from __future__ import annotations from flask import Flask, jsonify from atlas_portal.routes import account_wolf class DummyAriadne: def __init__(self, enabled: bool = True) -> None: self._enabled = enabled self.calls: list[tuple[str, str, object | None, dict | None]] = [] def enabled(self) -> bool: return self._enabled def proxy(self, method: str, path: str, payload: object | None = None, params: dict | None = None): self.calls.append((method, path, payload, params)) return jsonify({"path": path, "payload": payload, "params": params}) def make_client(monkeypatch, *, ariadne: DummyAriadne | None = None, account_ok: bool = True): app = Flask(__name__) active_ariadne = ariadne or DummyAriadne() monkeypatch.setattr(account_wolf, "ariadne_client", active_ariadne) monkeypatch.setattr(account_wolf, "require_auth", lambda fn: fn) monkeypatch.setattr( account_wolf, "require_account_access", lambda: (True, None) if account_ok else (False, (jsonify({"error": "forbidden"}), 403)), ) account_wolf.register_account_wolf(app) return app.test_client(), active_ariadne def test_wolf_status_proxies_source_ip(monkeypatch) -> None: client, ariadne = make_client(monkeypatch) resp = client.get("/api/account/wolf", headers={"X-Forwarded-For": "1.2.3.4, 10.0.0.1"}) assert resp.status_code == 200 assert ariadne.calls == [("GET", "/api/game-stream/status", None, {"source_ip": "1.2.3.4"})] def test_wolf_unlock_uses_current_source_ip(monkeypatch) -> None: client, ariadne = make_client(monkeypatch) resp = client.post("/api/account/wolf/firewall/unlock", json={"ttl_seconds": 120}, headers={"X-Real-IP": "5.6.7.8"}) assert resp.status_code == 200 assert ariadne.calls == [("POST", "/api/game-stream/firewall/unlock", {"ttl_seconds": 120, "ip": "5.6.7.8"}, None)] def test_wolf_pairing_and_admin_actions_proxy(monkeypatch) -> None: client, ariadne = make_client(monkeypatch) client.get("/api/account/wolf/pairing/status", headers={"X-Forwarded-For": "1.2.3.4"}) client.post("/api/account/wolf/pairing/submit-pin", json={"pair_secret": "secret", "pin": "1234"}, headers={"X-Forwarded-For": "1.2.3.4"}) client.post("/api/account/wolf/game-mode/start", json={"game": "steam"}) client.post("/api/account/wolf/game-mode/stop", json={"game": "steam"}) client.post("/api/account/wolf/admin/firewall/unlock", json={"ip": "8.8.8.8", "target_user": "olya"}) assert ariadne.calls == [ ("GET", "/api/game-stream/pairing/status", None, {"source_ip": "1.2.3.4"}), ("POST", "/api/game-stream/pairing/submit-pin", {"pair_secret": "secret", "pin": "1234", "source_ip": "1.2.3.4"}, None), ("POST", "/api/admin/game-mode/start", {"game": "steam"}, None), ("POST", "/api/admin/game-mode/stop", {"game": "steam"}, None), ("POST", "/api/admin/game-stream/firewall/unlock", {"ip": "8.8.8.8", "target_user": "olya"}, None), ] def test_wolf_routes_require_account_and_ariadne(monkeypatch) -> None: client, _ariadne = make_client(monkeypatch, account_ok=False) assert client.get("/api/account/wolf").status_code == 403 client, _ariadne = make_client(monkeypatch, ariadne=DummyAriadne(enabled=False)) assert client.get("/api/account/wolf").status_code == 503