""" A group name is unique per owner account, case-insensitively — the group's identity stays its UUID, this only makes `name@owner` a dependable handle. """ import base64 import hashlib import pytest def _auth_key(password: str, username: str) -> str: salt = hashlib.sha256(f"meshbay:auth:v1:{username}".encode()).digest() return base64.b64encode( hashlib.pbkdf2_hmac("sha512", password.encode(), salt, 600_000, 32)).decode() async def _user(client, username, password="a-long-enough-passphrase"): await client.post("/v1/users/register", json={ "username": username, "email": f"{username}@example.com", "auth_key": _auth_key(password, username)}) r = await client.post("/v1/users/login", json={ "username": username, "auth_key": _auth_key(password, username)}) return {"Authorization": f"Bearer {r.json()['access_token']}"} async def _create(client, headers, name): return await client.post("/v1/groups", json={"name": name}, headers=headers) @pytest.mark.asyncio async def test_same_owner_same_name_is_refused(client): alice = await _user(client, "alice_test") r1 = await _create(client, alice, "photos") assert r1.status_code == 201 assert r1.json()["owner_username"] == "alice_test" r2 = await _create(client, alice, "photos") assert r2.status_code == 409 assert "photos" in r2.json()["detail"] @pytest.mark.asyncio async def test_same_owner_different_case_is_refused(client): alice = await _user(client, "alice_test") assert (await _create(client, alice, "Photos")).status_code == 201 assert (await _create(client, alice, " photos ")).status_code == 409 @pytest.mark.asyncio async def test_two_owners_may_share_a_name(client): alice = await _user(client, "alice_test") bob = await _user(client, "bob_test") assert (await _create(client, alice, "photos")).status_code == 201 assert (await _create(client, bob, "photos")).status_code == 201 @pytest.mark.asyncio async def test_name_is_trimmed_on_create(client): alice = await _user(client, "alice_test") r = await _create(client, alice, " spaced out ") assert r.status_code == 201 assert r.json()["name"] == "spaced out" @pytest.mark.asyncio async def test_blank_name_is_refused(client): alice = await _user(client, "alice_test") assert (await _create(client, alice, " ")).status_code == 422 @pytest.mark.asyncio async def test_owner_username_is_reported_in_listings(client): alice = await _user(client, "alice_test") await _create(client, alice, "photos") mine = (await client.get("/v1/groups/mine", headers=alice)).json()["groups"] assert mine and mine[0]["owner_username"] == "alice_test"