import pytest from fastapi.testclient import TestClient def _app(tmp_path, monkeypatch, admin=""): db = tmp_path / "t.sqlite3" monkeypatch.setenv("GOODNEWS_DB", str(db)) monkeypatch.setenv("GOODNEWS_PUBLIC_BASE_URL", "http://testserver") monkeypatch.setenv("GOODNEWS_ADMIN_EMAILS", admin) import importlib import goodnews.api as api importlib.reload(api) from goodnews.db import connect, init_db connect(str(db)).close() c = connect(str(db)); init_db(c); c.close() return api.create_app(), api, db def _count(db): from goodnews.db import connect c = connect(str(db)); n = c.execute("SELECT COUNT(*) FROM feedback").fetchone()[0]; c.close() return n def test_feedback_stored_and_validated(tmp_path, monkeypatch): app, api, db = _app(tmp_path, monkeypatch) monkeypatch.setattr(api.email_send, "send_feedback", lambda *a, **k: None) tc = TestClient(app) assert tc.post("/api/feedback", json={"message": " "}).status_code == 422 # empty assert tc.post("/api/feedback", json={"category": "idea", "message": "Love it", "visitor": "v"}).json() == {"ok": True} assert _count(db) == 1 # honeypot tripped → accepted but NOT stored tc.post("/api/feedback", json={"message": "spam", "hp": "i am a bot", "visitor": "v"}) assert _count(db) == 1 def test_admin_feedback_gated(tmp_path, monkeypatch): app, api, db = _app(tmp_path, monkeypatch, admin="boss@x.com") monkeypatch.setattr(api.email_send, "send_feedback", lambda *a, **k: None) TestClient(app).post("/api/feedback", json={"message": "hi", "visitor": "v"}) assert TestClient(app).get("/api/admin/feedback").status_code == 401 # anon # sign in as admin tc = TestClient(app); sent = {} monkeypatch.setattr(api.email_send, "send_magic_link", lambda to, link: sent.update(link=link)) tc.post("/api/auth/email/start", json={"email": "boss@x.com"}) tc.post("/api/auth/email/verify", json={"token": sent["link"].split("token=")[1]}) fb = tc.get("/api/admin/feedback").json() assert len(fb) == 1 and fb[0]["message"] == "hi" stats = tc.get("/api/admin/stats").json() assert {"funnel", "accounts", "retention", "emotional_mix", "paywall", "replace"} <= set(stats) assert stats["accounts"]["total"] >= 1