seller_central_backend/api/tests.py

import pytest
from django.urls import reverse
from django.contrib.auth.models import User
from rest_framework import status
from rest_framework.test import APIClient
from api.models import Product, Order, ReturnRequest, Wallet, WalletTransaction, SupplierProfile

@pytest.fixture
def api_client():
    return APIClient()

@pytest.fixture
def create_user(db):
    user = User.objects.create_user(username='demo_seller', email='demo@example.com', password='Password123!')
    SupplierProfile.objects.create(user=user, phone='1234567890')
    return user

@pytest.mark.django_db
def test_user_registration(api_client):
    url = reverse('register')
    data = {
        'username': 'new_seller',
        'email': 'new@example.com',
        'phone': '1234567890',
        'password': 'SecurePassword123!'
    }
    response = api_client.post(url, data, format='json')
    assert response.status_code == status.HTTP_201_CREATED
    assert response.data['user']['username'] == 'new_seller'
    assert User.objects.filter(username='new_seller').exists()

@pytest.mark.django_db
def test_user_logout(api_client, create_user):
    url = reverse('logout')
    api_client.force_authenticate(user=create_user)
    response = api_client.post(url)
    assert response.status_code == status.HTTP_200_OK
    assert response.data['success'] is True

@pytest.mark.django_db
def test_otp_verification(api_client, create_user):
    url = reverse('verify-otp')
    api_client.force_authenticate(user=create_user)
    
    # Correct OTP
    response = api_client.post(url, {'type': 'phone', 'otp': '123456'}, format='json')
    assert response.status_code == status.HTTP_200_OK
    assert response.data['verified'] is True

    # Incorrect OTP
    response = api_client.post(url, {'type': 'phone', 'otp': '000000'}, format='json')
    assert response.status_code == status.HTTP_400_BAD_REQUEST
    assert response.data['verified'] is False

@pytest.mark.django_db
def test_profile_update(api_client, create_user):
    url = reverse('profile')
    api_client.force_authenticate(user=create_user)
    
    data = {
        'store_name': 'New Artisan Handloom',
        'business_bio': 'Beautiful handmade rugs.',
        'gstin': '29AAAAA1111A1Z1',
        'is_gstin_verified': True,
        'aadhar_s3_key': 'suppliers/1/aadhar.pdf',
        'pan_s3_key': 'suppliers/1/pan.pdf',
        'logo_s3_key': 'suppliers/1/logo.jpg'
    }
    response = api_client.put(url, data, format='json')
    assert response.status_code == status.HTTP_200_OK
    create_user.profile.refresh_from_db()
    assert create_user.profile.store_name == 'New Artisan Handloom'
    assert create_user.profile.is_gstin_verified is True

@pytest.mark.django_db
def test_product_crud(api_client, create_user):
    api_client.force_authenticate(user=create_user)
    
    # Create product
    url = reverse('product-list')
    data = {
        'title': 'Test Indigo Shawl',
        'category': 'Apparel',
        'price': '85.00',
        'stock': 10,
        'sku': 'TEST-SHAWL-01'
    }
    response = api_client.post(url, data, format='json')
    assert response.status_code == status.HTTP_201_CREATED
    assert Product.objects.filter(sku='TEST-SHAWL-01').exists()

    # List products (returns paginated structure under 'results')
    response = api_client.get(url)
    assert response.status_code == status.HTTP_200_OK
    assert len(response.data['results']) == 1

@pytest.mark.django_db
def test_bulk_upload(api_client, create_user):
    api_client.force_authenticate(user=create_user)
    url = reverse('bulk-upload')
    data = {
        'products': [
            {'title': 'Bulk Bowl', 'category': 'Kitchenware', 'price': '65.00', 'stock': 15, 'sku': 'BOWL-WAL-12'},
            {'title': 'Bulk Tablecloth', 'category': 'Textiles', 'price': '48.00', 'stock': 30, 'sku': 'LINE-COT-15'}
        ]
    }
    response = api_client.post(url, data, format='json')
    assert response.status_code == status.HTTP_200_OK
    assert response.data['success'] is True
    assert Product.objects.filter(sku='BOWL-WAL-12').exists()
    assert Product.objects.filter(sku='LINE-COT-15').exists()

@pytest.mark.django_db
def test_order_actions(api_client, create_user):
    api_client.force_authenticate(user=create_user)
    
    # Query list to auto-create mock orders
    list_url = reverse('order-list')
    api_client.get(list_url)
    
    order = Order.objects.filter(supplier=create_user, status='Pending Acceptance').first()
    assert order is not None

    # Accept order
    accept_url = reverse('order-accept', args=[order.id])
    response = api_client.post(accept_url)
    assert response.status_code == status.HTTP_200_OK
    assert response.data['status'] == 'Ready to Ship'
    assert response.data['carrier'] == 'DHL Express'

@pytest.mark.django_db
def test_return_actions(api_client, create_user):
    api_client.force_authenticate(user=create_user)
    
    # Query list to auto-create mock return requests
    list_url = reverse('return-list')
    api_client.get(list_url)
    
    ret = ReturnRequest.objects.filter(supplier=create_user, status='Pending Approval').first()
    assert ret is not None

    # Approve return
    action_url = reverse('return-action', args=[ret.id])
    response = api_client.post(action_url, {'action': 'Approved'}, format='json')
    assert response.status_code == status.HTTP_200_OK
    assert response.data['status'] == 'In Transit'

@pytest.mark.django_db
def test_wallet_withdrawal(api_client, create_user):
    api_client.force_authenticate(user=create_user)
    wallet = Wallet.objects.create(supplier=create_user, outstanding=1000.00, withdrawn=500.00)

    url = reverse('withdraw')
    # Successful withdrawal
    response = api_client.post(url, {'amount': '200.00'}, format='json')
    assert response.status_code == status.HTTP_200_OK
    assert response.data['outstanding'] == '800.00'
    assert response.data['withdrawn'] == '700.00'
    assert WalletTransaction.objects.filter(wallet=wallet).exists()

    # Invalid amount (exceeds outstanding)
    response = api_client.post(url, {'amount': '1500.00'}, format='json')
    assert response.status_code == status.HTTP_400_BAD_REQUEST