Function test_auth_login_accepts_valid_totp_code

tests/test_dashboard.py:665–697

(
    app: FastAPIAppAdapter,
    core_lifecycle_td: AstrBotCoreLifecycle,
)

@pytest.mark.asyncio
async def test_auth_login_accepts_valid_totp_code(
    app: FastAPIAppAdapter,
    core_lifecycle_td: AstrBotCoreLifecycle,
):
    original_dashboard_config = copy.deepcopy(
        core_lifecycle_td.astrbot_config["dashboard"]
    )
    test_client = app.test_client()
    _, recovery_code_hash = generate_recovery_code()
    secret = pyotp.random_base32()

    try:
        core_lifecycle_td.astrbot_config["dashboard"]["totp"] = {
            "enable": True,
            "secret": secret,
            "recovery_code_hash": recovery_code_hash,
        }
        response = await test_client.post(
            "/api/auth/login",
            json={
                "username": core_lifecycle_td.astrbot_config["dashboard"]["username"],
                "password": _resolve_dashboard_password(core_lifecycle_td),
                "code": pyotp.TOTP(secret).now(),
            },
        )
        data = await response.get_json()
        assert data["status"] == "ok"
        assert "token" in data["data"]
    finally:
        await _restore_dashboard_password_state(
            core_lifecycle_td,
            original_dashboard_config,
        )


@pytest.mark.asyncio