1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
|
from paste import wsgilib
from paste import login
from fixture import *
from_cmdline = 0
def application(environ, start_response):
if environ.has_key('REMOTE_USER'):
start_response('200 OK', [('Content-type', 'text/plain')])
return ['Logged in: ' + environ['REMOTE_USER']]
else:
start_response('401 Unauthorized',
[('Content-type', 'text/plain')])
return ['Not logged in.']
class AuthTest(login.Authenticator):
def check_auth(self, username, password):
return username == password
def report(res):
if from_cmdline:
print res
# @@ this should be part of a test fixture, I think
def mk_basic_auth_app(**kw):
kw['http_login'] = True
kw['authenticator'] = AuthTest
app = login.middleware(application, **kw)
return app
def test_basicauth_noauth():
res = fake_request(mk_basic_auth_app(), '/')
assert res.status_int == 401
report(res)
def run_userpass(user, password):
userpass = user + ':' + password
env = {'HTTP_AUTHORIZATION' : 'Basic ' + userpass.encode('base64')}
return fake_request(mk_basic_auth_app(), '/', **env)
def test_basicauth_okuser():
res = run_userpass('test', 'test') # should succeed
assert res.status_int == 200
report(res)
def test_basicauth_baduser():
res = run_userpass('test', 'badpass') # should succeed
assert res.status_int == 401
report(res)
def test_basicauth_cookie():
res = run_userpass('test', 'test') # should succeed
assert res.status_int == 200
report(res)
cookie_val = res.header('SET-COOKIE')
print "cookie value", cookie_val
app = mk_basic_auth_app()
env = {'HTTP_COOKIE': cookie_val}
res = fake_request(mk_basic_auth_app(), '/', **env)
report(res)
assert res.status_int == 200
# ensure that secret is actually used
res = fake_request(mk_basic_auth_app(secret='bogus'),
'/', **env)
report(res)
assert res.status_int == 401
if __name__ == '__main__':
from_cmdline = 1
test_basicauth_noauth()
test_basicauth_okuser()
test_basicauth_baduser()
test_basicauth_cookie()
|
