, ng lint, and ng build clean Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
71 lines
2.1 KiB
Python
71 lines
2.1 KiB
Python
"""
|
|
US3 regression tests: all read endpoints must remain accessible without a token
|
|
even after require_auth is applied to write endpoints.
|
|
"""
|
|
import io
|
|
|
|
import pytest
|
|
|
|
|
|
def _minimal_jpeg() -> bytes:
|
|
return (
|
|
b"\xff\xd8\xff\xe0\x00\x10JFIF\x00\x01\x01\x00\x00\x01\x00\x01\x00\x03"
|
|
b"\xff\xd9"
|
|
)
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_list_images_without_token_is_200(authed_client):
|
|
client, _ = authed_client
|
|
response = await client.get("/api/v1/images")
|
|
assert response.status_code == 200
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_get_image_without_token_is_200(authed_client):
|
|
client, token = authed_client
|
|
data = _minimal_jpeg()
|
|
upload = await client.post(
|
|
"/api/v1/images",
|
|
files={"file": ("pub-test.jpg", io.BytesIO(data), "image/jpeg")},
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
)
|
|
image_id = upload.json()["id"]
|
|
response = await client.get(f"/api/v1/images/{image_id}")
|
|
assert response.status_code == 200
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_serve_file_without_token_is_200(authed_client):
|
|
client, token = authed_client
|
|
data = _minimal_jpeg()
|
|
upload = await client.post(
|
|
"/api/v1/images",
|
|
files={"file": ("pub-file.jpg", io.BytesIO(data), "image/jpeg")},
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
)
|
|
image_id = upload.json()["id"]
|
|
response = await client.get(f"/api/v1/images/{image_id}/file")
|
|
assert response.status_code == 200
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_serve_thumbnail_without_token_is_200(authed_client):
|
|
client, token = authed_client
|
|
data = _minimal_jpeg()
|
|
upload = await client.post(
|
|
"/api/v1/images",
|
|
files={"file": ("pub-thumb.jpg", io.BytesIO(data), "image/jpeg")},
|
|
headers={"Authorization": f"Bearer {token}"},
|
|
)
|
|
image_id = upload.json()["id"]
|
|
response = await client.get(f"/api/v1/images/{image_id}/thumbnail")
|
|
assert response.status_code == 200
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_list_tags_without_token_is_200(authed_client):
|
|
client, _ = authed_client
|
|
response = await client.get("/api/v1/tags")
|
|
assert response.status_code == 200
|