Enhance API tests: add authentication headers using API key from environment variable for global endpoints.

Author: hk-dev13

tests/quick_test.py

@@ -1,6 +1,6 @@
 from __future__ import annotations
 
-import os
+import os # <-- DITAMBAHKAN
 import json
 from api.services.cevs_aggregator import compute_cevs_for_company
 from flask import Flask
@@ -10,15 +10,26 @@
 def test_global_edgar_endpoint_smoke(monkeypatch):
     # Use Flask test client to avoid needing a running server
     client = flask_app.test_client()
-    resp = client.get("/global/edgar?country=United%20States&pollutant=PM2.5&window=3")
-    # It should not 500 even if data missing; on success 200 else 400 for missing country
+
+    # Ambil API key dari environment variable
+    api_key = os.getenv('API_KEY')
+    # PENTING: Ganti 'X-API-KEY' jika nama header Anda berbeda
+    headers = {'X-API-KEY': api_key}
+
+    resp = client.get("/global/edgar?country=United%20States&pollutant=PM2.5&window=3", headers=headers) # <-- DITAMBAHKAN headers
+    
+    # Karena API Key sudah valid, status code tidak akan 401 lagi.
+    # Tes ini sekarang memeriksa apakah statusnya 200 (sukses) atau 400 (jika ada parameter salah)
     assert resp.status_code in (200, 400)
     data = resp.get_json()
     assert isinstance(data, dict)
     if resp.status_code == 200:
         assert data.get("status") == "success"
         assert "series" in data and isinstance(data["series"], list)
         assert "trend" in data and isinstance(data["trend"], dict)
+
+# Bagian di bawah ini untuk testing lokal dan tidak dijalankan oleh pytest
+# jadi tidak perlu diubah.
 """
 Quick test script untuk API tanpa perlu terminal interaktif
 """

tests/test_global_routes.py

@@ -4,6 +4,7 @@
 """
 from __future__ import annotations
 
+import os # <-- DITAMBAHKAN
 import pytest
 from flask import Flask
 from api.api_server import app as flask_app
@@ -17,28 +18,37 @@ def client(self):
         """Flask test client for making API requests."""
         return flask_app.test_client()
 
-    def test_global_emissions_basic_response(self, client):
+    @pytest.fixture
+    def auth_headers(self):
+        """Fixture to create authentication headers from environment variable."""
+        api_key = os.getenv('API_KEY')
+        if not api_key:
+            pytest.fail("API_KEY environment variable not set. Please set it in GitHub Secrets.")
+        # PENTING: Ganti 'X-API-KEY' jika nama header Anda berbeda
+        return {'X-API-KEY': api_key}
+
+    def test_global_emissions_basic_response(self, client, auth_headers):
         """Test /global/emissions returns 200 and proper structure."""
-        resp = client.get("/global/emissions?limit=5")
+        resp = client.get("/global/emissions?limit=5", headers=auth_headers) # <-- DITAMBAHKAN headers
         assert resp.status_code == 200
         data = resp.get_json()
         assert data["status"] == "success"
         assert "data" in data
         assert "pagination" in data
         assert isinstance(data["data"], list)
 
-    def test_global_emissions_with_filters(self, client):
+    def test_global_emissions_with_filters(self, client, auth_headers):
         """Test /global/emissions with state and year filters."""
-        resp = client.get("/global/emissions?state=TX&year=2023&limit=3")
+        resp = client.get("/global/emissions?state=TX&year=2023&limit=3", headers=auth_headers) # <-- DITAMBAHKAN headers
         assert resp.status_code == 200
         data = resp.get_json()
         assert data["status"] == "success"
         assert data["filters"]["state"] == "TX"
         assert data["filters"]["year"] == 2023
 
-    def test_global_emissions_stats(self, client):
+    def test_global_emissions_stats(self, client, auth_headers):
         """Test /global/emissions/stats returns aggregated statistics."""
-        resp = client.get("/global/emissions/stats")
+        resp = client.get("/global/emissions/stats", headers=auth_headers) # <-- DITAMBAHKAN headers
         assert resp.status_code == 200
         data = resp.get_json()
         assert data["status"] == "success"
@@ -49,35 +59,35 @@ def test_global_emissions_stats(self, client):
         assert "by_year" in stats
         assert "total_records" in stats
 
-    def test_global_iso_basic_response(self, client):
+    def test_global_iso_basic_response(self, client, auth_headers):
         """Test /global/iso returns 200 and proper structure."""
-        resp = client.get("/global/iso?limit=10")
+        resp = client.get("/global/iso?limit=10", headers=auth_headers) # <-- DITAMBAHKAN headers
         assert resp.status_code == 200
         data = resp.get_json()
         assert data["status"] == "success"
         assert "data" in data
         assert isinstance(data["data"], list)
 
-    def test_global_iso_with_country_filter(self, client):
+    def test_global_iso_with_country_filter(self, client, auth_headers):
         """Test /global/iso with country filter."""
-        resp = client.get("/global/iso?country=Germany&limit=5")
+        resp = client.get("/global/iso?country=Germany&limit=5", headers=auth_headers) # <-- DITAMBAHKAN headers
         assert resp.status_code == 200
         data = resp.get_json()
         assert data["status"] == "success"
         assert data["filters"]["country"] == "Germany"
 
