44 lines
1.4 KiB
Python
44 lines
1.4 KiB
Python
|
"""Tests für das Audit-Logging der Admin-Aktionen."""
|
||
|
|
|
||
|
|
import logging
|
||
|
|
|
||
|
|
import pytest
|
||
|
|
from fastapi.testclient import TestClient
|
||
|
|
|
||
|
|
from app.main import app
|
||
|
|
from app.config import settings
|
||
|
|
from app.runtime_config import invalidate_cache
|
||
|
|
|
||
|
|
client = TestClient(app)
|
||
|
|
ADMIN = "test-admin-key"
|
||
|
|
ADM_HDR = {"X-Admin-Key": ADMIN}
|
||
|
|
|
||
|
|
|
||
|
|
@pytest.fixture(autouse=True)
|
||
|
|
def _setup(monkeypatch):
|
||
|
|
monkeypatch.setattr(settings, "admin_api_key", ADMIN)
|
||
|
|
monkeypatch.setattr(settings, "auth_enabled", False)
|
||
|
|
invalidate_cache()
|
||
|
|
yield
|
||
|
|
invalidate_cache()
|
||
|
|
|
||
|
|
|
||
|
|
def test_config_set_is_audited(caplog):
|
||
|
|
with caplog.at_level(logging.INFO, logger="va.audit"):
|
||
|
|
r = client.put("/api/admin/config/local_llm_top_p",
|
||
|
|
json={"value": "0.7"}, headers=ADM_HDR)
|
||
|
|
assert r.status_code == 200
|
||
|
|
line = "\n".join(caplog.messages)
|
||
|
|
assert "action=config_set" in line
|
||
|
|
assert "local_llm_top_p" in line
|
||
|
|
assert "user=admin-key" in line
|
||
|
|
# aufräumen
|
||
|
|
client.delete("/api/admin/config/local_llm_top_p", headers=ADM_HDR)
|
||
|
|
|
||
|
|
|
||
|
|
def test_backend_switch_rejection_is_audited(caplog):
|
||
|
|
with caplog.at_level(logging.INFO, logger="va.audit"):
|
||
|
|
r = client.post("/api/admin/llm/backend",
|
||
|
|
json={"backend": "boese"}, headers=ADM_HDR)
|
||
|
|
assert r.status_code == 422
|
||
|
|
assert "action=llm_backend_switch_rejected" in "\n".join(caplog.messages)
|