-
Notifications
You must be signed in to change notification settings - Fork 20
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add tests for Screamshotter and Convertit
- Loading branch information
PON
authored and
PON
committed
Sep 14, 2023
1 parent
cbad05c
commit 60487d0
Showing
3 changed files
with
75 additions
and
71 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,79 +1,65 @@ | ||
| from unittest import mock | ||
|
|
||
| from django.conf import settings | ||
| from django.contrib.auth import get_user_model | ||
| from django.contrib.auth.models import AnonymousUser | ||
| from django.core.management import call_command | ||
| from django.http import HttpResponse | ||
| from django.test import TestCase | ||
| from django.test.client import RequestFactory | ||
| from django.test.utils import override_settings | ||
|
|
||
| from mapentity import middleware | ||
| from mapentity.middleware import AutoLoginMiddleware, get_internal_user | ||
| from mapentity.tests.factories import AttachmentFactory, UserFactory | ||
| from .factories import DummyModelFactory | ||
| from mapentity.middleware import get_internal_user, clear_internal_user_cache | ||
| from mapentity.tests.factories import SuperUserFactory | ||
| from mapentity.tokens import TokenManager | ||
|
|
||
| User = get_user_model() | ||
|
|
||
|
|
||
| def fake_view(request): | ||
| return HttpResponse() | ||
|
|
||
| class AutoLoginMiddlewareTest(TestCase): | ||
| @classmethod | ||
| def setUpTestData(cls): | ||
| cls.user = SuperUserFactory() | ||
|
|
||
| @override_settings(TEST=False) | ||
| class AutoLoginTest(TestCase): | ||
| def setUp(self): | ||
| middleware.clear_internal_user_cache() | ||
| self.middleware = AutoLoginMiddleware(fake_view) | ||
| self.request = RequestFactory() | ||
| self.request.user = AnonymousUser() # usually set by other middleware | ||
| self.request.META = {'REMOTE_ADDR': '6.6.6.6'} | ||
| self.internal_user = get_internal_user() | ||
| clear_internal_user_cache() | ||
| call_command('update_permissions_mapentity') | ||
|
|
||
| def test_internal_user_cannot_login(self): | ||
| success = self.client.login( | ||
| username=self.internal_user.username, | ||
| password=settings.SECRET_KEY) | ||
| self.assertFalse(success) | ||
|
|
||
| def test_auto_login_happens_by_remote_addr(self): | ||
| obj = DummyModelFactory.create() | ||
| middleware.AUTOLOGIN_IPS = ['1.2.3.4'] | ||
| attachment = AttachmentFactory.create(content_object=obj) | ||
| response = self.client.get("/media/%s" % attachment.attachment_file, | ||
| REMOTE_ADDR='1.2.3.5') | ||
| self.assertEqual(response.status_code, 403) | ||
| with mock.patch('django.contrib.auth.models._user_has_perm', return_value=True): | ||
| response = self.client.get("/media/%s" % attachment.attachment_file, | ||
| REMOTE_ADDR='1.2.3.4') | ||
| def test_user_authenticated_no_token(self): | ||
| self.client.force_login(self.user) | ||
| response = self.client.get('/dummymodel/list/') | ||
|
|
||
| self.assertTrue(response.status_code == 200) | ||
| self.assertEqual(response.wsgi_request.user, self.user) | ||
|
|
||
| def test_user_authenticated_with_valid_token(self): | ||
| self.client.force_login(self.user) | ||
| auth_token = TokenManager.generate_token() | ||
| response = self.client.get(f'/dummymodel/list/?auth_token={auth_token}') | ||
|
|
||
| self.assertTrue(response.status_code == 200) | ||
| self.assertEqual(response.wsgi_request.user, self.user) | ||
|
|
||
| def test_user_authenticated_with_invalid_token(self): | ||
| self.client.force_login(self.user) | ||
| auth_token = 'invalid_token' | ||
| response = self.client.get(f'/dummymodel/list/?auth_token={auth_token}') | ||
|
|
||
| self.assertTrue(response.status_code == 200) | ||
| self.assertEqual(response.wsgi_request.user, self.user) | ||
|
|
||
| def test_user_not_authenticated_no_token(self): | ||
| response = self.client.get('/dummymodel/list/') | ||
|
|
||
| self.assertEqual(response.status_code, 302) | ||
| self.assertIn('/login/', response.url) | ||
|
|
||
| def test_user_not_authenticated_with_invalid_token(self): | ||
| auth_token = 'invalid_token' | ||
| response = self.client.get(f'/dummymodel/list/?auth_token={auth_token}') | ||
|
|
||
| self.assertEqual(response.status_code, 302) | ||
| self.assertIn('/login/', response.url) | ||
|
|
||
| def test_user_not_authenticated_with_valid_token(self): | ||
| auth_token = TokenManager.generate_token() | ||
| response = self.client.get(f'/dummymodel/list/?auth_token={auth_token}') | ||
|
|
||
| self.assertEqual(response.status_code, 200) | ||
| self.assertEqual(response.wsgi_request.user, get_internal_user()) | ||
|
|
||
| def test_auto_login_do_not_change_current_user(self): | ||
| user = UserFactory() | ||
| self.request.user = user | ||
| self.middleware(self.request) | ||
| self.assertEqual(self.request.user, user) | ||
|
|
||
| def test_auto_login_do_not_log_whoever(self): | ||
| self.middleware(self.request) | ||
| self.assertTrue(self.request.user.is_anonymous) | ||
|
|
||
| def test_auto_login(self): | ||
| middleware.AUTOLOGIN_IPS = ['1.2.3.4'] | ||
| self.request.META['REMOTE_ADDR'] = '1.2.3.4' | ||
|
|
||
| self.assertTrue(self.request.user.is_anonymous) | ||
| self.middleware(self.request) | ||
| self.assertFalse(self.request.user.is_anonymous) | ||
| self.assertEqual(self.request.user, self.internal_user) | ||
|
|
||
| def test_auto_login_proxy(self): | ||
| middleware.AUTOLOGIN_IPS = ['1.2.3.4'] | ||
| self.request.META['HTTP_X_FORWARDED_FOR'] = '1.2.3.4,2.2.2.2' | ||
|
|
||
| self.assertTrue(self.request.user.is_anonymous) | ||
| self.middleware(self.request) | ||
| self.assertFalse(self.request.user.is_anonymous) | ||
| self.assertEqual(self.request.user, self.internal_user) | ||
| # A token can't be used twice | ||
| self.assertFalse(TokenManager.verify_token(auth_token)) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters