sartography
/
cr-connect-workflow
mirror of https://github.com/sartography/cr-connect-workflow.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
cr-connect-workflow/tests/test_authentication.py

84 lines
3.4 KiB
Python
Raw Normal View History

Updates tests to match changing sso_backdoor to query string params
2020-02-21 17:03:14 +00:00
import urllib.parse
Adding support to handle Single Sign On (Shibboleth) authentication using Flask SSO and an attribute map that has worked in the past with UVA's implementation. Aside from the new user endpoint, nothing requires authentication, but soon everything will expect it. I'm setting up a backdoor we can use for development and staging that will cause a round-robin affair that should make this relatively painless. Dropped "RestException" as we had two ways or raising errors, and that was silly.
2020-02-18 21:38:56 +00:00
from crc import db
from crc.models.user import UserModel
from tests.base_test import BaseTest
class TestAuthentication(BaseTest):
test_uid = "dhf8r"
Adds redirect URL to login handler
2020-02-24 21:59:16 +00:00
def logged_in_headers(self, user=None, redirect_url='http://some/frontend/url'):
Adding support to handle Single Sign On (Shibboleth) authentication using Flask SSO and an attribute map that has worked in the past with UVA's implementation. Aside from the new user endpoint, nothing requires authentication, but soon everything will expect it. I'm setting up a backdoor we can use for development and staging that will cause a round-robin affair that should make this relatively painless. Dropped "RestException" as we had two ways or raising errors, and that was silly.
2020-02-18 21:38:56 +00:00
if user is None:
uid = self.test_uid
Updates tests to match changing sso_backdoor to query string params
2020-02-21 17:03:14 +00:00
user_info = {'uid': self.test_uid, 'first_name': 'Daniel', 'last_name': 'Funk',
'email_address': 'dhf8r@virginia.edu'}
Adding support to handle Single Sign On (Shibboleth) authentication using Flask SSO and an attribute map that has worked in the past with UVA's implementation. Aside from the new user endpoint, nothing requires authentication, but soon everything will expect it. I'm setting up a backdoor we can use for development and staging that will cause a round-robin affair that should make this relatively painless. Dropped "RestException" as we had two ways or raising errors, and that was silly.
2020-02-18 21:38:56 +00:00
else:
uid = user.uid
Updates tests to match changing sso_backdoor to query string params
2020-02-21 17:03:14 +00:00
user_info = {'uid': user.uid, 'first_name': user.first_name, 'last_name': user.last_name,
'email_address': user.email_address}
Adding support to handle Single Sign On (Shibboleth) authentication using Flask SSO and an attribute map that has worked in the past with UVA's implementation. Aside from the new user endpoint, nothing requires authentication, but soon everything will expect it. I'm setting up a backdoor we can use for development and staging that will cause a round-robin affair that should make this relatively painless. Dropped "RestException" as we had two ways or raising errors, and that was silly.
2020-02-18 21:38:56 +00:00
Adds redirect URL to login handler
2020-02-24 21:59:16 +00:00
query_string = self.user_info_to_query_string(user_info, redirect_url)
rv = self.app.get("/v1.0/sso_backdoor%s" % query_string, follow_redirects=False)
self.assertTrue(rv.status_code == 302)
self.assertTrue(str.startswith(rv.location, redirect_url))
Adding support to handle Single Sign On (Shibboleth) authentication using Flask SSO and an attribute map that has worked in the past with UVA's implementation. Aside from the new user endpoint, nothing requires authentication, but soon everything will expect it. I'm setting up a backdoor we can use for development and staging that will cause a round-robin affair that should make this relatively painless. Dropped "RestException" as we had two ways or raising errors, and that was silly.
2020-02-18 21:38:56 +00:00
user_model = UserModel.query.filter_by(uid=uid).first()
Adds SSO header attributes
2020-02-20 20:35:07 +00:00
self.assertIsNotNone(user_model.display_name)
Adding support to handle Single Sign On (Shibboleth) authentication using Flask SSO and an attribute map that has worked in the past with UVA's implementation. Aside from the new user endpoint, nothing requires authentication, but soon everything will expect it. I'm setting up a backdoor we can use for development and staging that will cause a round-robin affair that should make this relatively painless. Dropped "RestException" as we had two ways or raising errors, and that was silly.
2020-02-18 21:38:56 +00:00
return dict(Authorization='Bearer ' + user_model.encode_auth_token().decode())
def test_auth_token(self):
Adds SSO header attributes
2020-02-20 20:35:07 +00:00
self.load_example_data()
Adding support to handle Single Sign On (Shibboleth) authentication using Flask SSO and an attribute map that has worked in the past with UVA's implementation. Aside from the new user endpoint, nothing requires authentication, but soon everything will expect it. I'm setting up a backdoor we can use for development and staging that will cause a round-robin affair that should make this relatively painless. Dropped "RestException" as we had two ways or raising errors, and that was silly.
2020-02-18 21:38:56 +00:00
user = UserModel(uid="dhf8r")
auth_token = user.encode_auth_token()
self.assertTrue(isinstance(auth_token, bytes))
self.assertEqual("dhf8r", user.decode_auth_token(auth_token))
def test_auth_creates_user(self):
Adds SSO header attributes
2020-02-20 20:35:07 +00:00
self.load_example_data()
Adding support to handle Single Sign On (Shibboleth) authentication using Flask SSO and an attribute map that has worked in the past with UVA's implementation. Aside from the new user endpoint, nothing requires authentication, but soon everything will expect it. I'm setting up a backdoor we can use for development and staging that will cause a round-robin affair that should make this relatively painless. Dropped "RestException" as we had two ways or raising errors, and that was silly.
