sartography
/
cr-connect-workflow
mirror of https://github.com/sartography/cr-connect-workflow.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
cr-connect-workflow/tests/test_authentication.py

68 lines
2.9 KiB
Python
Raw Normal View History

Adding support to handle Single Sign On (Shibboleth) authentication using Flask SSO and an attribute map that has worked in the past with UVA's implementation. Aside from the new user endpoint, nothing requires authentication, but soon everything will expect it. I'm setting up a backdoor we can use for development and staging that will cause a round-robin affair that should make this relatively painless. Dropped "RestException" as we had two ways or raising errors, and that was silly.
2020-02-18 21:38:56 +00:00
from crc import db
from crc.models.user import UserModel
from tests.base_test import BaseTest
class TestAuthentication(BaseTest):
def test_auth_token(self):
Adds SSO header attributes
2020-02-20 20:35:07 +00:00
self.load_example_data()
Adding support to handle Single Sign On (Shibboleth) authentication using Flask SSO and an attribute map that has worked in the past with UVA's implementation. Aside from the new user endpoint, nothing requires authentication, but soon everything will expect it. I'm setting up a backdoor we can use for development and staging that will cause a round-robin affair that should make this relatively painless. Dropped "RestException" as we had two ways or raising errors, and that was silly.
2020-02-18 21:38:56 +00:00
user = UserModel(uid="dhf8r")
auth_token = user.encode_auth_token()
self.assertTrue(isinstance(auth_token, bytes))
It became impossible to use the Swagger ui when we started adding authentication to all of the calls. I discovered Connexion and Swagger have a default way of handing JTW authentication and this cleans up our code quite a bit, moves the securing of endpoints into the API Definition, which is quite nice, and removes a whole library dependency (I never get to do that!) I added a SWAGGER_AUTH_KEY that can be used in non-production environments to allow users to quickly authenticate from the Swagger ui. I also removed all api calls to simple little happy api services, because that is just mean and pointless.
2020-03-24 18:15:21 +00:00
self.assertEqual("dhf8r", user.decode_auth_token(auth_token).get("sub"))
Adding support to handle Single Sign On (Shibboleth) authentication using Flask SSO and an attribute map that has worked in the past with UVA's implementation. Aside from the new user endpoint, nothing requires authentication, but soon everything will expect it. I'm setting up a backdoor we can use for development and staging that will cause a round-robin affair that should make this relatively painless. Dropped "RestException" as we had two ways or raising errors, and that was silly.
2020-02-18 21:38:56 +00:00
dropping the remaining config stuff for flask_sso. updaing the user 'sso' endpoint to provide additional information for debugging. Pulling information from ldap to stay super consistent on where we get our information.
2020-05-22 13:50:18 +00:00
def test_backdoor_auth_creates_user(self):
Adds user to example data. Requires login before adding/updating a study.
2020-02-27 15:30:16 +00:00
new_uid = 'czn1z';
Adds SSO header attributes
2020-02-20 20:35:07 +00:00
self.load_example_data()
Adds user to example data. Requires login before adding/updating a study.
2020-02-27 15:30:16 +00:00
user = db.session.query(UserModel).filter(UserModel.uid == new_uid).first()
Adding support to handle Single Sign On (Shibboleth) authentication using Flask SSO and an attribute map that has worked in the past with UVA's implementation. Aside from the new user endpoint, nothing requires authentication, but soon everything will expect it. I'm setting up a backdoor we can use for development and staging that will cause a round-robin affair that should make this relatively painless. Dropped "RestException" as we had two ways or raising errors, and that was silly.
2020-02-18 21:38:56 +00:00
self.assertIsNone(user)
Adds user to example data. Requires login before adding/updating a study.
2020-02-27 15:30:16 +00:00
user_info = {'uid': new_uid, 'first_name': 'Cordi', 'last_name': 'Nator',
'email_address': 'czn1z@virginia.edu'}
Adds redirect URL to login handler
2020-02-24 21:59:16 +00:00
redirect_url = 'http://worlds.best.website/admin'
query_string = self.user_info_to_query_string(user_info, redirect_url)
Updates tests to match changing sso_backdoor to query string params
2020-02-21 17:03:14 +00:00
url = '/v1.0/sso_backdoor%s' % query_string
rv_1 = self.app.get(url, follow_redirects=False)
Adds SSO attributes. Prevents uid duplication errors.
