Реализована интеграция с СМС провайдером

codebase/backend/api-backend/tests/contract/test_openapi.py

@@ -1,10 +1,13 @@
 import base64
+import json
 from pathlib import Path
 from types import SimpleNamespace
 
 import yaml
+from pydantic import SecretStr
 
-from app.main import app, websocket_token
+from app.main import app, otp_settings, websocket_token
+from app.services import SettingsSnapshot
 
 EXPECTED_PATHS = {
     "/health/live",
@@ -56,3 +59,68 @@ def test_websocket_accepts_canonical_base64url_jwt_protocol() -> None:
 def test_committed_openapi_server_does_not_double_api_prefix() -> None:
     committed = yaml.safe_load(Path("openapi.yaml").read_text(encoding="utf-8"))
     assert committed["servers"] == [{"url": "/"}]
+
+
+def test_otp_settings_contract_is_strict_and_complete() -> None:
+    generated = app.openapi()
+    response = generated["paths"]["/internal/settings/v1/otp"]["get"]["responses"]["200"]
+    schema_ref = response["content"]["application/json"]["schema"]["$ref"]
+    schema = generated["components"]["schemas"][schema_ref.rsplit("/", 1)[-1]]
+
+    assert set(schema["required"]) == {
+        "max_send_attempts_per_24h",
+        "min_seconds_between_attempts",
+        "max_verify_attempts",
+        "code_length",
+        "ttl_seconds",
+        "sms_order_timeout_ms",
+        "version",
+        "cache_ttl_seconds",
+    }
+    assert schema["additionalProperties"] is False
+    assert schema["properties"]["code_length"] == {
+        "type": "integer",
+        "maximum": 10.0,
+        "minimum": 4.0,
+        "title": "Code Length",
+    }
+    assert schema["properties"]["ttl_seconds"]["multipleOf"] == 60
+
+
+async def test_otp_settings_returns_runtime_values_and_supports_etag() -> None:
+    request = SimpleNamespace(
+        headers={"Authorization": "Bearer bridge-token"},
+        app=SimpleNamespace(
+            state=SimpleNamespace(
+                settings=SimpleNamespace(
+                    keycloak_settings_bridge_token=SecretStr("bridge-token")
+                )
+            )
+        ),
+    )
+    settings = SettingsSnapshot(
+        {
+            "otp.phone.max_send_attempts_per_24h": "3",
+            "otp.phone.min_seconds_between_attempts": "30",
+            "otp.phone.max_verify_attempts": "5",
+            "otp.phone.code_length": "6",
+            "otp.phone.ttl_seconds": "60",
+            "otp.phone.sms_order_timeout_ms": "3000",
+        },
+        "settings-version",
+    )
+
+    response = await otp_settings(request, settings)
+    assert json.loads(response.body) == {
+        "max_send_attempts_per_24h": 3,
+        "min_seconds_between_attempts": 30,
+        "max_verify_attempts": 5,
+        "code_length": 6,
+        "ttl_seconds": 60,
+        "sms_order_timeout_ms": 3000,
+        "version": "settings-version",
+        "cache_ttl_seconds": 60,
+    }
+
+    cached = await otp_settings(request, settings, response.headers["etag"])
+    assert cached.status_code == 304

codebase/backend/api-backend/tests/unit/test_cli_settings.py

@@ -12,6 +12,10 @@ def test_production_like_seed_contains_all_mandatory_settings() -> None:
 
     assert REQUIRED_SETTINGS <= {row["setting_key"] for row in rows}
     assert all(row["record_status"] == "A" for row in rows)
+    values = {row["setting_key"]: row["setting_value"] for row in rows}
+    assert values["otp.phone.code_length"] == "6"
+    assert values["otp.phone.ttl_seconds"] == "60"
+    assert values["otp.phone.sms_order_timeout_ms"] == "3000"
 
 
 def test_seed_rejects_invalid_typed_value(tmp_path: Path) -> None:
@@ -24,3 +28,37 @@ def test_seed_rejects_invalid_typed_value(tmp_path: Path) -> None:
 
     with pytest.raises(ValueError, match="integer value expected"):
         load_seed(path)
+
+
+@pytest.mark.parametrize(
+    ("key", "value", "message"),
+    [
+        ("otp.phone.code_length", 3, "between 4 and 10"),
+        ("otp.phone.ttl_seconds", 61, "divisible by 60"),
+        ("otp.phone.sms_order_timeout_ms", 0, "must be positive"),
+    ],
+)
+def test_seed_rejects_invalid_otp_settings(
+    tmp_path: Path, key: str, value: int, message: str
+) -> None:
+    path = tmp_path / "settings.yaml"
+    path.write_text(
+        "schema_version: 1\nsettings:\n"
+        f"  {key}: {{type: integer, value: {value}, public: false}}\n",
+        encoding="utf-8",
+    )
+
+    with pytest.raises(ValueError, match=message):
+        load_seed(path)
+
+
+def test_seed_rejects_public_otp_setting(tmp_path: Path) -> None:
+    path = tmp_path / "settings.yaml"
+    path.write_text(
+        "schema_version: 1\nsettings:\n"
+        "  otp.phone.code_length: {type: integer, value: 6, public: true}\n",
+        encoding="utf-8",
+    )
+
+    with pytest.raises(ValueError, match="must not be public"):
+        load_seed(path)