summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorIb Lundgren <ib.lundgren@gmail.com>2013-07-26 19:09:42 +0100
committerIb Lundgren <ib.lundgren@gmail.com>2013-07-26 19:09:42 +0100
commit2f01d5ba3a1d94904a1eea67db1276922f39c8ec (patch)
treef523d47a5f6df7ee57e92c74eb972dc250e42327
parent42a00c8996cb9770c175e01929720d0bc1a611cf (diff)
downloadoauthlib-2f01d5ba3a1d94904a1eea67db1276922f39c8ec.tar.gz
Test for correct nonce_checking across endpoints.
-rw-r--r--tests/oauth1/rfc5849/endpoints/test_access_token.py6
-rw-r--r--tests/oauth1/rfc5849/endpoints/test_request_token.py5
-rw-r--r--tests/oauth1/rfc5849/endpoints/test_resource.py5
3 files changed, 13 insertions, 3 deletions
diff --git a/tests/oauth1/rfc5849/endpoints/test_access_token.py b/tests/oauth1/rfc5849/endpoints/test_access_token.py
index ccb5f59..0596eba 100644
--- a/tests/oauth1/rfc5849/endpoints/test_access_token.py
+++ b/tests/oauth1/rfc5849/endpoints/test_access_token.py
@@ -1,6 +1,6 @@
from __future__ import unicode_literals, absolute_import
-from mock import MagicMock
+from mock import MagicMock, ANY
from ....unittest import TestCase
from oauthlib.oauth1.rfc5849 import Client
@@ -84,3 +84,7 @@ class AccessTokenEndpointTest(TestCase):
self.uri, headers=self.headers)
self.assertEqual(s, 200)
self.assertIn('oauth_token', b)
+ self.validator.validate_timestamp_and_nonce.assert_called_once_with(
+ self.client.client_key, ANY, ANY, ANY,
+ request_token=self.client.resource_owner_key)
+
diff --git a/tests/oauth1/rfc5849/endpoints/test_request_token.py b/tests/oauth1/rfc5849/endpoints/test_request_token.py
index 3779acd..47e2c10 100644
--- a/tests/oauth1/rfc5849/endpoints/test_request_token.py
+++ b/tests/oauth1/rfc5849/endpoints/test_request_token.py
@@ -1,6 +1,6 @@
from __future__ import unicode_literals, absolute_import
-from mock import MagicMock
+from mock import MagicMock, ANY
from ....unittest import TestCase
from oauthlib.oauth1.rfc5849 import Client
@@ -76,6 +76,9 @@ class RequestTokenEndpointTest(TestCase):
self.uri, headers=self.headers)
self.assertEqual(s, 200)
self.assertIn('oauth_token', b)
+ self.validator.validate_timestamp_and_nonce.assert_called_once_with(
+ self.client.client_key, ANY, ANY, ANY,
+ request_token=self.client.resource_owner_key)
def test_uri_provided_realm(self):
client = Client('foo', callback_uri='https://c.b/cb',
diff --git a/tests/oauth1/rfc5849/endpoints/test_resource.py b/tests/oauth1/rfc5849/endpoints/test_resource.py
index 6fe6b49..6ddf7a6 100644
--- a/tests/oauth1/rfc5849/endpoints/test_resource.py
+++ b/tests/oauth1/rfc5849/endpoints/test_resource.py
@@ -1,6 +1,6 @@
from __future__ import unicode_literals, absolute_import
-from mock import MagicMock
+from mock import MagicMock, ANY
from ....unittest import TestCase
from oauthlib.oauth1.rfc5849 import Client
@@ -76,3 +76,6 @@ class ResourceEndpointTest(TestCase):
v, r = self.endpoint.validate_protected_resource_request(
self.uri, headers=self.headers)
self.assertTrue(v)
+ self.validator.validate_timestamp_and_nonce.assert_called_once_with(
+ self.client.client_key, ANY, ANY, ANY,
+ access_token=self.client.resource_owner_key)