inital commit

accounts/tests.py

@@ -0,0 +1,65 @@
+from django.contrib.auth import get_user_model
+from django.urls import reverse
+from rest_framework import status
+from rest_framework.test import APITestCase
+
+from .models import VendorProfile
+
+User = get_user_model()
+
+
+class AccountModelTests(APITestCase):
+    def test_custom_user_creation_and_roles(self):
+        user = User.objects.create_user(
+            email="customer@example.com",
+            password="Pass123456!",
+            is_customer=True,
+            is_vendor=False,
+        )
+        self.assertEqual(user.email, "customer@example.com")
+        self.assertTrue(user.check_password("Pass123456!"))
+        self.assertTrue(user.is_customer)
+        self.assertFalse(user.is_vendor)
+
+
+class AccountApiTests(APITestCase):
+    def test_vendor_registration_and_jwt_flow(self):
+        register_payload = {
+            "email": "vendor@example.com",
+            "password": "Pass123456!",
+            "business_name": "Ocean Rentals",
+        }
+        register_res = self.client.post(reverse("register_vendor"), register_payload, format="json")
+        self.assertEqual(register_res.status_code, status.HTTP_201_CREATED)
+        self.assertTrue(User.objects.filter(email="vendor@example.com", is_vendor=True).exists())
+        self.assertTrue(VendorProfile.objects.filter(user__email="vendor@example.com").exists())
+
+        token_res = self.client.post(
+            reverse("token_obtain_pair"),
+            {"email": "vendor@example.com", "password": "Pass123456!"},
+            format="json",
+        )
+        self.assertEqual(token_res.status_code, status.HTTP_200_OK)
+        self.assertIn("access", token_res.data)
+        self.assertIn("refresh", token_res.data)
+
+        self.client.credentials(HTTP_AUTHORIZATION=f"Bearer {token_res.data['access']}")
+        me_res = self.client.get(reverse("me"))
+        self.assertEqual(me_res.status_code, status.HTTP_200_OK)
+        self.assertEqual(me_res.data["email"], "vendor@example.com")
+
+    def test_vendor_profile_endpoint_forbidden_for_customer(self):
+        customer = User.objects.create_user(
+            email="customer@example.com",
+            password="Pass123456!",
+            is_customer=True,
+            is_vendor=False,
+        )
+        token_res = self.client.post(
+            reverse("token_obtain_pair"),
+            {"email": customer.email, "password": "Pass123456!"},
+            format="json",
+        )
+        self.client.credentials(HTTP_AUTHORIZATION=f"Bearer {token_res.data['access']}")
+        res = self.client.get(reverse("vendor_profile_me"))
+        self.assertEqual(res.status_code, status.HTTP_403_FORBIDDEN)