# -*- coding: utf-8 -*-
# Copyright (c) 2025 ContextForge Contributors.
# SPDX-License-Identifier: Apache-2.0
"""Shared fixtures for mcpgateway unit tests."""
from __future__ import annotations
from unittest.mock import AsyncMock, MagicMock
import pytest
# Save original RBAC decorator functions at conftest import time.
# Conftest files load before test modules, so these should be the real functions.
import mcpgateway.middleware.rbac as _rbac_mod
_ORIG_REQUIRE_PERMISSION = _rbac_mod.require_permission
_ORIG_REQUIRE_ADMIN_PERMISSION = _rbac_mod.require_admin_permission
_ORIG_REQUIRE_ANY_PERMISSION = _rbac_mod.require_any_permission
class MockPermissionService:
"""Mock PermissionService that allows all permission checks by default."""
# Class-level mock that can be patched by individual tests
check_permission = AsyncMock(return_value=True)
check_admin_permission = AsyncMock(return_value=True)
def __init__(self, db=None):
self.db = db
@pytest.fixture(autouse=True)
def mock_permission_service(monkeypatch):
"""Auto-mock PermissionService and restore real RBAC decorators.
This fixture is auto-used for all tests in this directory.
It also restores real RBAC decorator functions in case other tests
patched them (e.g., via module-level monkeypatching) in the same worker
process when running under xdist.
Tests that need to verify permission denial behavior should:
1. Set MockPermissionService.check_permission.return_value = False
2. Or configure side_effect for more complex scenarios
"""
# Restore real RBAC decorators (may have been replaced by noop in e2e test modules)
monkeypatch.setattr(_rbac_mod, "require_permission", _ORIG_REQUIRE_PERMISSION)
monkeypatch.setattr(_rbac_mod, "require_admin_permission", _ORIG_REQUIRE_ADMIN_PERMISSION)
monkeypatch.setattr(_rbac_mod, "require_any_permission", _ORIG_REQUIRE_ANY_PERMISSION)
# Reset the mock before each test to ensure clean state
MockPermissionService.check_permission = AsyncMock(return_value=True)
MockPermissionService.check_admin_permission = AsyncMock(return_value=True)
monkeypatch.setattr("mcpgateway.middleware.rbac.PermissionService", MockPermissionService)
return MockPermissionService
