aiohttp-security/tests/test_dict_autz.py

252 lines
7.8 KiB
Python
Raw Normal View History

import enum
2015-07-08 17:30:24 +00:00
from aiohttp import web
from aiohttp_security import setup as _setup
from aiohttp_security import (AbstractAuthorizationPolicy, authorized_userid,
forget, has_permission, is_anonymous,
login_required, permits, remember)
2015-07-08 17:30:24 +00:00
from aiohttp_security.cookies_identity import CookiesIdentityPolicy
class Autz(AbstractAuthorizationPolicy):
2017-12-13 14:51:46 +00:00
async def permits(self, identity, permission, context=None):
2015-07-08 17:30:24 +00:00
if identity == 'UserID':
return permission in {'read', 'write'}
else:
return False
2017-12-13 14:51:46 +00:00
async def authorized_userid(self, identity):
2015-07-08 17:30:24 +00:00
if identity == 'UserID':
return 'Andrew'
else:
return None
2017-12-13 14:51:46 +00:00
async def test_authorized_userid(loop, test_client):
2015-07-08 17:30:24 +00:00
2017-12-13 14:51:46 +00:00
async def login(request):
response = web.HTTPFound(location='/')
2017-12-13 14:51:46 +00:00
await remember(request, response, 'UserID')
return response
2017-12-13 14:51:46 +00:00
async def check(request):
userid = await authorized_userid(request)
assert 'Andrew' == userid
return web.Response(text=userid)
2016-09-27 14:57:11 +00:00
app = web.Application(loop=loop)
_setup(app, CookiesIdentityPolicy(), Autz())
app.router.add_route('GET', '/', check)
app.router.add_route('POST', '/login', login)
2017-12-13 14:51:46 +00:00
client = await test_client(app)
2017-12-13 14:51:46 +00:00
resp = await client.post('/login')
assert 200 == resp.status
2017-12-13 14:51:46 +00:00
txt = await resp.text()
assert 'Andrew' == txt
2017-12-13 14:51:46 +00:00
async def test_authorized_userid_not_authorized(loop, test_client):
2015-07-08 17:30:24 +00:00
2017-12-13 14:51:46 +00:00
async def check(request):
userid = await authorized_userid(request)
assert userid is None
return web.Response()
2016-09-27 14:57:11 +00:00
app = web.Application(loop=loop)
_setup(app, CookiesIdentityPolicy(), Autz())
app.router.add_route('GET', '/', check)
2017-12-13 14:51:46 +00:00
client = await test_client(app)
2016-09-27 14:57:11 +00:00
2017-12-13 14:51:46 +00:00
resp = await client.get('/')
assert 200 == resp.status
2017-12-13 14:51:46 +00:00
async def test_permits_enum_permission(loop, test_client):
class Permission(enum.Enum):
READ = '101'
WRITE = '102'
UNKNOWN = '103'
class Autz(AbstractAuthorizationPolicy):
2017-12-13 14:51:46 +00:00
async def permits(self, identity, permission, context=None):
if identity == 'UserID':
return permission in {Permission.READ, Permission.WRITE}
else:
return False
2017-12-13 14:51:46 +00:00
async def authorized_userid(self, identity):
if identity == 'UserID':
return 'Andrew'
else:
return None
2015-07-08 17:30:24 +00:00
2017-12-13 14:51:46 +00:00
async def login(request):
response = web.HTTPFound(location='/')
2017-12-13 14:51:46 +00:00
await remember(request, response, 'UserID')
return response
2017-12-13 14:51:46 +00:00
async def check(request):
ret = await permits(request, Permission.READ)
assert ret
2017-12-13 14:51:46 +00:00
ret = await permits(request, Permission.WRITE)
assert ret
2017-12-13 14:51:46 +00:00
ret = await permits(request, Permission.UNKNOWN)
assert not ret
return web.Response()
2016-09-27 14:57:11 +00:00
app = web.Application(loop=loop)
_setup(app, CookiesIdentityPolicy(), Autz())
app.router.add_route('GET', '/', check)
app.router.add_route('POST', '/login', login)
2017-12-13 14:51:46 +00:00
client = await test_client(app)
resp = await client.post('/login')
assert 200 == resp.status
2017-12-13 14:51:46 +00:00
async def test_permits_unauthorized(loop, test_client):
2015-07-08 17:30:24 +00:00
2017-12-13 14:51:46 +00:00
async def check(request):
ret = await permits(request, 'read')
assert not ret
2017-12-13 14:51:46 +00:00
ret = await permits(request, 'write')
assert not ret
2017-12-13 14:51:46 +00:00
ret = await permits(request, 'unknown')
assert not ret
return web.Response()
2016-09-27 14:57:11 +00:00
app = web.Application(loop=loop)
_setup(app, CookiesIdentityPolicy(), Autz())
app.router.add_route('GET', '/', check)
2017-12-13 14:51:46 +00:00
client = await test_client(app)
resp = await client.get('/')
assert 200 == resp.status
2017-12-13 14:51:46 +00:00
async def test_is_anonymous(loop, test_client):
2017-12-13 14:51:46 +00:00
async def index(request):
is_anon = await is_anonymous(request)
if is_anon:
return web.HTTPUnauthorized()
