def post_answer():
data = request.get_json() or []
if 'content' not in data:
abort(400, 'content expected in request body')
if 'question_id' not in data:
abort(400, 'question_id expected in request body')
question = Question.query.get(data['question_id'])
if question == None:
abort(404, 'question not found')
# sanitize input
content = bleach.clean(data['content'])
# supporting markdown
content = markdown(content)
# retrive user_id using username (which is stored in the stack by requires_auth decorator)
username = _request_ctx_stack.top.curr_user['sub']
user_id = User.query.filter_by(username=username).with_entities(
User.id).one().id
new_answer = Answer(user_id, question.id, content)
try:
new_answer.insert()
except Exception:
abort(422)
return jsonify({'success': True, 'data': new_answer.format()})
class SalTestCase(unittest.TestCase):
def setUp(self):
self.app = create_app(TestingConfig)
self.client = self.app.test_client
# seed data
self.role = Role('general')
self.role.insert()
self.user = User('Ahmed', 'Hamed', '*****@*****.**',
'ahmedhrayyan', 'secret', self.role.id)
self.user.insert()
self.question = Question(self.user.id, 'Is sal the best QA engine')
self.question.insert()
self.answer = Answer(self.user.id, self.question.id, 'Yes it is')
self.answer.insert()
self.token = gen_token(self.app.config['SECRET_KEY'], self.user)
def tearDown(self):
db.drop_all()
def test_422_upload(self):
res = self.client().post('api/upload',
headers={
'Authorization': 'Bearer %s' % self.token
},
data={'file': (BytesIO(b'IMAGE DATA'), 'file.jpg')}) # fake data
json_data = res.get_json()
self.assertEqual(res.status_code, 422)
self.assertFalse(json_data['success'])
self.assertTrue(json_data['message'])
def test_404_view_uploaded(self):
res = self.client().get('/uploads/x')
self.assertEqual(res.status_code, 404)
def test_422_register(self):
res = self.client().post('/api/register',
json={
'first_name': 'ahmed',
'last_name': 'hamed',
'email': '*****@*****.**',
'username': self.user.username, # username already exists
'password': '******'
})
res_data = res.get_json()
self.assertEqual(res.status_code, 422)
self.assertFalse(res_data['success'])
self.assertTrue(res_data['message'])
def test_register(self):
res = self.client().post('/api/register',
json={
'first_name': 'ahmed',
'last_name': 'hamed',
'email': '*****@*****.**',
'username': '******',
'password': '******'
})
res_data = res.get_json()
self.assertEqual(res.status_code, 200)
self.assertTrue(res_data['success'])
self.assertEqual(res_data['data']['username'], 'test')
def test_patch_user(self):
res = self.client().patch('/api/user',
headers={
'Authorization': 'Bearer %s' % self.token
},
json={
'job': 'test',
})
res_data = res.get_json()
self.assertEqual(res.status_code, 200)
self.assertTrue(res_data['success'])
self.assertEqual(res_data['data']['job'], 'test')
def test_422_login(self):
res = self.client().post('/api/login',
json={
'username': '******',
'password': '******'
})
res_data = res.get_json()
self.assertEqual(res.status_code, 422)
self.assertFalse(res_data['success'])
self.assertTrue(res_data['message'])
def test_login(self):
res = self.client().post('/api/login',
json={
'username': '******',
'password': '******'
})
res_data = res.get_json()
self.assertEqual(res.status_code, 200)
self.assertTrue(res_data['success'])
self.assertEqual(res_data['data']['username'], 'ahmedhrayyan')
def test_get_notifications(self):
res = self.client().get('/api/notifications',
headers={
'Authorization': 'Bearer %s' % self.token
})
res_data = res.get_json()
self.assertEqual(res.status_code, 200)
self.assertTrue(res_data['success'])
self.assertGreaterEqual(res_data['unread_count'], 0)
def test_get_questions(self):
res = self.client().get('/api/questions')
json_data = res.get_json()
self.assertEqual(res.status_code, 200)
self.assertTrue(json_data['success'])
def test_404_show_question(self):
res = self.client().get('/api/questions/232482')
json_data = res.get_json()
self.assertEqual(res.status_code, 404)
self.assertFalse(json_data['success'])
self.assertTrue(json_data['message'])
def test_show_question(self):
res = self.client().get('/api/questions/%i' % self.question.id)
json_data = res.get_json()
self.assertEqual(res.status_code, 200)
self.assertTrue(json_data['success'])
self.assertEqual(self.question.id, json_data['data']['id'])
def test_400_post_question(self):
res = self.client().post('/api/questions',
headers={
'Authorization': 'Bearer %s' % self.token
})
json_data = res.get_json()
self.assertEqual(res.status_code, 400)
self.assertFalse(json_data['success'])
self.assertTrue(json_data['message'])
def test_post_question(self):
content = 'Is this great or what'
res = self.client().post('/api/questions',
headers={
'Authorization': 'Bearer %s' % self.token
},
