Merge branch 'exospherehost:main' into dev/nikiagarwal/landingpagetext

Author: nk-ag

.github/workflows/deploy-kubernetes.yml

@@ -31,7 +31,7 @@ jobs:
           kubectl delete secret exosphere-api-server-secrets --ignore-not-found
           kubectl create secret generic exosphere-api-server-secrets --from-literal=MONGO_URI=${{ secrets.API_SERVER_MONGO_URI }} --from-literal=MONGO_DATABASE_NAME=${{ secrets.API_SERVER_MONGO_DATABASE_NAME }} --from-literal=JWT_SECRET_KEY=${{ secrets.JWT_SECRET }}
 
-          kubectl create secret generic exosphere-state-manager-secrets --from-literal=MONGO_URI=${{ secrets.STATE_MANAGER_MONGO_URI }} --from-literal=MONGO_DATABASE_NAME=${{ secrets.STATE_MANAGER_MONGO_DATABASE_NAME }} --from-literal=STATE_MANAGER_SECRET=${{ secrets.STATE_MANAGER_SECRET }}
+          kubectl create secret generic exosphere-state-manager-secrets --from-literal=MONGO_URI=${{ secrets.STATE_MANAGER_MONGO_URI }} --from-literal=MONGO_DATABASE_NAME=${{ secrets.STATE_MANAGER_MONGO_DATABASE_NAME }} --from-literal=STATE_MANAGER_SECRET=${{ secrets.STATE_MANAGER_SECRET }} --from-literal=SECRETS_ENCRYPTION_KEY=${{ secrets.SECRETS_ENCRYPTION_KEY }}
           
           kubectl apply -f ./api-server-deployment.yaml
           kubectl apply -f ./api-server-service.yaml

.github/workflows/test-api-server.yml

@@ -43,6 +43,9 @@ jobs:
         run: |
           uv sync --group dev
 
+      - name: Set JWT secret for tests
+        run: echo "JWT_SECRET_KEY=test_secret" >> $GITHUB_ENV
+
       - name: Run tests with pytest and coverage
         working-directory: api-server
         run: |

api-server/pyproject.toml

@@ -22,6 +22,7 @@ dependencies = [
 dev = [
     "ruff>=0.12.2",
     "pytest>=8.0.0",
+    "pytest-asyncio>=0.25.0",
     "httpx>=0.27.0",
-     "pytest-cov>=5.0.0"
+    "pytest-cov>=5.0.0"
      ]

api-server/tests/test_create_tokens.py

@@ -0,0 +1,65 @@
+import pytest
+import jwt
+from starlette.responses import JSONResponse
+
+from app.auth.controllers.create_token import create_token, JWT_SECRET_KEY, JWT_ALGORITHM
+from app.auth.models.token_request import TokenRequest
+from app.auth.models.token_response import TokenResponse
+from app.user.models.user_status_enum import UserStatusEnum
+from app.user.models.verification_status_enum import VerificationStatusEnum
+
+
+@pytest.mark.asyncio
+async def test_create_token_success(monkeypatch):
+    monkeypatch.setenv("JWT_SECRET_KEY", "test_secret")
+
+    class DummyUser:
+        id = "507f1f77bcf86cd799439011"
+        name = "John"
+        type = "admin"
+        verification_status = VerificationStatusEnum.VERIFIED.value
+        status = UserStatusEnum.ACTIVE.value
+        def verify_credential(self, cred):
+            return True
+
+    async def mock_find_one(_query):
+        return DummyUser()
+
+    async def mock_project_get(_id):
+        return None
+
+    class MockUser:
+        identifier = "identifier"
+        find_one = staticmethod(mock_find_one)
+
+    class MockProject:
+        get = staticmethod(mock_project_get)
+
+    monkeypatch.setattr("app.auth.controllers.create_token.User", MockUser)
+    monkeypatch.setattr("app.auth.controllers.create_token.Project", MockProject)
+
+    req = TokenRequest(identifier="user", credential="pass", project=None, satellites=None)
+    res = await create_token(req, "req-id")
+
+    assert isinstance(res, TokenResponse)
+    decoded = jwt.decode(res.access_token, JWT_SECRET_KEY, algorithms=[JWT_ALGORITHM])
+    assert decoded["user_id"] == "507f1f77bcf86cd799439011"
+    assert decoded["token_type"] == "access"
+
+
+@pytest.mark.asyncio
+async def test_create_token_invalid_user(monkeypatch):
+    async def mock_find_one(_query):
+        return None
+
+    class MockUser:
+        identifier = "identifier"
+        find_one = staticmethod(mock_find_one)
+
+    monkeypatch.setattr("app.auth.controllers.create_token.User", MockUser)
+
+    req = TokenRequest(identifier="bad", credential="pass", project=None, satellites=None)
+    res = await create_token(req, "req-id")
+
+    assert isinstance(res, JSONResponse)
+    assert res.status_code == 404

