mirror of
https://github.com/quay/quay.git
synced 2026-01-26 06:21:37 +03:00
5f63b3a7bb
* chore: drop deprecated tables and remove unused code * isort imports * migration: check for table existence before drop
67 lines
2.3 KiB
Python
67 lines
2.3 KiB
Python
from test.fixtures import *
|
|
|
|
import pytest
|
|
|
|
from auth.oauth import validate_bearer_auth
|
|
from auth.validateresult import AuthKind, ValidateResult
|
|
from data import model
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
"header, expected_result",
|
|
[
|
|
("", ValidateResult(AuthKind.oauth, missing=True)),
|
|
("somerandomtoken", ValidateResult(AuthKind.oauth, missing=True)),
|
|
("bearer some random token", ValidateResult(AuthKind.oauth, missing=True)),
|
|
(
|
|
"bearer invalidtoken",
|
|
ValidateResult(
|
|
AuthKind.oauth, error_message="OAuth access token could not be validated"
|
|
),
|
|
),
|
|
],
|
|
)
|
|
def test_bearer(header, expected_result, app):
|
|
assert validate_bearer_auth(header) == expected_result
|
|
|
|
|
|
def test_valid_oauth(app):
|
|
user = model.user.get_user("devtable")
|
|
app = model.oauth.list_applications_for_org(model.user.get_user_or_org("buynlarge"))[0]
|
|
token_string = "%s%s" % ("a" * 20, "b" * 20)
|
|
oauth_token, _ = model.oauth.create_user_access_token(
|
|
user, app.client_id, "repo:read", access_token=token_string
|
|
)
|
|
result = validate_bearer_auth("bearer " + token_string)
|
|
assert result.context.oauthtoken == oauth_token
|
|
assert result.authed_user == user
|
|
assert result.auth_valid
|
|
|
|
|
|
def test_disabled_user_oauth(app):
|
|
user = model.user.get_user("disabled")
|
|
token_string = "%s%s" % ("a" * 20, "b" * 20)
|
|
oauth_token, _ = model.oauth.create_user_access_token(
|
|
user, "deadbeef", "repo:admin", access_token=token_string
|
|
)
|
|
|
|
result = validate_bearer_auth("bearer " + token_string)
|
|
assert result.context.oauthtoken is None
|
|
assert result.authed_user is None
|
|
assert not result.auth_valid
|
|
assert result.error_message == "Granter of the oauth access token is disabled"
|
|
|
|
|
|
def test_expired_token(app):
|
|
user = model.user.get_user("devtable")
|
|
token_string = "%s%s" % ("a" * 20, "b" * 20)
|
|
oauth_token, _ = model.oauth.create_user_access_token(
|
|
user, "deadbeef", "repo:admin", access_token=token_string, expires_in=-1000
|
|
)
|
|
|
|
result = validate_bearer_auth("bearer " + token_string)
|
|
assert result.context.oauthtoken is None
|
|
assert result.authed_user is None
|
|
assert not result.auth_valid
|
|
assert result.error_message == "OAuth access token has expired"
|