Feat: update and add new tests for web api apps (#12714)

### What problem does this PR solve?

This PR adds missing web API tests (system, search, KB, LLM, plugin,
connector). It also addresses a contract mismatch that was causing test
failures: metadata updates did not persist new keys (update‑only
behavior).

### Type of change

- [x] Bug Fix (non-breaking change which fixes an issue)
- [x] New Feature (non-breaking change which adds functionality)
- [x] Other (please describe): Test coverage expansion and test helper
instrumentation

test/testcases/test_web_api/test_document_app/test_document_metadata.py

@@ -0,0 +1,232 @@
+#
+#  Copyright 2025 The InfiniFlow Authors. All Rights Reserved.
+#
+#  Licensed under the Apache License, Version 2.0 (the "License");
+#  you may not use this file except in compliance with the License.
+#  You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+#  Unless required by applicable law or agreed to in writing, software
+#  distributed under the License is distributed on an "AS IS" BASIS,
+#  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#  See the License for the specific language governing permissions and
+#  limitations under the License.
+#
+import pytest
+from common import (
+    document_change_status,
+    document_filter,
+    document_infos,
+    document_metadata_summary,
+    document_metadata_update,
+    document_rename,
+    document_set_meta,
+    document_update_metadata_setting,
+)
+from configs import INVALID_API_TOKEN
+from libs.auth import RAGFlowWebApiAuth
+
+INVALID_AUTH_CASES = [
+    (None, 401, "Unauthorized"),
+    (RAGFlowWebApiAuth(INVALID_API_TOKEN), 401, "Unauthorized"),
+]
+
+
+class TestAuthorization:
+    @pytest.mark.p2
+    @pytest.mark.parametrize("invalid_auth, expected_code, expected_fragment", INVALID_AUTH_CASES)
+    def test_filter_auth_invalid(self, invalid_auth, expected_code, expected_fragment):
+        res = document_filter(invalid_auth, {"kb_id": "kb_id"})
+        assert res["code"] == expected_code, res
+        assert expected_fragment in res["message"], res
+
+    @pytest.mark.p2
+    @pytest.mark.parametrize("invalid_auth, expected_code, expected_fragment", INVALID_AUTH_CASES)
+    def test_infos_auth_invalid(self, invalid_auth, expected_code, expected_fragment):
+        res = document_infos(invalid_auth, {"doc_ids": ["doc_id"]})
+        assert res["code"] == expected_code, res
+        assert expected_fragment in res["message"], res
+
+    @pytest.mark.p2
+    @pytest.mark.parametrize("invalid_auth, expected_code, expected_fragment", INVALID_AUTH_CASES)
+    def test_metadata_summary_auth_invalid(self, invalid_auth, expected_code, expected_fragment):
+        res = document_metadata_summary(invalid_auth, {"kb_id": "kb_id"})
+        assert res["code"] == expected_code, res
+        assert expected_fragment in res["message"], res
+
+    @pytest.mark.p2
+    @pytest.mark.parametrize("invalid_auth, expected_code, expected_fragment", INVALID_AUTH_CASES)
+    def test_metadata_update_auth_invalid(self, invalid_auth, expected_code, expected_fragment):
+        res = document_metadata_update(invalid_auth, {"kb_id": "kb_id", "selector": {"document_ids": ["doc_id"]}, "updates": []})
+        assert res["code"] == expected_code, res
+        assert expected_fragment in res["message"], res
+
+    @pytest.mark.p2
+    @pytest.mark.parametrize("invalid_auth, expected_code, expected_fragment", INVALID_AUTH_CASES)
+    def test_update_metadata_setting_auth_invalid(self, invalid_auth, expected_code, expected_fragment):
+        res = document_update_metadata_setting(invalid_auth, {"doc_id": "doc_id", "metadata": {}})
+        assert res["code"] == expected_code, res