api-server/tests/test_refresh_access_token.py

@@ -0,0 +1,67 @@
+import pytest
+import jwt
+from starlette.responses import JSONResponse
+
+from app.auth.controllers.refresh_access_token import (
+    refresh_access_token,
+    JWT_SECRET_KEY,
+    JWT_ALGORITHM,
+    JWT_EXPIRES_IN
+)
+from app.auth.models.refresh_token_request import RefreshTokenRequest
+from app.auth.models.token_response import TokenResponse
+from app.auth.models.token_type_enum import TokenType
+from app.user.models.user_status_enum import UserStatusEnum
+from app.user.models.verification_status_enum import VerificationStatusEnum
+
+
+@pytest.mark.asyncio
+async def test_refresh_access_token_success(monkeypatch):
+    monkeypatch.setenv("JWT_SECRET_KEY", "test_secret")
+
+    class DummyUser:
+        id = "507f1f77bcf86cd799439011"
+        name = "John"
+        type = "admin"
+        verification_status = VerificationStatusEnum.VERIFIED.value
+        status = UserStatusEnum.ACTIVE.value
+
+    class MockUser:
+        @staticmethod
+        async def get(_id):
+            return DummyUser()
+
+    class MockProject:
+        @staticmethod
+        async def get(_id):
+            return None
+
+    monkeypatch.setattr("app.auth.controllers.refresh_access_token.User", MockUser)
+    monkeypatch.setattr("app.auth.controllers.refresh_access_token.Project", MockProject)
+
+    import datetime
+    payload = {
+        "user_id": "507f1f77bcf86cd799439011",
+        "token_type": TokenType.refresh.value,
+        "exp": int((datetime.datetime.now() + datetime.timedelta(seconds=JWT_EXPIRES_IN)).timestamp())
+    }
+    token = jwt.encode(payload, JWT_SECRET_KEY, algorithm=JWT_ALGORITHM)
+    req = RefreshTokenRequest(refresh_token=token)
+    res = await refresh_access_token(req, "req-id")
+
+    assert isinstance(res, TokenResponse)
+    decoded = jwt.decode(res.access_token, JWT_SECRET_KEY, algorithms=[JWT_ALGORITHM])
+    assert decoded["user_id"] == "507f1f77bcf86cd799439011"
+    assert decoded["token_type"] == "access"
+
+
+@pytest.mark.asyncio
+async def test_refresh_access_token_invalid_token(monkeypatch):
+    monkeypatch.setenv("JWT_SECRET_KEY", "test_secret")
+
+    bad_token = jwt.encode({"token_type": "wrong"}, JWT_SECRET_KEY, algorithm=JWT_ALGORITHM)
+    req = RefreshTokenRequest(refresh_token=bad_token)
+    res = await refresh_access_token(req, "req-id")
+
+    assert isinstance(res, JSONResponse)
+    assert res.status_code == 401