feat:账号设置+密码重置

backend/tests/test_auth_profile_password.py

@@ -0,0 +1,39 @@
+"""Unit tests for auth profile / password request schemas."""
+
+from __future__ import annotations
+
+import pytest
+from pydantic import ValidationError
+
+from backend.api.auth import PasswordChange, ProfileUpdate
+from backend.api.platform.employees import PlatformEmployeePasswordReset
+
+
+def test_profile_update_allows_partial_fields() -> None:
+    only_name = ProfileUpdate(display_name="张三")
+    assert only_name.display_name == "张三"
+    assert only_name.email is None
+
+    only_email = ProfileUpdate(email="a@example.com")
+    assert only_email.email == "a@example.com"
+
+
+def test_profile_update_forbids_unknown_fields() -> None:
+    with pytest.raises(ValidationError):
+        ProfileUpdate(display_name="张三", username="hacked")  # type: ignore[call-arg]
+
+
+def test_password_change_enforces_new_password_length() -> None:
+    with pytest.raises(ValidationError):
+        PasswordChange(current_password="old-pass", new_password="short")
+
+    ok = PasswordChange(current_password="old-pass-1", new_password="new-pass-12")
+    assert ok.new_password == "new-pass-12"
+
+
+def test_admin_password_reset_schema() -> None:
+    with pytest.raises(ValidationError):
+        PlatformEmployeePasswordReset(new_password="1234567")
+
+    payload = PlatformEmployeePasswordReset(new_password="reset-pass-9")
+    assert payload.new_password == "reset-pass-9"