[feat] 연동테스트

solution/backend/tests/test_social.py

@@ -347,6 +347,79 @@ async def test_post_claim_prevents_second_external_write(
         ).scalar_one() == ("UNKNOWN" if unknown else "POSTED")
 
 
+async def test_test_post_requires_connected_account(client, auth_headers):
+    h = await auth_headers("social-test-owner")
+    res = await client.post("/v1/social/test-post", headers=h, json={"text": "연동 확인"})
+    assert (
+        res.status_code == 409 and res.json()["detail"] == "ACCOUNT_CONNECTION_REQUIRED"
+    )
+
+
+async def test_test_post_requires_reauth_when_expired(client, auth_headers, db_engine, monkeypatch):
+    from cryptography.fernet import Fernet
+
+    monkeypatch.setenv("SOCIAL_TOKEN_SECRET", Fernet.generate_key().decode())
+    h = await auth_headers("social-reauth-owner")
+    async with db_engine.begin() as c:
+        uid = (
+            await c.execute(
+                text("SELECT user_id FROM users WHERE id=:i"), {"i": "social-reauth-owner"}
+            )
+        ).scalar_one()
+        await c.execute(
+            text(
+                "INSERT INTO owner_social_accounts(account_id,user_id,provider,provider_user_id,handle,profile_url,status) "
+                "VALUES (:a,:u,2,'22','host','https://www.threads.com/@host','needs_reauth')"
+            ),
+            {"a": uuid.uuid4(), "u": uid},
+        )
+    res = await client.post("/v1/social/test-post", headers=h, json={"text": "연동 확인"})
+    assert (
+        res.status_code == 409 and res.json()["detail"] == "ACCOUNT_NEEDS_REAUTH"
+    )
+
+
+async def test_test_post_publishes_immediately_bypassing_approval(
+    client, auth_headers, db_engine, monkeypatch
+):
+    """연동 확인용 게시는 posting_enabled 게이트·승인 절차 없이 바로 나간다."""
+    from cryptography.fernet import Fernet
+    from services import social_account_service as accounts
+
+    monkeypatch.setenv("SOCIAL_TOKEN_SECRET", Fernet.generate_key().decode())
+    monkeypatch.setattr(service, "posting_enabled", lambda: False)
+    h = await auth_headers("social-verify-owner")
+    async with db_engine.begin() as c:
+        uid = (
+            await c.execute(
+                text("SELECT user_id FROM users WHERE id=:i"), {"i": "social-verify-owner"}
+            )
+        ).scalar_one()
+        await c.execute(
+            text(
+                "INSERT INTO owner_social_accounts(account_id,user_id,provider,provider_user_id,handle,profile_url,status,access_token,access_expires_at) "
+                "VALUES (:a,:u,2,'22','host','https://www.threads.com/@host','linked',:t,now()+interval '1 day')"
+            ),
+            {"a": uuid.uuid4(), "u": uid, "t": accounts.encrypt("secret-token")},
+        )
+
+    calls = []
+
+    class Adapter:
+        @staticmethod
+        async def publish(text_, token, *, client):
+            calls.append((text_, token))
+            return {"id": "99", "permalink": "https://www.threads.com/@host/post/99"}
+
+    monkeypatch.setattr(service, "adapter", lambda provider: Adapter)
+    res = await client.post(
+        "/v1/social/test-post", headers=h, json={"text": "연동 확인용 테스트"}
+    )
+    assert res.status_code == 200, res.text
+    assert res.json() == {"id": "99", "permalink": "https://www.threads.com/@host/post/99"}
+    assert calls == [("연동 확인용 테스트", "secret-token")]
+
+
 async def test_oauth_roundtrip_saves_encrypted_account(db_engine, monkeypatch):
     """검증: 인가 코드를 받아 계정을 연결하고, 해제까지 한 바퀴 돈다.