feat: 修复 H5 底部导航覆盖 + 更新项目进度文档

## H5 底部导航修复 (Bug #10) - 精简 App.vue，移除重复 tabbar，仅保留全局样式 - uni-page 设置 height: calc(100% - 50px) + overflow-y: auto - 内容区域精确停在底部导航上方，独立滚动不再叠加 - 恢复 custom-tab-bar 组件 ## 项目进度文档 - PROGRESS.md 更新至 10 个 Bug 修复 - 新增 H5 底部导航修复记录 - 新增历史变更条目
2026-05-12 20:24:42 +08:00
parent 69e164dcae
commit 7b62c2f8b4
125 changed files with 19725 additions and 728 deletions
@@ -0,0 +1,95 @@
+import pytest
+from httpx import AsyncClient
+from app.core.security import create_access_token
+from app.models.user import User
+import uuid
+
+
+class TestAdminAPI:
+    async def test_admin_dashboard_unauthorized(self, client: AsyncClient):
+        response = await client.get("/api/v1/admin/dashboard")
+        assert response.status_code == 401
+
+    async def test_admin_dashboard_forbidden_non_admin(self, client: AsyncClient, test_user):
+        token = create_access_token({"sub": str(test_user.id), "tier": "free", "role": "user"})
+        response = await client.get(
+            "/api/v1/admin/dashboard",
+            headers={"Authorization": f"Bearer {token}"},
+        )
+        assert response.status_code == 403
+
+    async def test_admin_dashboard_success(self, client: AsyncClient, test_user):
+        test_user.role = "admin"
+        token = create_access_token({"sub": str(test_user.id), "tier": "free", "role": "admin"})
+        response = await client.get(
+            "/api/v1/admin/dashboard",
+            headers={"Authorization": f"Bearer {token}"},
+        )
+        assert response.status_code == 200
+        data = response.json()
+        assert "total_users" in data
+        assert "paid_users" in data
+
+    async def test_admin_list_users(self, client: AsyncClient, test_user):
+        test_user.role = "admin"
+        token = create_access_token({"sub": str(test_user.id), "tier": "free", "role": "admin"})
+        response = await client.get(
+            "/api/v1/admin/users",
+            headers={"Authorization": f"Bearer {token}"},
+        )
+        assert response.status_code == 200
+        data = response.json()
+        assert "items" in data
+        assert "total" in data
+
+    async def test_admin_update_tier_forbidden_non_admin(self, client: AsyncClient, test_user):
+        target_id = str(uuid.uuid4())
+        token = create_access_token({"sub": str(test_user.id), "tier": "free", "role": "user"})
+        response = await client.patch(
+            f"/api/v1/admin/users/{target_id}/tier",
+            headers={"Authorization": f"Bearer {token}"},
+            json={"tier": "pro"},
+        )
+        assert response.status_code == 403
+
+
+class TestRateLimit:
+    async def test_health_not_rate_limited(self, client: AsyncClient):
+        for _ in range(10):
+            response = await client.get("/health")
+            assert response.status_code == 200
+
+    async def test_rate_limit_headers_present(self, client: AsyncClient, auth_headers):
+        response = await client.get("/api/v1/customers", headers=auth_headers)
+        assert "X-RateLimit-Remaining" in response.headers
+        assert "X-RateLimit-Limit" in response.headers
+
+
+class TestUserRole:
+    async def test_user_default_role(self, client: AsyncClient, test_user):
+        assert test_user.role == "user"
+
+    async def test_user_info_contains_role(self, client: AsyncClient, auth_headers):
+        response = await client.get("/api/v1/auth/me", headers=auth_headers)
+        assert response.status_code == 200
+        data = response.json()
+        assert "role" in data
+        assert data["role"] == "user"
+
+
+class TestPrivacyTerms:
+    async def test_privacy_page_exists(self):
+        import os
+        path = os.path.join(
+            os.path.dirname(os.path.dirname(os.path.abspath(__file__))),
+            "uni-app", "src", "pages", "agreement", "privacy.vue",
+        )
+        assert os.path.exists(path), "privacy.vue not found"
+
+    async def test_terms_page_exists(self):
+        import os
+        path = os.path.join(
+            os.path.dirname(os.path.dirname(os.path.abspath(__file__))),
+            "uni-app", "src", "pages", "agreement", "terms.vue",
+        )
+        assert os.path.exists(path), "terms.vue not found"