feat: videoplayer toegevoegd

webui/backend/tests/golden/test_api_video_golden.py

@@ -0,0 +1,120 @@
+from __future__ import annotations
+
+import asyncio
+import sys
+import tempfile
+import unittest
+from pathlib import Path
+
+import httpx
+from starlette.requests import Request
+
+sys.path.insert(0, str(Path(__file__).resolve().parents[3]))
+
+from backend.app.api.routes_files import video as video_route
+from backend.app.dependencies import get_file_ops_service
+from backend.app.fs.filesystem_adapter import FilesystemAdapter
+from backend.app.main import app
+from backend.app.security.path_guard import PathGuard
+from backend.app.services.file_ops_service import FileOpsService
+
+
+class VideoApiGoldenTest(unittest.TestCase):
+    def setUp(self) -> None:
+        self.temp_dir = tempfile.TemporaryDirectory()
+        self.root = Path(self.temp_dir.name) / "root"
+        self.root.mkdir(parents=True, exist_ok=True)
+        path_guard = PathGuard({"storage1": str(self.root)})
+        self.service = FileOpsService(path_guard=path_guard, filesystem=FilesystemAdapter())
+
+        async def _override_file_ops_service() -> FileOpsService:
+            return self.service
+
+        app.dependency_overrides[get_file_ops_service] = _override_file_ops_service
+
+    def tearDown(self) -> None:
+        app.dependency_overrides.clear()
+        self.temp_dir.cleanup()
+
+    def _request(self, path: str, headers: dict[str, str] | None = None) -> httpx.Response:
+        async def _run() -> httpx.Response:
+            transport = httpx.ASGITransport(app=app)
+            async with httpx.AsyncClient(transport=transport, base_url="http://testserver") as client:
+                return await client.get("/api/files/video", params={"path": path}, headers=headers)
+
+        return asyncio.run(_run())
+
+    def _stream_route(self, path: str, headers: dict[str, str] | None = None) -> tuple[object, bytes]:
+        async def _run() -> tuple[object, bytes]:
+            scope = {
+                "type": "http",
+                "method": "GET",
+                "path": "/api/files/video",
+                "headers": [
+                    (key.lower().encode("latin-1"), value.encode("latin-1"))
+                    for key, value in (headers or {}).items()
+                ],
+            }
+            response = await video_route(path=path, request=Request(scope), service=self.service)
+            body = b""
+            async for chunk in response.body_iterator:
+                body += chunk
+            return response, body
+
+        return asyncio.run(_run())
+
+    def test_video_stream_success_mp4(self) -> None:
+        payload = b"\x00\x00\x00\x20ftypisom\x00\x00\x00\x00mp42"
+        (self.root / "sample.mp4").write_bytes(payload)
+
+        response, body = self._stream_route("storage1/sample.mp4")
+
+        self.assertEqual(response.status_code, 200)
+        self.assertEqual(response.headers["content-type"], "video/mp4")
+        self.assertEqual(response.headers["accept-ranges"], "bytes")
+        self.assertEqual(response.headers["content-length"], str(len(payload)))
+        self.assertEqual(body, payload)
+
+    def test_video_stream_range_partial_content(self) -> None:
+        payload = b"abcdefghijklmnopqrstuvwxyz"
+        (self.root / "clip.mp4").write_bytes(payload)
+
+        response, body = self._stream_route("storage1/clip.mp4", headers={"Range": "bytes=2-5"})
+
+        self.assertEqual(response.status_code, 206)
+        self.assertEqual(response.headers["accept-ranges"], "bytes")
+        self.assertEqual(response.headers["content-range"], f"bytes 2-5/{len(payload)}")
+        self.assertEqual(response.headers["content-length"], "4")
+        self.assertEqual(body, b"cdef")
+
+    def test_video_directory_type_conflict(self) -> None:
+        (self.root / "media").mkdir()
+
+        response = self._request("storage1/media")
+
+        self.assertEqual(response.status_code, 409)
+        self.assertEqual(response.json()["error"]["code"], "type_conflict")
+
+    def test_video_path_not_found(self) -> None:
+        response = self._request("storage1/missing.mp4")
+
+        self.assertEqual(response.status_code, 404)
+        self.assertEqual(response.json()["error"]["code"], "path_not_found")
+
+    def test_video_traversal_blocked(self) -> None:
+        response = self._request("storage1/../etc/passwd")
+
+        self.assertEqual(response.status_code, 403)
+        self.assertEqual(response.json()["error"]["code"], "path_traversal_detected")
+
+    def test_video_non_video_type_blocked(self) -> None:
+        (self.root / "notes.txt").write_text("hello", encoding="utf-8")
+
+        response = self._request("storage1/notes.txt")
+
+        self.assertEqual(response.status_code, 409)
+        self.assertEqual(response.json()["error"]["code"], "unsupported_type")
+
+
+if __name__ == "__main__":
+    unittest.main()