124 lines
3.5 KiB
Python
124 lines
3.5 KiB
Python
import asyncio
|
|
|
|
from aiohttp import web
|
|
from aiohttp_security import (remember,
|
|
authorized_userid, permits,
|
|
AbstractAuthorizationPolicy)
|
|
from aiohttp_security import setup as _setup
|
|
from aiohttp_security.cookies_identity import CookiesIdentityPolicy
|
|
|
|
|
|
class Autz(AbstractAuthorizationPolicy):
|
|
|
|
@asyncio.coroutine
|
|
def permits(self, identity, permission, context=None):
|
|
if identity == 'UserID':
|
|
return permission in {'read', 'write'}
|
|
else:
|
|
return False
|
|
|
|
@asyncio.coroutine
|
|
def authorized_userid(self, identity):
|
|
if identity == 'UserID':
|
|
return 'Andrew'
|
|
else:
|
|
return None
|
|
|
|
|
|
@asyncio.coroutine
|
|
def test_authorized_userid(loop, test_client):
|
|
|
|
@asyncio.coroutine
|
|
def login(request):
|
|
response = web.HTTPFound(location='/')
|
|
yield from remember(request, response, 'UserID')
|
|
return response
|
|
|
|
@asyncio.coroutine
|
|
def check(request):
|
|
userid = yield from authorized_userid(request)
|
|
assert 'Andrew' == userid
|
|
return web.Response(text=userid)
|
|
|
|
app = web.Application(loop=loop)
|
|
_setup(app, CookiesIdentityPolicy(), Autz())
|
|
app.router.add_route('GET', '/', check)
|
|
app.router.add_route('POST', '/login', login)
|
|
client = yield from test_client(app)
|
|
|
|
resp = yield from client.post('/login')
|
|
assert 200 == resp.status
|
|
txt = yield from resp.text()
|
|
assert 'Andrew' == txt
|
|
yield from resp.release()
|
|
|
|
|
|
@asyncio.coroutine
|
|
def test_authorized_userid_not_authorized(loop, test_client):
|
|
|
|
@asyncio.coroutine
|
|
def check(request):
|
|
userid = yield from authorized_userid(request)
|
|
assert userid is None
|
|
return web.Response()
|
|
|
|
app = web.Application(loop=loop)
|
|
_setup(app, CookiesIdentityPolicy(), Autz())
|
|
app.router.add_route('GET', '/', check)
|
|
client = yield from test_client(app)
|
|
|
|
resp = yield from client.get('/')
|
|
assert 200 == resp.status
|
|
yield from resp.release()
|
|
|
|
|
|
@asyncio.coroutine
|
|
def test_permits(loop, test_client):
|
|
|
|
@asyncio.coroutine
|
|
def login(request):
|
|
response = web.HTTPFound(location='/')
|
|
yield from remember(request, response, 'UserID')
|
|
return response
|
|
|
|
@asyncio.coroutine
|
|
def check(request):
|
|
ret = yield from permits(request, 'read')
|
|
assert ret
|
|
ret = yield from permits(request, 'write')
|
|
assert ret
|
|
ret = yield from permits(request, 'unknown')
|
|
assert not ret
|
|
return web.Response()
|
|
|
|
app = web.Application(loop=loop)
|
|
_setup(app, CookiesIdentityPolicy(), Autz())
|
|
app.router.add_route('GET', '/', check)
|
|
app.router.add_route('POST', '/login', login)
|
|
client = yield from test_client(app)
|
|
resp = yield from client.post('/login')
|
|
assert 200 == resp.status
|
|
yield from resp.release()
|
|
|
|
|
|
@asyncio.coroutine
|
|
def test_permits_unauthorized(loop, test_client):
|
|
|
|
@asyncio.coroutine
|
|
def check(request):
|
|
ret = yield from permits(request, 'read')
|
|
assert not ret
|
|
ret = yield from permits(request, 'write')
|
|
assert not ret
|
|
ret = yield from permits(request, 'unknown')
|
|
assert not ret
|
|
return web.Response()
|
|
|
|
app = web.Application(loop=loop)
|
|
_setup(app, CookiesIdentityPolicy(), Autz())
|
|
app.router.add_route('GET', '/', check)
|
|
client = yield from test_client(app)
|
|
resp = yield from client.get('/')
|
|
assert 200 == resp.status
|
|
yield from resp.release()
|