import urllib.request
|
import json
|
|
API = "http://127.0.0.1:8010"
|
|
def post(path, body, token=None):
|
headers = {"Content-Type": "application/json"}
|
if token:
|
headers["Authorization"] = f"Bearer {token}"
|
data = json.dumps(body).encode()
|
req = urllib.request.Request(f"{API}{path}", data=data, headers=headers)
|
return json.loads(urllib.request.urlopen(req).read())
|
|
def get(path, token=None):
|
headers = {}
|
if token:
|
headers["Authorization"] = f"Bearer {token}"
|
req = urllib.request.Request(f"{API}{path}", headers=headers)
|
return json.loads(urllib.request.urlopen(req).read())
|
|
def put(path, body, token=None):
|
headers = {"Content-Type": "application/json"}
|
if token:
|
headers["Authorization"] = f"Bearer {token}"
|
data = json.dumps(body).encode()
|
req = urllib.request.Request(f"{API}{path}", data=data, headers=headers, method="PUT")
|
return json.loads(urllib.request.urlopen(req).read())
|
|
# 1. Admin login
|
r = post("/api/auth/login", {"username": "admin", "password": "admin123"})
|
admin_token = r["access_token"]
|
print("=== Admin login OK ===")
|
|
# 2. Assign subject to grader
|
subs = get("/api/subjects", admin_token)
|
first_sub = subs["items"][0]
|
put("/api/admin/graders/2", {
|
"username": "grader", "display_name": "", "is_active": True, "subjects": [first_sub]
|
}, admin_token)
|
print(f"Grader assigned subject: {first_sub}")
|
|
# 3. Grader login
|
r = post("/api/auth/login", {"username": "grader", "password": "grader123"})
|
grader_token = r["access_token"]
|
print("=== Grader login OK ===")
|
|
# 4. Check settings (privacy OFF)
|
settings = get("/api/settings")
|
print(f"Settings: grader_can_see_privacy={settings['grader_can_see_privacy']}")
|
|
# 5. Grader scores (privacy OFF, name/id_card should be null, no search)
|
scores = get("/api/scores?page=1&page_size=5", grader_token)
|
print(f"\n=== Grader scores (privacy OFF) ===")
|
print(f"Total: {scores['total']}")
|
for item in scores["items"]:
|
print(f" student_no={item['student_no']}, name={item['name']}, id_card={item['id_card']}, score={item['score']}")
|
|
# 6. Grader search by name (should be ignored)
|
scores2 = get("/api/scores?page=1&page_size=5&name=test", grader_token)
|
print(f"\n=== Grader search name=test (should be ignored, same total) ===")
|
print(f"Total: {scores2['total']} (expected: {scores['total']})")
|
|
# 7. Admin turns ON privacy
|
put("/api/admin/settings", {
|
"system_name": settings["system_name"], "grader_can_see_privacy": True
|
}, admin_token)
|
print("\n=== Admin turned ON privacy ===")
|
|
# 8. Grader scores (privacy ON, should show full)
|
scores3 = get("/api/scores?page=1&page_size=5", grader_token)
|
print(f"\n=== Grader scores (privacy ON) ===")
|
print(f"Total: {scores3['total']}")
|
for item in scores3["items"]:
|
print(f" student_no={item['student_no']}, name={item['name']}, id_card={item['id_card']}, score={item['score']}")
|
|
# 9. Grader search by name (should work now)
|
scores4 = get("/api/scores?page=1&page_size=5&name=a", grader_token)
|
print(f"\n=== Grader search name=a (should work now) ===")
|
print(f"Total: {scores4['total']}")
|
|
# 10. Reset to OFF
|
put("/api/admin/settings", {
|
"system_name": settings["system_name"], "grader_can_see_privacy": False
|
}, admin_token)
|
print("\n=== Reset privacy to OFF ===")
|
|
# 11. Admin scores (always full)
|
scores5 = get("/api/scores?page=1&page_size=5", admin_token)
|
print(f"\n=== Admin scores (always full) ===")
|
print(f"Total: {scores5['total']}")
|
for item in scores5["items"]:
|
print(f" student_no={item['student_no']}, name={item['name']}, id_card={item['id_card']}, score={item['score']}")
|