2020-02-18 21:38:56 +00:00
user = db.session.query(UserModel).filter(UserModel.uid == self.test_uid).first()
self.assertIsNone(user)
Updates tests to match changing sso_backdoor to query string params
2020-02-21 17:03:14 +00:00
user_info = {'uid': self.test_uid, 'first_name': 'Daniel', 'last_name': 'Funk',
'email_address': 'dhf8r@virginia.edu'}
Adds redirect URL to login handler
2020-02-24 21:59:16 +00:00
redirect_url = 'http://worlds.best.website/admin'
query_string = self.user_info_to_query_string(user_info, redirect_url)
Updates tests to match changing sso_backdoor to query string params
2020-02-21 17:03:14 +00:00
url = '/v1.0/sso_backdoor%s' % query_string
rv_1 = self.app.get(url, follow_redirects=False)
Adds SSO attributes. Prevents uid duplication errors.
2020-02-20 22:23:10 +00:00
self.assertTrue(rv_1.status_code == 302)
Adds redirect URL to login handler
2020-02-24 21:59:16 +00:00
self.assertTrue(str.startswith(rv_1.location, redirect_url))
Adds SSO attributes. Prevents uid duplication errors.
2020-02-20 22:23:10 +00:00
Adding support to handle Single Sign On (Shibboleth) authentication using Flask SSO and an attribute map that has worked in the past with UVA's implementation. Aside from the new user endpoint, nothing requires authentication, but soon everything will expect it. I'm setting up a backdoor we can use for development and staging that will cause a round-robin affair that should make this relatively painless. Dropped "RestException" as we had two ways or raising errors, and that was silly.
2020-02-18 21:38:56 +00:00
user = db.session.query(UserModel).filter(UserModel.uid == self.test_uid).first()
self.assertIsNotNone(user)
self.assertIsNotNone(user.display_name)
self.assertIsNotNone(user.email_address)
Adds SSO attributes. Prevents uid duplication errors.
2020-02-20 22:23:10 +00:00
# Hitting the same endpoint again with the same info should not cause an error
Updates tests to match changing sso_backdoor to query string params
2020-02-21 17:03:14 +00:00
rv_2 = self.app.get(url, follow_redirects=False)
Adds redirect URL to login handler
2020-02-24 21:59:16 +00:00
self.assertTrue(rv_2.status_code == 302)
self.assertTrue(str.startswith(rv_2.location, redirect_url))
Adds SSO attributes. Prevents uid duplication errors.
2020-02-20 22:23:10 +00:00
Adding support to handle Single Sign On (Shibboleth) authentication using Flask SSO and an attribute map that has worked in the past with UVA's implementation. Aside from the new user endpoint, nothing requires authentication, but soon everything will expect it. I'm setting up a backdoor we can use for development and staging that will cause a round-robin affair that should make this relatively painless. Dropped "RestException" as we had two ways or raising errors, and that was silly.
2020-02-18 21:38:56 +00:00
def test_current_user_status(self):
Adds SSO header attributes
2020-02-20 20:35:07 +00:00
self.load_example_data()
Adding support to handle Single Sign On (Shibboleth) authentication using Flask SSO and an attribute map that has worked in the past with UVA's implementation. Aside from the new user endpoint, nothing requires authentication, but soon everything will expect it. I'm setting up a backdoor we can use for development and staging that will cause a round-robin affair that should make this relatively painless. Dropped "RestException" as we had two ways or raising errors, and that was silly.
2020-02-18 21:38:56 +00:00
rv = self.app.get('/v1.0/user')
self.assert_failure(rv, 401)
rv = self.app.get('/v1.0/user', headers=self.logged_in_headers())
self.assert_success(rv)
Adds SSO header attributes
2020-02-20 20:35:07 +00:00
user = UserModel(uid="ajl2j", first_name='Aaron', last_name='Louie', email_address='ajl2j@virginia.edu')
Adds redirect URL to login handler
2020-02-24 21:59:16 +00:00
rv = self.app.get('/v1.0/user', headers=self.logged_in_headers(user, redirect_url='http://omg.edu/lolwut'))
Adds SSO header attributes
2020-02-20 20:35:07 +00:00
self.assert_success(rv)
Updates tests to match changing sso_backdoor to query string params
2020-02-21 17:03:14 +00:00
Adds redirect URL to login handler
2020-02-24 21:59:16 +00:00
def user_info_to_query_string(self, user_info, redirect_url):
Updates tests to match changing sso_backdoor to query string params
2020-02-21 17:03:14 +00:00
query_string_list = []
items = user_info.items()
for key, value in items:
query_string_list.append('%s=%s' % (key, urllib.parse.quote(value)))
Adds redirect URL to login handler
2020-02-24 21:59:16 +00:00
query_string_list.append('redirect_url=%s' % redirect_url)
Updates tests to match changing sso_backdoor to query string params
2020-02-21 17:03:14 +00:00
return '?%s' % '&'.join(query_string_list)