test: 补充权限、消息与会话服务回归用例

会话读取、接管、重分配与 Socket 订阅统一校验角色、组织与可见性。

backend/tests/api/test_shopify_gdpr_webhooks.py

@@ -0,0 +1,103 @@
+"""
+Copyright 2024-2026 ReplyPier
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+"""
+
+import json
+from unittest.mock import patch
+
+import pytest
+from fastapi.testclient import TestClient
+
+import app.main  # noqa: F401 — registers the shopify router on the app
+from app.core.application import app
+from app.database import get_db
+
+# Shopify's three mandatory GDPR webhooks. They are unauthenticated apart from
+# the HMAC, so what they say on failure is public.
+WEBHOOKS = [
+    "/api/v1/shopify/webhooks/customers/data_request",
+    "/api/v1/shopify/webhooks/customers/redact",
+    "/api/v1/shopify/webhooks/shop/redact",
+]
+
+VALID_PAYLOAD = {
+    "shop_id": 1,
+    "shop_domain": "example.myshopify.com",
+    "customer": {"id": 2, "email": "someone@example.com", "phone": "+15550000000"},
+    "orders_requested": [],
+    "orders_to_redact": [],
+}
+
+
+@pytest.fixture
+def client(db):
+    def override_get_db():
+        yield db
+
+    app.dependency_overrides[get_db] = override_get_db
+    yield TestClient(app, raise_server_exceptions=False)
+    app.dependency_overrides.clear()
+
+
+@pytest.fixture
+def signed():
+    """Accept the HMAC, so the tests exercise what happens after it."""
+    with patch(
+        "app.api.shopify.ShopifyHelperService.verify_shopify_webhook", return_value=True
+    ) as verify:
+        yield verify
+
+
+@pytest.mark.parametrize("url", WEBHOOKS)
+class TestShopifyGdprWebhooks:
+    def test_an_unsigned_request_is_rejected(self, client, url):
+        with patch(
+            "app.api.shopify.ShopifyHelperService.verify_shopify_webhook", return_value=False
+        ):
+            response = client.post(url, json=VALID_PAYLOAD)
+
+        assert response.status_code == 401
+
+    def test_a_signed_request_is_acknowledged(self, client, signed, url):
+        response = client.post(url, json=VALID_PAYLOAD)
+
+        assert response.status_code == 200
+        assert response.json()["success"] is True
+
+    def test_malformed_json_is_a_400(self, client, signed, url):
+        response = client.post(
+            url, content=b"{not json", headers={"Content-Type": "application/json"}
+        )
+
+        assert response.status_code == 400
+
+    def test_a_failure_does_not_echo_the_exception(self, client, signed, url):
+        """A JSON array parses fine, then payload.get() raises inside the handler.
+
+        The reply used to be f"Error processing webhook: {str(e)}", handing the
+        caller our exception text on an endpoint that anyone on the internet can
+        reach. Shopify only needs the acknowledgement.
+        """
+        response = client.post(
+            url, content=json.dumps([]).encode(), headers={"Content-Type": "application/json"}
+        )
+
+        assert response.status_code == 200
+        body = response.json()
+        assert body["success"] is False
+        assert body["message"] == "Error processing webhook"
+        # The AttributeError's text must not travel with it.
+        assert "attribute" not in response.text
+        assert "list" not in response.text