+        assert expected_fragment in res["message"], res
+
+    @pytest.mark.p2
+    @pytest.mark.parametrize("invalid_auth, expected_code, expected_fragment", INVALID_AUTH_CASES)
+    def test_change_status_auth_invalid(self, invalid_auth, expected_code, expected_fragment):
+        res = document_change_status(invalid_auth, {"doc_ids": ["doc_id"], "status": "1"})
+        assert res["code"] == expected_code, res
+        assert expected_fragment in res["message"], res
+
+    @pytest.mark.p2
+    @pytest.mark.parametrize("invalid_auth, expected_code, expected_fragment", INVALID_AUTH_CASES)
+    def test_rename_auth_invalid(self, invalid_auth, expected_code, expected_fragment):
+        res = document_rename(invalid_auth, {"doc_id": "doc_id", "name": "rename.txt"})
+        assert res["code"] == expected_code, res
+        assert expected_fragment in res["message"], res
+
+    @pytest.mark.p2
+    @pytest.mark.parametrize("invalid_auth, expected_code, expected_fragment", INVALID_AUTH_CASES)
+    def test_set_meta_auth_invalid(self, invalid_auth, expected_code, expected_fragment):
+        res = document_set_meta(invalid_auth, {"doc_id": "doc_id", "meta": "{}"})
+        assert res["code"] == expected_code, res
+        assert expected_fragment in res["message"], res
+
+
+class TestDocumentMetadata:
+    @pytest.mark.p2
+    def test_filter(self, WebApiAuth, add_dataset_func):
+        kb_id = add_dataset_func
+        res = document_filter(WebApiAuth, {"kb_id": kb_id})
+        assert res["code"] == 0, res
+        assert "filter" in res["data"], res
+        assert "total" in res["data"], res
+
+    @pytest.mark.p2
+    def test_infos(self, WebApiAuth, add_document_func):
+        _, doc_id = add_document_func
+        res = document_infos(WebApiAuth, {"doc_ids": [doc_id]})
+        assert res["code"] == 0, res
+        assert len(res["data"]) == 1, res
+        assert res["data"][0]["id"] == doc_id, res
+
+    @pytest.mark.p2
+    def test_metadata_summary(self, WebApiAuth, add_document_func):
+        kb_id, _ = add_document_func
+        res = document_metadata_summary(WebApiAuth, {"kb_id": kb_id})
+        assert res["code"] == 0, res
+        assert isinstance(res["data"]["summary"], dict), res
+
+    @pytest.mark.p2
+    def test_metadata_update(self, WebApiAuth, add_document_func):
+        kb_id, doc_id = add_document_func
+        payload = {
+            "kb_id": kb_id,
+            "selector": {"document_ids": [doc_id]},
+            "updates": [{"key": "author", "value": "alice"}],
+            "deletes": [],
+        }
+        res = document_metadata_update(WebApiAuth, payload)
+        assert res["code"] == 0, res
+        assert res["data"]["matched_docs"] == 1, res
+        info_res = document_infos(WebApiAuth, {"doc_ids": [doc_id]})
+        assert info_res["code"] == 0, info_res
+        meta_fields = info_res["data"][0].get("meta_fields", {})
+        assert meta_fields.get("author") == "alice", info_res
+
+    @pytest.mark.p2
+    def test_update_metadata_setting(self, WebApiAuth, add_document_func):
+        _, doc_id = add_document_func
+        metadata = {"source": "test"}
+        res = document_update_metadata_setting(WebApiAuth, {"doc_id": doc_id, "metadata": metadata})
+        assert res["code"] == 0, res
+        assert res["data"]["id"] == doc_id, res
+        assert res["data"]["parser_config"]["metadata"] == metadata, res
+
+    @pytest.mark.p2
+    def test_change_status(self, WebApiAuth, add_document_func):
+        _, doc_id = add_document_func
+        res = document_change_status(WebApiAuth, {"doc_ids": [doc_id], "status": "1"})
+        assert res["code"] == 0, res
+        assert res["data"][doc_id]["status"] == "1", res
+        info_res = document_infos(WebApiAuth, {"doc_ids": [doc_id]})