2020-02-20 22:23:10 +00:00
self.assertTrue(rv_1.status_code == 302)
Adds redirect URL to login handler
2020-02-24 21:59:16 +00:00
self.assertTrue(str.startswith(rv_1.location, redirect_url))
Adds SSO attributes. Prevents uid duplication errors.
2020-02-20 22:23:10 +00:00
Adds user to example data. Requires login before adding/updating a study.
2020-02-27 15:30:16 +00:00
user = db.session.query(UserModel).filter(UserModel.uid == new_uid).first()
Adding support to handle Single Sign On (Shibboleth) authentication using Flask SSO and an attribute map that has worked in the past with UVA's implementation. Aside from the new user endpoint, nothing requires authentication, but soon everything will expect it. I'm setting up a backdoor we can use for development and staging that will cause a round-robin affair that should make this relatively painless. Dropped "RestException" as we had two ways or raising errors, and that was silly.
2020-02-18 21:38:56 +00:00
self.assertIsNotNone(user)
self.assertIsNotNone(user.display_name)
self.assertIsNotNone(user.email_address)
Adds SSO attributes. Prevents uid duplication errors.
2020-02-20 22:23:10 +00:00
# Hitting the same endpoint again with the same info should not cause an error
Updates tests to match changing sso_backdoor to query string params
2020-02-21 17:03:14 +00:00
rv_2 = self.app.get(url, follow_redirects=False)
Adds redirect URL to login handler
2020-02-24 21:59:16 +00:00
self.assertTrue(rv_2.status_code == 302)
self.assertTrue(str.startswith(rv_2.location, redirect_url))
Adds SSO attributes. Prevents uid duplication errors.
2020-02-20 22:23:10 +00:00
dropping the remaining config stuff for flask_sso. updaing the user 'sso' endpoint to provide additional information for debugging. Pulling information from ldap to stay super consistent on where we get our information.
2020-05-22 13:50:18 +00:00
def test_normal_auth_creates_user(self):
new_uid = 'lb3dp' # This user is in the test ldap system.
self.load_example_data()
user = db.session.query(UserModel).filter(UserModel.uid == new_uid).first()
self.assertIsNone(user)
redirect_url = 'http://worlds.best.website/admin'
headers = dict(Uid=new_uid)
rv = self.app.get('login', follow_redirects=False, headers=headers)
self.assert_success(rv)
user = db.session.query(UserModel).filter(UserModel.uid == new_uid).first()
self.assertIsNotNone(user)
self.assertEquals(new_uid, user.uid)
self.assertEquals("Laura Barnes", user.display_name)
self.assertEquals("lb3dp@virginia.edu", user.email_address)
self.assertEquals("E0:Associate Professor of Systems and Information Engineering", user.title)
Adding support to handle Single Sign On (Shibboleth) authentication using Flask SSO and an attribute map that has worked in the past with UVA's implementation. Aside from the new user endpoint, nothing requires authentication, but soon everything will expect it. I'm setting up a backdoor we can use for development and staging that will cause a round-robin affair that should make this relatively painless. Dropped "RestException" as we had two ways or raising errors, and that was silly.
2020-02-18 21:38:56 +00:00
def test_current_user_status(self):
Adds SSO header attributes
2020-02-20 20:35:07 +00:00
self.load_example_data()
Adding support to handle Single Sign On (Shibboleth) authentication using Flask SSO and an attribute map that has worked in the past with UVA's implementation. Aside from the new user endpoint, nothing requires authentication, but soon everything will expect it. I'm setting up a backdoor we can use for development and staging that will cause a round-robin affair that should make this relatively painless. Dropped "RestException" as we had two ways or raising errors, and that was silly.
2020-02-18 21:38:56 +00:00
rv = self.app.get('/v1.0/user')
self.assert_failure(rv, 401)
rv = self.app.get('/v1.0/user', headers=self.logged_in_headers())
self.assert_success(rv)
Adds SSO header attributes
2020-02-20 20:35:07 +00:00
user = UserModel(uid="ajl2j", first_name='Aaron', last_name='Louie', email_address='ajl2j@virginia.edu')
Adds redirect URL to login handler
2020-02-24 21:59:16 +00:00
rv = self.app.get('/v1.0/user', headers=self.logged_in_headers(user, redirect_url='http://omg.edu/lolwut'))
Adds SSO header attributes
2020-02-20 20:35:07 +00:00
self.assert_success(rv)