Einstellungen: Gitea-Actions-Variablen per API übernehmen (Token nur für den Abruf)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

tests/test_gitea_import.py

@@ -0,0 +1,59 @@
+"""Import der Gitea-Actions-Variablen in die Einstellungen (mit gefakter Gitea-API)."""
+import pytest
+from fastapi.testclient import TestClient
+
+from app.db import session
+from app.main import app
+from app.services import gitea_import
+
+
+class FakeGitea:
+    def __init__(self, repo_vars, org_vars=None, status=200):
+        self.repo_vars, self.org_vars, self.status, self.urls, self.tokens = repo_vars, org_vars or [], status, [], []
+
+    def __call__(self, url, token):
+        self.urls.append(url)
+        self.tokens.append(token)
+        if self.status != 200:
+            return self.status, None
+        if "/orgs/" in url:
+            return (404, None) if self.org_vars is None else (200, self.org_vars)
+        return 200, self.repo_vars
+
+
+def test_fetch_merges_org_and_repo_and_maps_settings():
+    g = FakeGitea([{"name": "DOMAIN", "data": "kunde.de"}, {"name": "LLM_MODEL", "data": "claude-x"}, {"name": "REGISTRY", "data": "reg/o"}],
+                  [{"name": "LLM_MODEL", "data": "org-model"}, {"name": "SMTP_HOST", "data": "mail.x"}])
+    v = gitea_import.fetch_variables("https://gitea.test", "Org/Repo", "tok", g)
+    assert v == {"LLM_MODEL": "claude-x", "SMTP_HOST": "mail.x", "DOMAIN": "kunde.de", "REGISTRY": "reg/o"}      # Repo schlägt Organisation
+    assert all(t == "tok" for t in g.tokens) and g.urls[0].startswith("https://gitea.test/api/v1/orgs/Org/actions/variables")
+
+
+def test_errors_are_explained():
+    with pytest.raises(gitea_import.GiteaError, match="Zugriff"):
+        gitea_import.fetch_variables("https://g", "O/R", "t", FakeGitea([], status=403))
+    with pytest.raises(gitea_import.GiteaError, match="nicht verfügbar"):
+        gitea_import.fetch_variables("https://g", "O/R", "t", FakeGitea(None, None, status=404) if False else (lambda u, t: (404, None)))
+    with pytest.raises(gitea_import.GiteaError, match="Besitzer/Name"):
+        gitea_import.fetch_variables("https://g", "nurname", "t", FakeGitea([]))
+
+
+def test_preview_statuses_and_masking():
+    with TestClient(app):
+        with session() as db:
+            rows = {r["name"]: r for r in gitea_import.preview(db, {"DOMAIN": "kunde.de", "AUTH_ENABLED": "true", "SMTP_HOST": "mail.x",
+                                                                    "REGISTRY_HOST": "h", "GLADIA_NER": "1", "SOME_API_KEY": "geheim", "LLM_MODEL": "claude-4-6-sonnet"})}
+    assert rows["DOMAIN"]["setting"] == "base_domain" and rows["DOMAIN"]["status"] == "geändert"
+    assert rows["AUTH_ENABLED"]["status"] == "gleich" and rows["SMTP_HOST"]["status"] == "neu" and rows["LLM_MODEL"]["status"] == "gleich"
+    assert rows["REGISTRY_HOST"]["status"] == "ignoriert" and rows["GLADIA_NER"]["status"] == "unbekannt"
+    assert rows["SOME_API_KEY"]["status"] == "unbekannt"
+
+
+def test_endpoint_never_stores_or_echoes_the_token(monkeypatch):
+    monkeypatch.setattr(gitea_import, "_real_get", lambda url, token: (200, [{"name": "DOMAIN", "data": "kunde.de"}]) if "/repos/" in url else (404, None))
+    monkeypatch.setattr(gitea_import, "fetch_variables", lambda base, repo, token, get=None: {"DOMAIN": "kunde.de"})
+    with TestClient(app) as c:
+        r = c.post("/api/gitea/variables", json={"repo": "O/R", "token": "supergeheim"})
+        assert r.status_code == 200 and "supergeheim" not in r.text and r.json()["rows"][0]["setting"] == "base_domain"
+        assert c.post("/api/gitea/variables", json={"repo": "O/R"}).status_code == 400
+        assert "supergeheim" not in c.get("/api/settings").text