diff options
author | Alan Crosswell <alan@columbia.edu> | 2021-05-26 15:02:54 -0400 |
---|---|---|
committer | Alan Crosswell <alan@columbia.edu> | 2021-05-29 09:58:56 -0400 |
commit | 7ecb5e19417dc4a9c85518d822dc1e3fcf4d5e3e (patch) | |
tree | 31bf3b7f59527f165c87c6a4773dfc201e5edd52 | |
parent | 78c4b748289e2892f78a6556c5af4b663f4a5621 (diff) | |
download | oauthlib-7ecb5e19417dc4a9c85518d822dc1e3fcf4d5e3e.tar.gz |
failing test for Authorization: Basic
-rw-r--r-- | tests/openid/connect/core/test_tokens.py | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/tests/openid/connect/core/test_tokens.py b/tests/openid/connect/core/test_tokens.py index 5889df5..fe90142 100644 --- a/tests/openid/connect/core/test_tokens.py +++ b/tests/openid/connect/core/test_tokens.py @@ -76,6 +76,32 @@ class JWTTokenTestCase(TestCase): request.scopes, request) + def test_validate_request_token_from_headers_basic(self): + """ + Wrong kind of token (Basic) retrieved from headers. Confirm token is not parsed. + """ + + with mock.patch('oauthlib.common.Request', autospec=True) as RequestMock, \ + mock.patch('oauthlib.openid.RequestValidator', + autospec=True) as RequestValidatorMock: + request_validator_mock = RequestValidatorMock() + + token = JWTToken(request_validator=request_validator_mock) + + request = RequestMock('/uri') + # Scopes is retrieved using the __call__ method which is not picked up correctly by mock.patch + # with autospec=True + request.scopes = mock.MagicMock() + request.headers = { + 'Authorization': 'Basic some-token-from-header' + } + + token.validate_request(request=request) + + request_validator_mock.validate_jwt_bearer_token.assert_called_once_with(None, + request.scopes, + request) + def test_validate_token_from_request(self): """ Token get retrieved from request object. |