[AZ-144] [AZ-146] [AZ-147] Implement negative input, performance, and security integration tests

Made-with: Cursor

e2e/tests/test_negative.py

@@ -1 +1,52 @@
-"""Invalid inputs, empty uploads, corrupt media, and expected HTTP error responses."""
+import pytest
+import requests
+
+_DETECT_TIMEOUT = 60
+
+
+def _assert_health_200(http_client):
+    r = http_client.get("/health")
+    assert r.status_code == 200
+    data = r.json()
+    assert data["status"] == "healthy"
+    assert data.get("errorMessage") is None
+
+
+@pytest.mark.cpu
+def test_ft_n_01_empty_image_returns_400(http_client, empty_image):
+    files = {"file": ("empty.jpg", empty_image, "image/jpeg")}
+    r = http_client.post("/detect", files=files, timeout=30)
+    assert r.status_code == 400
+    body = r.json()
+    assert "detail" in body
+    assert body["detail"] == "Image is empty"
+    _assert_health_200(http_client)
+
+
+@pytest.mark.cpu
+def test_ft_n_02_corrupt_image_returns_400_or_422(http_client, corrupt_image):
+    files = {"file": ("corrupt.jpg", corrupt_image, "image/jpeg")}
+    r = http_client.post("/detect", files=files, timeout=30)
+    assert r.status_code in (400, 422)
+    body = r.json()
+    assert "detail" in body
+    _assert_health_200(http_client)
+
+
+@pytest.mark.cpu
+def test_ft_n_03_loader_error_mode_detect_does_not_500(
+    http_client, mock_loader_url, image_small
+):
+    cfg = requests.post(
+        f"{mock_loader_url}/mock/config", json={"mode": "error"}, timeout=10
+    )
+    cfg.raise_for_status()
+    files = {"file": ("small.jpg", image_small, "image/jpeg")}
+    r = http_client.post("/detect", files=files, timeout=_DETECT_TIMEOUT)
+    assert r.status_code != 500
+
+
+@pytest.mark.skip(reason="Requires separate Docker profile without classes.json")
+@pytest.mark.cpu
+def test_ft_n_05_missing_classes_json_prevents_normal_operation():
+    pass