+
+
+ {% if not log_exists %}
+ No log file yet -- nothing has been logged since this server last started.
+ {% else %}
+ Last {{ log_lines }} lines of {{ log_path }}. Rotates at ~2MB
+ (older entries roll into {{ log_path }}.1, etc. -- not shown here; use
+ "Download full log" for just the current file).
+
+ {% for n in [200, 500, 2000, 5000] %}
+
{{ n }}
+ {% endfor %}
+
Refresh
+
{{ log_text }}
+ {% endif %}
+
+{% endblock %}
diff --git a/server/tests/conftest.py b/server/tests/conftest.py
index be952f1..6a9feb7 100644
--- a/server/tests/conftest.py
+++ b/server/tests/conftest.py
@@ -29,6 +29,10 @@ from pathlib import Path
_tmp_dir = tempfile.mkdtemp(prefix="espresso_frame_tests_")
os.environ["DATABASE_URL"] = f"sqlite:///{Path(_tmp_dir) / 'test.db'}"
+# Same reasoning as DATABASE_URL above: logging_setup.configure_logging()
+# also runs as an app.main import-time side effect and would otherwise
+# try to create the real /data directory.
+os.environ["LOG_PATH"] = str(Path(_tmp_dir) / "server.log")
import pytest
from fastapi.testclient import TestClient
diff --git a/server/tests/test_admin_logs.py b/server/tests/test_admin_logs.py
new file mode 100644
index 0000000..9185f5d
--- /dev/null
+++ b/server/tests/test_admin_logs.py
@@ -0,0 +1,60 @@
+"""Permission boundary + basic content checks for the admin log viewer
+(routers/pages.py's admin_logs_page/admin_logs_download) -- see
+CLAUDE.md's note that anything gated by an admin/permission check needs
+a same-shape test: admin, non-admin logged in, logged out."""
+
+from __future__ import annotations
+
+import logging
+
+from app.logging_setup import LOG_PATH
+
+from .conftest import login, make_user
+
+
+def _setup_admin_and_user(client, db_session) -> None:
+ client.post("/setup", data={"username": "alice", "password": "hunter22"})
+ make_user(db_session, "bob")
+
+
+def test_admin_can_view_logs(client, db_session):
+ _setup_admin_and_user(client, db_session)
+ login(client, "alice", "hunter22")
+ logging.getLogger("app.test").info("marker-line-for-test")
+ resp = client.get("/admin/logs")
+ assert resp.status_code == 200
+ assert "marker-line-for-test" in resp.text
+
+
+def test_non_admin_forbidden_from_logs(client, db_session):
+ _setup_admin_and_user(client, db_session)
+ login(client, "bob")
+ resp = client.get("/admin/logs")
+ assert resp.status_code == 403
+ resp = client.get("/admin/logs/download")
+ assert resp.status_code == 403
+
+
+def test_logged_out_redirected_from_logs_page(client, db_session):
+ _setup_admin_and_user(client, db_session)
+ client.cookies.clear() # /setup itself logs alice in
+ resp = client.get("/admin/logs")
+ assert resp.status_code == 303
+ assert resp.headers["location"] == "/login"
+
+
+def test_admin_can_download_log_file(client, db_session):
+ _setup_admin_and_user(client, db_session)
+ login(client, "alice", "hunter22")
+ logging.getLogger("app.test").info("marker-line-for-download")
+ resp = client.get("/admin/logs/download")
+ assert resp.status_code == 200
+ assert b"marker-line-for-download" in resp.content
+
+
+def test_download_404s_before_any_log_written(client, db_session, monkeypatch):
+ _setup_admin_and_user(client, db_session)
+ login(client, "alice", "hunter22")
+ monkeypatch.setattr("app.routers.pages.LOG_PATH", LOG_PATH.parent / "does-not-exist.log")
+ resp = client.get("/admin/logs/download")
+ assert resp.status_code == 404