json={
'user_id': self.user.id,
'content': content
})
json_data = res.get_json()
self.assertEqual(res.status_code, 200)
self.assertTrue(json_data['success'])
self.assertIn(content, json_data['data']['content'])
def test_patch_question(self):
res = self.client().patch('/api/questions/%i' % self.question.id,
headers={
'Authorization': 'Bearer %s' % self.token
},
json={
'accepted_answer': self.answer.id
})
json_data = res.get_json()
self.assertEqual(res.status_code, 200)
self.assertTrue(json_data['success'])
self.assertEqual(self.answer.id, json_data['data']['accepted_answer'])
def test_404_delete_question(self):
res = self.client().delete('/api/questions/10000',
headers={
'Authorization': 'Bearer %s' % self.token
},
)
json_data = res.get_json()
self.assertEqual(res.status_code, 404)
self.assertFalse(json_data['success'])
self.assertTrue(json_data['message'])
def test_delete_question(self):
res = self.client().delete('/api/questions/%i' % self.question.id,
headers={
'Authorization': 'Bearer %s' % self.token
},
)
json_data = res.get_json()
self.assertEqual(res.status_code, 200)
self.assertTrue(json_data['success'])
self.assertEqual(self.question.id, json_data['deleted_id'])
def test_404_show_answer(self):
res = self.client().get('/api/answers/10420')
json_data = res.get_json()
self.assertEqual(res.status_code, 404)
self.assertFalse(json_data['success'])
self.assertTrue(json_data['message'])
def test_show_answer(self):
res = self.client().get('/api/answers/%i' % self.answer.id)
json_data = res.get_json()
self.assertEqual(res.status_code, 200)
self.assertTrue(json_data['success'])
self.assertEqual(self.answer.id, json_data['data']['id'])
def test_400_post_answer(self):
res = self.client().post('/api/answers',
headers={
'Authorization': 'Bearer %s' % self.token
},
content_type='application/json')
json_data = res.get_json()
self.assertEqual(res.status_code, 400)
self.assertFalse(json_data['success'])
self.assertTrue(json_data['message'])
def test_post_answer(self):
content = 'answer'
res = self.client().post('/api/answers',
headers={
'Authorization': 'Bearer %s' % self.token
},
json={
'user_id': self.user.id,
'question_id': self.question.id,
'content': content
})
json_data = res.get_json()
self.assertEqual(res.status_code, 200)
self.assertTrue(json_data['success'])
self.assertIn(content, json_data['data']['content'])
def test_patch_answer(self):
content = 'new answer'
res = self.client().patch('/api/answers/%i' % self.answer.id,
headers={
'Authorization': 'Bearer %s' % self.token
},
json={
'content': content
})
json_data = res.get_json()
self.assertEqual(res.status_code, 200)
self.assertTrue(json_data['success'])
self.assertIn(content, json_data['data']['content'])
def test_404_delete_answer(self):
res = self.client().delete('/api/answers/10000',
headers={
'Authorization': 'Bearer %s' % self.token
},
)
json_data = res.get_json()
self.assertEqual(res.status_code, 404)
self.assertFalse(json_data['success'])
self.assertTrue(json_data['message'])
def test_delete_answer(self):
res = self.client().delete('/api/answers/%i' % self.answer.id,
headers={
'Authorization': 'Bearer %s' % self.token
},
)
json_data = res.get_json()
self.assertEqual(res.status_code, 200)
self.assertTrue(json_data['success'])
self.assertEqual(self.answer.id, json_data['deleted_id'])
def test_404_show_user(self):
res = self.client().get('/api/users/x')
json_data = res.get_json()
self.assertEqual(res.status_code, 404)
self.assertFalse(json_data['success'])
self.assertTrue(json_data['message'])
def test_show_user(self):
res = self.client().get('/api/users/%s' % self.user.username)
json_data = res.get_json()
self.assertEqual(res.status_code, 200)
self.assertTrue(json_data['success'])
self.assertEqual(json_data['data']['username'], self.user.username)
def test_404_get_user_questions(self):
res = self.client().get('/api/users/x/questions')
json_data = res.get_json()
self.assertEqual(res.status_code, 404)
self.assertFalse(json_data['success'])
self.assertTrue(json_data['message'])
def test_get_user_questions(self):
res = self.client().get('/api/users/%s/questions' % self.user.username)
json_data = res.get_json()
self.assertEqual(res.status_code, 200)
self.assertTrue(json_data['success'])
def test_report_question(self):
res = self.client().post('/api/report/question',
headers={
'Authorization': 'Bearer %s' % self.token
},
json={
'question_id': self.question.id
})
json_data = res.get_json()
self.assertEqual(res.status_code, 200)
self.assertTrue(json_data['success'])
def test_report_answer(self):
res = self.client().post('/api/report/answer',
headers={
'Authorization': 'Bearer %s' % self.token
},
json={
'answer_id': self.answer.id
})
json_data = res.get_json()
self.assertEqual(res.status_code, 200)
self.assertTrue(json_data['success'])