From 060140d6540d045530ceefda6e639f39588e7dab Mon Sep 17 00:00:00 2001 From: Devaev Maxim Date: Thu, 11 Apr 2019 04:18:02 +0300 Subject: better auth tests, refactoring --- tests/auth/__init__.py | 43 ++++++++++++++++++++++++++ tests/auth/test_service_htpasswd.py | 52 ++++++++++++++++++++++++++++++++ tests/auth/test_service_http.py | 60 +++++++++++++++++++++++++++++++++++++ 3 files changed, 155 insertions(+) create mode 100644 tests/auth/__init__.py create mode 100644 tests/auth/test_service_htpasswd.py create mode 100644 tests/auth/test_service_http.py (limited to 'tests/auth') diff --git a/tests/auth/__init__.py b/tests/auth/__init__.py new file mode 100644 index 00000000..cdaa6cfb --- /dev/null +++ b/tests/auth/__init__.py @@ -0,0 +1,43 @@ +# ========================================================================== # +# # +# KVMD - The main Pi-KVM daemon. # +# # +# Copyright (C) 2018 Maxim Devaev # +# # +# This program is free software: you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation, either version 3 of the License, or # +# (at your option) any later version. # +# # +# This program is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with this program. If not, see . # +# # +# ========================================================================== # + + +import contextlib + +from typing import AsyncGenerator +from typing import Any + +from kvmd.yamlconf import make_config + +from kvmd.plugins.auth import BaseAuthService +from kvmd.plugins.auth import get_auth_service_class + + +# ===== +@contextlib.asynccontextmanager +async def get_configured_auth_service(name: str, **kwargs: Any) -> AsyncGenerator[BaseAuthService, None]: + service_class = get_auth_service_class(name) + config = make_config(kwargs, service_class.get_options()) + service = service_class(**config._unpack()) # pylint: disable=protected-access + try: + yield service + finally: + await service.cleanup() diff --git a/tests/auth/test_service_htpasswd.py b/tests/auth/test_service_htpasswd.py new file mode 100644 index 00000000..9a24378e --- /dev/null +++ b/tests/auth/test_service_htpasswd.py @@ -0,0 +1,52 @@ +# ========================================================================== # +# # +# KVMD - The main Pi-KVM daemon. # +# # +# Copyright (C) 2018 Maxim Devaev # +# # +# This program is free software: you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation, either version 3 of the License, or # +# (at your option) any later version. # +# # +# This program is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with this program. If not, see . # +# # +# ========================================================================== # + + +import os + +import passlib.apache + +import pytest + +from . import get_configured_auth_service + + +# ===== +@pytest.mark.asyncio +async def test_ok__htpasswd_service(tmpdir) -> None: # type: ignore + path = os.path.abspath(str(tmpdir.join("htpasswd"))) + + htpasswd = passlib.apache.HtpasswdFile(path, new=True) + htpasswd.set_password("admin", "foo") + htpasswd.save() + + async with get_configured_auth_service("htpasswd", file=path) as service: + assert (await service.login("admin", "foo")) + assert not (await service.login("user", "foo")) + + htpasswd.set_password("admin", "bar") + htpasswd.set_password("user", "bar") + htpasswd.save() + + assert (await service.login("admin", "bar")) + assert (await service.login("user", "bar")) + assert not (await service.login("admin", "foo")) + assert not (await service.login("user", "foo")) diff --git a/tests/auth/test_service_http.py b/tests/auth/test_service_http.py new file mode 100644 index 00000000..6390f368 --- /dev/null +++ b/tests/auth/test_service_http.py @@ -0,0 +1,60 @@ +# ========================================================================== # +# # +# KVMD - The main Pi-KVM daemon. # +# # +# Copyright (C) 2018 Maxim Devaev # +# # +# This program is free software: you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation, either version 3 of the License, or # +# (at your option) any later version. # +# # +# This program is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with this program. If not, see . # +# # +# ========================================================================== # + + +from typing import AsyncGenerator + +import aiohttp.web + +import pytest + +from . import get_configured_auth_service + + +# ===== +async def _handle_auth_post(request: aiohttp.web.BaseRequest) -> aiohttp.web.Response: + status = 400 + if request.method == "POST": + credentials = (await request.json()) + if credentials["user"] == "admin" and credentials["passwd"] == "foobar": + status = 200 + return aiohttp.web.Response(text=str(status), status=status) + + +@pytest.fixture(name="auth_server_port") +async def _auth_server_port_fixture(aiohttp_server) -> AsyncGenerator[int, None]: # type: ignore + app = aiohttp.web.Application() + app.router.add_post("/auth_post", _handle_auth_post) + server = await aiohttp_server(app) + try: + yield server.port + finally: + await server.close() + + +# ===== +@pytest.mark.asyncio +async def test_ok__http_service(auth_server_port: int) -> None: + url = "http://localhost:%d/auth_post" % (auth_server_port) + async with get_configured_auth_service("http", url=url) as service: + assert not (await service.login("admin", "foo")) + assert not (await service.login("user", "foo")) + assert (await service.login("admin", "foobar")) -- cgit v1.2.3