+        assert info_res["code"] == 0, info_res
+        assert info_res["data"][0]["status"] == "1", info_res
+
+    @pytest.mark.p2
+    def test_rename(self, WebApiAuth, add_document_func):
+        _, doc_id = add_document_func
+        name = f"renamed_{doc_id}.txt"
+        res = document_rename(WebApiAuth, {"doc_id": doc_id, "name": name})
+        assert res["code"] == 0, res
+        assert res["data"] is True, res
+        info_res = document_infos(WebApiAuth, {"doc_ids": [doc_id]})
+        assert info_res["code"] == 0, info_res
+        assert info_res["data"][0]["name"] == name, info_res
+
+    @pytest.mark.p2
+    def test_set_meta(self, WebApiAuth, add_document_func):
+        _, doc_id = add_document_func
+        res = document_set_meta(WebApiAuth, {"doc_id": doc_id, "meta": "{\"author\": \"alice\"}"})
+        assert res["code"] == 0, res
+        assert res["data"] is True, res
+        info_res = document_infos(WebApiAuth, {"doc_ids": [doc_id]})
+        assert info_res["code"] == 0, info_res
+        meta_fields = info_res["data"][0].get("meta_fields", {})
+        assert meta_fields.get("author") == "alice", info_res
+
+
+class TestDocumentMetadataNegative:
+    @pytest.mark.p3
+    def test_filter_missing_kb_id(self, WebApiAuth, add_document_func):
+        _, doc_id = add_document_func
+        res = document_filter(WebApiAuth, {"doc_ids": [doc_id]})
+        assert res["code"] == 101, res
+        assert "KB ID" in res["message"], res
+
+    @pytest.mark.p3
+    def test_metadata_summary_missing_kb_id(self, WebApiAuth, add_document_func):
+        _, doc_id = add_document_func
+        res = document_metadata_summary(WebApiAuth, {"doc_ids": [doc_id]})
+        assert res["code"] == 101, res
+        assert "KB ID" in res["message"], res
+
+    @pytest.mark.p3
+    def test_metadata_update_missing_kb_id(self, WebApiAuth, add_document_func):
+        _, doc_id = add_document_func
+        res = document_metadata_update(WebApiAuth, {"selector": {"document_ids": [doc_id]}, "updates": []})
+        assert res["code"] == 101, res
+        assert "KB ID" in res["message"], res
+
+    @pytest.mark.p3
+    def test_infos_invalid_doc_id(self, WebApiAuth):
+        res = document_infos(WebApiAuth, {"doc_ids": ["invalid_id"]})
+        assert res["code"] == 109, res
+        assert "No authorization" in res["message"], res
+
+    @pytest.mark.p3
+    def test_update_metadata_setting_missing_metadata(self, WebApiAuth, add_document_func):
+        _, doc_id = add_document_func
+        res = document_update_metadata_setting(WebApiAuth, {"doc_id": doc_id})
+        assert res["code"] == 101, res
+        assert "required argument are missing" in res["message"], res
+        assert "metadata" in res["message"], res
+
+    @pytest.mark.p3
+    def test_change_status_invalid_status(self, WebApiAuth, add_document_func):
+        _, doc_id = add_document_func
+        res = document_change_status(WebApiAuth, {"doc_ids": [doc_id], "status": "2"})
+        assert res["code"] == 101, res
+        assert "Status" in res["message"], res
+
+    @pytest.mark.p3
+    def test_rename_extension_mismatch(self, WebApiAuth, add_document_func):
+        _, doc_id = add_document_func
+        res = document_rename(WebApiAuth, {"doc_id": doc_id, "name": "renamed.pdf"})
+        assert res["code"] == 101, res
+        assert "extension" in res["message"], res
+
+    @pytest.mark.p3
+    def test_set_meta_invalid_type(self, WebApiAuth, add_document_func):
+        _, doc_id = add_document_func
+        res = document_set_meta(WebApiAuth, {"doc_id": doc_id, "meta": "[]"})
+        assert res["code"] == 101, res
+        assert "dictionary" in res["message"], res