Latte
e873d0325b
Previously list_repositories was blocked in service-PAT mode because it has no repository target for the per-user permission check, so users could not list their repositories at all (the connector surfaced a generic error). list_repositories now returns only the repositories the signed-in user owns or contributes to, instead of everything the bot token can see: - gitea_client.py: add list_user_repositories(login) — resolves the user id and queries /api/v1/repos/search with the uid filter. - repository.py: list_repositories_tool uses the user-scoped path when a service PAT is configured and a user login is present; pure-OAuth mode still uses the user's own /user/repos. - server.py: allow list_repositories through the service-PAT guard (it is scoped to the user in the handler); all other tools still require a repository target. - README.md: document the new user-scoped behavior and its visibility caveat. Tests: user-scoped client method (uid resolution + unknown user), PAT-mode tool scoping, and conftest now clears the request context between tests to prevent contextvar login leakage across files. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
80 lines
2.9 KiB
Python
80 lines
2.9 KiB
Python
"""Pytest configuration and fixtures."""
|
|
|
|
from collections.abc import Generator
|
|
from pathlib import Path
|
|
|
|
import pytest
|
|
|
|
from aegis_gitea_mcp.audit import reset_audit_logger
|
|
from aegis_gitea_mcp.auth import reset_validator
|
|
from aegis_gitea_mcp.config import reset_settings
|
|
from aegis_gitea_mcp.oauth import reset_oauth_validator
|
|
from aegis_gitea_mcp.oauth_flow import reset_oauth_client_registry
|
|
from aegis_gitea_mcp.observability import reset_metrics_registry
|
|
from aegis_gitea_mcp.policy import reset_policy_engine
|
|
from aegis_gitea_mcp.rate_limit import reset_rate_limiter
|
|
from aegis_gitea_mcp.request_context import clear_gitea_auth_context
|
|
from aegis_gitea_mcp.server import reset_repo_authz_cache
|
|
|
|
|
|
@pytest.fixture(autouse=True)
|
|
def reset_globals(tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> Generator[None, None, None]:
|
|
"""Reset global singletons between tests and set up temp audit log."""
|
|
# Reset singletons before each test to ensure clean state
|
|
reset_settings()
|
|
reset_audit_logger()
|
|
reset_validator()
|
|
reset_oauth_validator()
|
|
reset_oauth_client_registry()
|
|
reset_repo_authz_cache()
|
|
reset_policy_engine()
|
|
reset_rate_limiter()
|
|
reset_metrics_registry()
|
|
clear_gitea_auth_context()
|
|
|
|
# Use temporary directory for audit logs in tests
|
|
audit_log_path = tmp_path / "audit.log"
|
|
monkeypatch.setenv("AUDIT_LOG_PATH", str(audit_log_path))
|
|
|
|
yield
|
|
|
|
# Also reset after test for cleanup
|
|
reset_settings()
|
|
reset_audit_logger()
|
|
reset_validator()
|
|
reset_oauth_validator()
|
|
reset_oauth_client_registry()
|
|
reset_repo_authz_cache()
|
|
reset_policy_engine()
|
|
reset_rate_limiter()
|
|
reset_metrics_registry()
|
|
clear_gitea_auth_context()
|
|
|
|
|
|
@pytest.fixture
|
|
def mock_env(monkeypatch: pytest.MonkeyPatch) -> None:
|
|
"""Set up mock environment variables for testing (standard API key mode)."""
|
|
monkeypatch.setenv("GITEA_URL", "https://gitea.example.com")
|
|
monkeypatch.setenv("GITEA_TOKEN", "test-token-12345")
|
|
monkeypatch.setenv("ENVIRONMENT", "test")
|
|
monkeypatch.setenv("MCP_HOST", "127.0.0.1")
|
|
monkeypatch.setenv("MCP_PORT", "8080")
|
|
monkeypatch.setenv("LOG_LEVEL", "DEBUG")
|
|
monkeypatch.setenv("MCP_API_KEYS", "a" * 64)
|
|
monkeypatch.setenv("STARTUP_VALIDATE_GITEA", "false")
|
|
|
|
|
|
@pytest.fixture
|
|
def mock_env_oauth(monkeypatch: pytest.MonkeyPatch) -> None:
|
|
"""Set up mock environment variables for OAuth mode testing."""
|
|
monkeypatch.setenv("GITEA_URL", "https://gitea.example.com")
|
|
monkeypatch.setenv("ENVIRONMENT", "test")
|
|
monkeypatch.setenv("MCP_HOST", "127.0.0.1")
|
|
monkeypatch.setenv("MCP_PORT", "8080")
|
|
monkeypatch.setenv("LOG_LEVEL", "DEBUG")
|
|
monkeypatch.setenv("OAUTH_MODE", "true")
|
|
monkeypatch.setenv("GITEA_OAUTH_CLIENT_ID", "test-client-id")
|
|
monkeypatch.setenv("GITEA_OAUTH_CLIENT_SECRET", "test-client-secret")
|
|
monkeypatch.setenv("OAUTH_STATE_SECRET", "test-state-secret-0123456789abcdef")
|
|
monkeypatch.setenv("STARTUP_VALIDATE_GITEA", "false")
|