aiohttp-security/tests/test_dict_autz.py

124 lines
3.5 KiB
Python
Raw Normal View History

2015-07-08 17:30:24 +00:00
import asyncio
from aiohttp import web
from aiohttp_security import (remember,
2015-07-08 17:30:24 +00:00
authorized_userid, permits,
AbstractAuthorizationPolicy)
from aiohttp_security import setup as _setup
2015-07-08 17:30:24 +00:00
from aiohttp_security.cookies_identity import CookiesIdentityPolicy
class Autz(AbstractAuthorizationPolicy):
@asyncio.coroutine
def permits(self, identity, permission, context=None):
if identity == 'UserID':
return permission in {'read', 'write'}
else:
return False
@asyncio.coroutine
def authorized_userid(self, identity):
if identity == 'UserID':
return 'Andrew'
else:
return None
2016-09-27 14:57:11 +00:00
@asyncio.coroutine
def test_authorized_userid(loop, test_client):
2015-07-08 17:30:24 +00:00
@asyncio.coroutine
def login(request):
response = web.HTTPFound(location='/')
yield from remember(request, response, 'UserID')
return response
@asyncio.coroutine
def check(request):
userid = yield from authorized_userid(request)
assert 'Andrew' == userid
return web.Response(text=userid)
2016-09-27 14:57:11 +00:00
app = web.Application(loop=loop)
_setup(app, CookiesIdentityPolicy(), Autz())
app.router.add_route('GET', '/', check)
app.router.add_route('POST', '/login', login)
2016-09-27 14:57:11 +00:00
client = yield from test_client(app)
resp = yield from client.post('/login')
assert 200 == resp.status
txt = yield from resp.text()
assert 'Andrew' == txt
yield from resp.release()
2016-09-27 14:57:11 +00:00
@asyncio.coroutine
def test_authorized_userid_not_authorized(loop, test_client):
2015-07-08 17:30:24 +00:00
@asyncio.coroutine
def check(request):
userid = yield from authorized_userid(request)
assert userid is None
return web.Response()
2016-09-27 14:57:11 +00:00
app = web.Application(loop=loop)
_setup(app, CookiesIdentityPolicy(), Autz())
app.router.add_route('GET', '/', check)
2016-09-27 14:57:11 +00:00
client = yield from test_client(app)
resp = yield from client.get('/')
assert 200 == resp.status
yield from resp.release()
2016-09-27 14:57:11 +00:00
@asyncio.coroutine
def test_permits(loop, test_client):
2015-07-08 17:30:24 +00:00
@asyncio.coroutine
def login(request):
response = web.HTTPFound(location='/')
yield from remember(request, response, 'UserID')
return response
@asyncio.coroutine
def check(request):
ret = yield from permits(request, 'read')
assert ret
ret = yield from permits(request, 'write')
assert ret
ret = yield from permits(request, 'unknown')
assert not ret
return web.Response()
2016-09-27 14:57:11 +00:00
app = web.Application(loop=loop)
_setup(app, CookiesIdentityPolicy(), Autz())
app.router.add_route('GET', '/', check)
app.router.add_route('POST', '/login', login)
2016-09-27 14:57:11 +00:00
client = yield from test_client(app)
resp = yield from client.post('/login')
assert 200 == resp.status
yield from resp.release()
2016-09-27 14:57:11 +00:00
@asyncio.coroutine
def test_permits_unauthorized(loop, test_client):
2015-07-08 17:30:24 +00:00
@asyncio.coroutine
def check(request):
ret = yield from permits(request, 'read')
assert not ret
ret = yield from permits(request, 'write')
assert not ret
ret = yield from permits(request, 'unknown')
assert not ret
return web.Response()
2016-09-27 14:57:11 +00:00
app = web.Application(loop=loop)
_setup(app, CookiesIdentityPolicy(), Autz())
app.router.add_route('GET', '/', check)
2016-09-27 14:57:11 +00:00
client = yield from test_client(app)
resp = yield from client.get('/')
assert 200 == resp.status
yield from resp.release()