better auth tests, refactoring

3 files changed, 155 insertions, 0 deletions

diff --git a/tests/auth/__init__.py b/tests/auth/__init__.py
new file mode 100644
index 00000000..cdaa6cfb
--- /dev/null
+++ b/tests/auth/__init__.py
@@ -0,0 +1,43 @@
+# ========================================================================== #
+#                                                                            #
+#    KVMD - The main Pi-KVM daemon.                                          #
+#                                                                            #
+#    Copyright (C) 2018  Maxim Devaev <[email protected]>                    #
+#                                                                            #
+#    This program is free software: you can redistribute it and/or modify    #
+#    it under the terms of the GNU General Public License as published by    #
+#    the Free Software Foundation, either version 3 of the License, or       #
+#    (at your option) any later version.                                     #
+#                                                                            #
+#    This program is distributed in the hope that it will be useful,         #
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of          #
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           #
+#    GNU General Public License for more details.                            #
+#                                                                            #
+#    You should have received a copy of the GNU General Public License       #
+#    along with this program.  If not, see <https://www.gnu.org/licenses/>.  #
+#                                                                            #
+# ========================================================================== #
+
+
+import contextlib
+
+from typing import AsyncGenerator
+from typing import Any
+
+from kvmd.yamlconf import make_config
+
+from kvmd.plugins.auth import BaseAuthService
+from kvmd.plugins.auth import get_auth_service_class
+
+
+# =====
[email protected]
+async def get_configured_auth_service(name: str, **kwargs: Any) -> AsyncGenerator[BaseAuthService, None]:
+    service_class = get_auth_service_class(name)
+    config = make_config(kwargs, service_class.get_options())
+    service = service_class(**config._unpack())  # pylint: disable=protected-access
+    try:
+        yield service
+    finally:
+        await service.cleanup()
diff --git a/tests/auth/test_service_htpasswd.py b/tests/auth/test_service_htpasswd.py
new file mode 100644
index 00000000..9a24378e
--- /dev/null
+++ b/tests/auth/test_service_htpasswd.py
@@ -0,0 +1,52 @@
+# ========================================================================== #
+#                                                                            #
+#    KVMD - The main Pi-KVM daemon.                                          #
+#                                                                            #
+#    Copyright (C) 2018  Maxim Devaev <[email protected]>                    #
+#                                                                            #
+#    This program is free software: you can redistribute it and/or modify    #
+#    it under the terms of the GNU General Public License as published by    #
+#    the Free Software Foundation, either version 3 of the License, or       #
+#    (at your option) any later version.                                     #
+#                                                                            #
+#    This program is distributed in the hope that it will be useful,         #
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of          #
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           #
+#    GNU General Public License for more details.                            #
+#                                                                            #
+#    You should have received a copy of the GNU General Public License       #
+#    along with this program.  If not, see <https://www.gnu.org/licenses/>.  #
+#                                                                            #
+# ========================================================================== #
+
+
+import os
+
+import passlib.apache
+
+import pytest
+
+from . import get_configured_auth_service
+
+
+# =====
[email protected]
+async def test_ok__htpasswd_service(tmpdir) -> None:  # type: ignore
+    path = os.path.abspath(str(tmpdir.join("htpasswd")))
+
+    htpasswd = passlib.apache.HtpasswdFile(path, new=True)
+    htpasswd.set_password("admin", "foo")
+    htpasswd.save()
+
+    async with get_configured_auth_service("htpasswd", file=path) as service:
+        assert (await service.login("admin", "foo"))
+        assert not (await service.login("user", "foo"))
+
+        htpasswd.set_password("admin", "bar")
+        htpasswd.set_password("user", "bar")
+        htpasswd.save()
+
+        assert (await service.login("admin", "bar"))
+        assert (await service.login("user", "bar"))
+        assert not (await service.login("admin", "foo"))
+        assert not (await service.login("user", "foo"))
diff --git a/tests/auth/test_service_http.py b/tests/auth/test_service_http.py
new file mode 100644
index 00000000..6390f368
--- /dev/null
+++ b/tests/auth/test_service_http.py
@@ -0,0 +1,60 @@
+# ========================================================================== #
+#                                                                            #
+#    KVMD - The main Pi-KVM daemon.                                          #
+#                                                                            #
+#    Copyright (C) 2018  Maxim Devaev <[email protected]>                    #
+#                                                                            #
+#    This program is free software: you can redistribute it and/or modify    #
+#    it under the terms of the GNU General Public License as published by    #
+#    the Free Software Foundation, either version 3 of the License, or       #
+#    (at your option) any later version.                                     #
+#                                                                            #
+#    This program is distributed in the hope that it will be useful,         #
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of          #
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           #
+#    GNU General Public License for more details.                            #
+#                                                                            #
+#    You should have received a copy of the GNU General Public License       #
+#    along with this program.  If not, see <https://www.gnu.org/licenses/>.  #
+#                                                                            #
+# ========================================================================== #
+
+
+from typing import AsyncGenerator
+
+import aiohttp.web
+
+import pytest
+
+from . import get_configured_auth_service
+
+
+# =====
+async def _handle_auth_post(request: aiohttp.web.BaseRequest) -> aiohttp.web.Response:
+    status = 400
+    if request.method == "POST":
+        credentials = (await request.json())
+        if credentials["user"] == "admin" and credentials["passwd"] == "foobar":
+            status = 200
+    return aiohttp.web.Response(text=str(status), status=status)
+
+
[email protected](name="auth_server_port")
+async def _auth_server_port_fixture(aiohttp_server) -> AsyncGenerator[int, None]:  # type: ignore
+    app = aiohttp.web.Application()
+    app.router.add_post("/auth_post", _handle_auth_post)
+    server = await aiohttp_server(app)
+    try:
+        yield server.port
+    finally:
+        await server.close()
+
+
+# =====
[email protected]
+async def test_ok__http_service(auth_server_port: int) -> None:
+    url = "http://localhost:%d/auth_post" % (auth_server_port)
+    async with get_configured_auth_service("http", url=url) as service:
+        assert not (await service.login("admin", "foo"))
+        assert not (await service.login("user", "foo"))
+        assert (await service.login("admin", "foobar"))