-    def test_global_eea_basic_response(self, client):
+    def test_global_eea_basic_response(self, client, auth_headers):
         """Test /global/eea returns 200 and proper structure."""
-        resp = client.get("/global/eea?limit=10")
+        resp = client.get("/global/eea?limit=10", headers=auth_headers) # <-- DITAMBAHKAN headers
         assert resp.status_code == 200
         data = resp.get_json()
         assert data["status"] == "success"
         assert "data" in data
         assert isinstance(data["data"], list)
 
-    def test_global_eea_with_filters(self, client):
+    def test_global_eea_with_filters(self, client, auth_headers):
         """Test /global/eea with indicator, country, and year filters."""
-        resp = client.get("/global/eea?country=Sweden&indicator=GHG&year=2023&limit=5")
+        resp = client.get("/global/eea?country=Sweden&indicator=GHG&year=2023&limit=5", headers=auth_headers) # <-- DITAMBAHKAN headers
         assert resp.status_code == 200
         data = resp.get_json()
         assert data["status"] == "success"
@@ -86,44 +96,38 @@ def test_global_eea_with_filters(self, client):
         assert filters["indicator"] == "GHG"
         assert filters["year"] == 2023
 
-    def test_global_cevs_basic_company(self, client):
+    def test_global_cevs_basic_company(self, client, auth_headers):
         """Test /global/cevs/{company} returns proper CEVS score structure."""
-        resp = client.get("/global/cevs/Green%20Energy%20Corp")
+        resp = client.get("/global/cevs/Green%20Energy%20Corp", headers=auth_headers) # <-- DITAMBAHKAN headers
         assert resp.status_code == 200
         data = resp.get_json()
         assert data["status"] == "success"
         assert "score" in data
         assert "components" in data
         assert "sources" in data
         assert "details" in data
-        
-        # Validate score is within expected range
         assert 0 <= data["score"] <= 100
-        
-        # Validate components structure
         components = data["components"]
         expected_components = ["base", "iso_bonus", "epa_penalty", "renewables_bonus", "pollution_penalty", "policy_bonus"]
         for comp in expected_components:
             assert comp in components
 
-    def test_global_cevs_with_country(self, client):
+    def test_global_cevs_with_country(self, client, auth_headers):
         """Test /global/cevs/{company} with country parameter for enhanced scoring."""
-        resp = client.get("/global/cevs/Swedish%20Wind%20Power?country=Sweden")
+        resp = client.get("/global/cevs/Swedish%20Wind%20Power?country=Sweden", headers=auth_headers) # <-- DITAMBAHKAN headers
         assert resp.status_code == 200
         data = resp.get_json()
         assert data["status"] == "success"
         assert data["country"] == "Sweden"
-        
-        # Should have renewable energy data for Sweden
         details = data["details"]
         assert "renewables" in details
         if details["renewables"]["country_row"]:
             assert details["renewables"]["country_row"]["country"].lower() == "sweden"
 
-    def test_global_edgar_basic_response(self, client):
+    def test_global_edgar_basic_response(self, client, auth_headers):
         """Test /global/edgar returns proper structure (may have empty data if file missing)."""
-        resp = client.get("/global/edgar?country=United%20States&pollutant=PM2.5")
-        assert resp.status_code == 200  # Should not fail even if EDGAR file missing
+        resp = client.get("/global/edgar?country=United%20States&pollutant=PM2.5", headers=auth_headers) # <-- DITAMBAHKAN headers
+        assert resp.status_code == 200
         data = resp.get_json()
         assert data["status"] == "success"
         assert "country" in data
@@ -133,21 +137,21 @@ def test_global_edgar_basic_response(self, client):
         assert data["country"] == "United States"
         assert data["pollutant"] == "PM2.5"
 
-    def test_global_edgar_missing_country(self, client):
+    def test_global_edgar_missing_country(self, client, auth_headers):
         """Test /global/edgar returns 400 when country parameter is missing."""
-        resp = client.get("/global/edgar?pollutant=NOx")
+        resp = client.get("/global/edgar?pollutant=NOx", headers=auth_headers) # <-- DITAMBAHKAN headers
+        # API Key valid, jadi errornya bukan 401, melainkan 400 karena parameter tidak lengkap
         assert resp.status_code == 400
         data = resp.get_json()
         assert data["status"] == "error"
         assert "country is required" in data["message"]
 
-    def test_global_edgar_with_window_parameter(self, client):
+    def test_global_edgar_with_window_parameter(self, client, auth_headers):
         """Test /global/edgar with custom trend window parameter."""
-        resp = client.get("/global/edgar?country=Germany&pollutant=NOx&window=5")
+        resp = client.get("/global/edgar?country=Germany&pollutant=NOx&window=5", headers=auth_headers) # <-- DITAMBAHKAN headers
         assert resp.status_code == 200
         data = resp.get_json()
         assert data["status"] == "success"
-        # Trend should reflect the window parameter in its calculation
         trend = data["trend"]
         assert "pollutant" in trend
         assert trend["pollutant"] == "NOx"