return web.HTTPOk()
2017-12-13 14:51:46 +00:00
async def login(request):
response = web.HTTPFound(location='/')
2017-12-13 14:51:46 +00:00
await remember(request, response, 'UserID')
return response
2017-12-13 14:51:46 +00:00
async def logout(request):
response = web.HTTPFound(location='/')
2017-12-13 14:51:46 +00:00
await forget(request, response)
return response
app = web.Application(loop=loop)
_setup(app, CookiesIdentityPolicy(), Autz())
app.router.add_route('GET', '/', index)
app.router.add_route('POST', '/login', login)
app.router.add_route('POST', '/logout', logout)
2017-12-13 14:51:46 +00:00
client = await test_client(app)
resp = await client.get('/')
assert web.HTTPUnauthorized.status_code == resp.status
2017-12-13 14:51:46 +00:00
await client.post('/login')
resp = await client.get('/')
assert web.HTTPOk.status_code == resp.status
2017-12-13 14:51:46 +00:00
await client.post('/logout')
resp = await client.get('/')
assert web.HTTPUnauthorized.status_code == resp.status
2017-12-13 14:51:46 +00:00
async def test_login_required(loop, test_client):
@login_required
2017-12-13 14:51:46 +00:00
async def index(request):
return web.HTTPOk()
2017-12-13 14:51:46 +00:00
async def login(request):
response = web.HTTPFound(location='/')
2017-12-13 14:51:46 +00:00
await remember(request, response, 'UserID')
return response
2017-12-13 14:51:46 +00:00
async def logout(request):
response = web.HTTPFound(location='/')
2017-12-13 14:51:46 +00:00
await forget(request, response)
return response
app = web.Application(loop=loop)
_setup(app, CookiesIdentityPolicy(), Autz())
app.router.add_route('GET', '/', index)
app.router.add_route('POST', '/login', login)
app.router.add_route('POST', '/logout', logout)
2017-12-13 14:51:46 +00:00
client = await test_client(app)
resp = await client.get('/')
assert web.HTTPUnauthorized.status_code == resp.status
2017-12-13 14:51:46 +00:00
await client.post('/login')
resp = await client.get('/')
assert web.HTTPOk.status_code == resp.status
2017-12-13 14:51:46 +00:00
await client.post('/logout')
resp = await client.get('/')
assert web.HTTPUnauthorized.status_code == resp.status
2017-12-13 14:51:46 +00:00
async def test_has_permission(loop, test_client):
@has_permission('read')
2017-12-13 14:51:46 +00:00
async def index_read(request):
return web.HTTPOk()
@has_permission('write')
2017-12-13 14:51:46 +00:00
async def index_write(request):
return web.HTTPOk()
@has_permission('forbid')
2017-12-13 14:51:46 +00:00
async def index_forbid(request):
return web.HTTPOk()
2017-12-13 14:51:46 +00:00
async def login(request):
response = web.HTTPFound(location='/')
2017-12-13 14:51:46 +00:00
await remember(request, response, 'UserID')
return response
2017-12-13 14:51:46 +00:00
async def logout(request):
response = web.HTTPFound(location='/')
2017-12-13 14:51:46 +00:00
await forget(request, response)
return response
app = web.Application(loop=loop)
_setup(app, CookiesIdentityPolicy(), Autz())
app.router.add_route('GET', '/permission/read', index_read)
app.router.add_route('GET', '/permission/write', index_write)
app.router.add_route('GET', '/permission/forbid', index_forbid)
app.router.add_route('POST', '/login', login)
app.router.add_route('POST', '/logout', logout)
2017-12-13 14:51:46 +00:00
client = await test_client(app)
2017-12-13 14:51:46 +00:00
resp = await client.get('/permission/read')
assert web.HTTPUnauthorized.status_code == resp.status
2017-12-13 14:51:46 +00:00
resp = await client.get('/permission/write')
assert web.HTTPUnauthorized.status_code == resp.status
2017-12-13 14:51:46 +00:00
resp = await client.get('/permission/forbid')
assert web.HTTPUnauthorized.status_code == resp.status
2017-12-13 14:51:46 +00:00
await client.post('/login')
resp = await client.get('/permission/read')
assert web.HTTPOk.status_code == resp.status
2017-12-13 14:51:46 +00:00
resp = await client.get('/permission/write')
assert web.HTTPOk.status_code == resp.status
2017-12-13 14:51:46 +00:00
resp = await client.get('/permission/forbid')
assert web.HTTPForbidden.status_code == resp.status
2017-12-13 14:51:46 +00:00
await client.post('/logout')
resp = await client.get('/permission/read')
assert web.HTTPUnauthorized.status_code == resp.status
2017-12-13 14:51:46 +00:00
resp = await client.get('/permission/write')
assert web.HTTPUnauthorized.status_code == resp.status
2017-12-13 14:51:46 +00:00
resp = await client.get('/permission/forbid')
assert web.HTTPUnauthorized.status_code == resp.status