1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
|
# ========================================================================== #
# #
# KVMD - The main PiKVM daemon. #
# #
# Copyright (C) 2018-2024 Maxim Devaev <[email protected]> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
# the Free Software Foundation, either version 3 of the License, or #
# (at your option) any later version. #
# #
# This program is distributed in the hope that it will be useful, #
# but WITHOUT ANY WARRANTY; without even the implied warranty of #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
# GNU General Public License for more details. #
# #
# You should have received a copy of the GNU General Public License #
# along with this program. If not, see <https://www.gnu.org/licenses/>. #
# #
# ========================================================================== #
from typing import AsyncGenerator
import aiohttp.web
import aiohttp_basicauth
import pytest
import pytest_asyncio
from . import get_configured_auth_service
# =====
async def _handle_auth(request: aiohttp.web.BaseRequest) -> aiohttp.web.Response:
status = 400
if request.method == "POST":
credentials = (await request.json())
if credentials["user"] == "admin" and credentials["passwd"] == "pass":
status = 200
return aiohttp.web.Response(text=str(status), status=status)
@pytest_asyncio.fixture(name="auth_server_port")
async def _auth_server_port_fixture(aiohttp_server) -> AsyncGenerator[int, None]: # type: ignore
auth = aiohttp_basicauth.BasicAuthMiddleware(
username="server-admin",
password="server-pass",
force=False,
)
app = aiohttp.web.Application(middlewares=[auth])
app.router.add_post("/auth", _handle_auth)
app.router.add_post("/auth_plus_basic", auth.required(_handle_auth))
server = await aiohttp_server(app)
try:
yield server.port
finally:
await server.close()
# =====
@pytest.mark.asyncio
@pytest.mark.parametrize("kwargs", [
{},
{"verify": False},
{"user": "server-admin", "passwd": "server-pass"},
])
async def test_ok(auth_server_port: int, kwargs: dict) -> None:
url = "http://localhost:%d/%s" % (
auth_server_port,
("auth_plus_basic" if kwargs.get("user") else "auth"),
)
async with get_configured_auth_service("http", url=url, **kwargs) as service:
assert not (await service.authorize("user", "foobar"))
assert not (await service.authorize("admin", "foobar"))
assert not (await service.authorize("user", "pass"))
assert (await service.authorize("admin", "pass"))
|
