mirror of
https://github.com/arcan1s/ahriman.git
synced 2026-04-07 19:03:38 +00:00
Evgenii Alekseev
fd9a0ec7b5
This was initally generated by ai, but later has been heavily edited. The reason why it has been implemented is that there are plans to implement more features to ui, but it becomes hard to add new features to plain js, so I decided to rewrite it in typescript. Yet because it is still ai slop, it is still possible to enable old interface via configuration, even though new interface is turned on by default to get feedback
128 lines
4.4 KiB
Python
128 lines
4.4 KiB
Python
import aioauth_client
|
|
import pytest
|
|
|
|
from pytest_mock import MockerFixture
|
|
|
|
from ahriman.core.auth.oauth import OAuth
|
|
from ahriman.core.exceptions import OptionError
|
|
|
|
|
|
def test_auth_control(oauth: OAuth) -> None:
|
|
"""
|
|
must return a control for authorization
|
|
"""
|
|
assert oauth.auth_control
|
|
assert "<a" in oauth.auth_control # I think it should be a link
|
|
|
|
|
|
def test_is_external(oauth: OAuth) -> None:
|
|
"""
|
|
must be external provider
|
|
"""
|
|
assert oauth.is_external
|
|
|
|
|
|
def test_get_provider() -> None:
|
|
"""
|
|
must return valid provider type
|
|
"""
|
|
assert OAuth.get_provider("OAuth2Client") == aioauth_client.OAuth2Client
|
|
assert OAuth.get_provider("GoogleClient") == aioauth_client.GoogleClient
|
|
assert OAuth.get_provider("GithubClient") == aioauth_client.GithubClient
|
|
|
|
|
|
def test_get_provider_not_a_type() -> None:
|
|
"""
|
|
must raise an exception if attribute is not a type
|
|
"""
|
|
with pytest.raises(OptionError):
|
|
OAuth.get_provider("RANDOM")
|
|
|
|
|
|
def test_get_provider_invalid_type() -> None:
|
|
"""
|
|
must raise an exception if attribute is not an OAuth2 client
|
|
"""
|
|
with pytest.raises(OptionError):
|
|
OAuth.get_provider("User")
|
|
with pytest.raises(OptionError):
|
|
OAuth.get_provider("OAuth1Client")
|
|
|
|
|
|
def test_get_client(oauth: OAuth) -> None:
|
|
"""
|
|
must return valid OAuth2 client
|
|
"""
|
|
client = oauth.get_client()
|
|
assert isinstance(client, aioauth_client.GoogleClient)
|
|
assert client.client_id == oauth.client_id
|
|
assert client.client_secret == oauth.client_secret
|
|
|
|
|
|
def test_get_oauth_url(oauth: OAuth, mocker: MockerFixture) -> None:
|
|
"""
|
|
must generate valid OAuth authorization URL
|
|
"""
|
|
authorize_url_mock = mocker.patch("aioauth_client.GoogleClient.get_authorize_url")
|
|
oauth.get_oauth_url(state="state")
|
|
authorize_url_mock.assert_called_once_with(scope=oauth.scopes, redirect_uri=oauth.redirect_uri, state="state")
|
|
|
|
|
|
async def test_get_oauth_username(oauth: OAuth, mocker: MockerFixture) -> None:
|
|
"""
|
|
must return authorized user ID
|
|
"""
|
|
access_token_mock = mocker.patch("aioauth_client.GoogleClient.get_access_token", return_value=("token", ""))
|
|
user_info_mock = mocker.patch("aioauth_client.GoogleClient.user_info",
|
|
return_value=(aioauth_client.User(email="email"), ""))
|
|
|
|
assert await oauth.get_oauth_username("code", state="state", session={"state": "state"}) == "email"
|
|
access_token_mock.assert_called_once_with("code", redirect_uri=oauth.redirect_uri)
|
|
user_info_mock.assert_called_once_with()
|
|
|
|
|
|
async def test_get_oauth_username_empty_email(oauth: OAuth, mocker: MockerFixture) -> None:
|
|
"""
|
|
must read username if email is not available
|
|
"""
|
|
mocker.patch("aioauth_client.GoogleClient.get_access_token", return_value=("token", ""))
|
|
mocker.patch("aioauth_client.GoogleClient.user_info", return_value=(aioauth_client.User(username="username"), ""))
|
|
|
|
assert await oauth.get_oauth_username("code", state="state", session={"state": "state"}) == "username"
|
|
|
|
|
|
async def test_get_oauth_username_exception_1(oauth: OAuth, mocker: MockerFixture) -> None:
|
|
"""
|
|
must return None in case of OAuth request error (get_access_token)
|
|
"""
|
|
mocker.patch("aioauth_client.GoogleClient.get_access_token", side_effect=Exception)
|
|
user_info_mock = mocker.patch("aioauth_client.GoogleClient.user_info")
|
|
|
|
assert await oauth.get_oauth_username("code", state="state", session={"state": "state"}) is None
|
|
user_info_mock.assert_not_called()
|
|
|
|
|
|
async def test_get_oauth_username_exception_2(oauth: OAuth, mocker: MockerFixture) -> None:
|
|
"""
|
|
must return None in case of OAuth request error (user_info)
|
|
"""
|
|
mocker.patch("aioauth_client.GoogleClient.get_access_token", return_value=("token", ""))
|
|
mocker.patch("aioauth_client.GoogleClient.user_info", side_effect=Exception)
|
|
|
|
username = await oauth.get_oauth_username("code", state="state", session={"state": "state"})
|
|
assert username is None
|
|
|
|
|
|
async def test_get_oauth_username_csrf_missing(oauth: OAuth) -> None:
|
|
"""
|
|
must return None if CSRF state is missing
|
|
"""
|
|
assert await oauth.get_oauth_username("code", state=None, session={"state": "state"}) is None
|
|
|
|
|
|
async def test_get_oauth_username_csrf_mismatch(oauth: OAuth) -> None:
|
|
"""
|
|
must return None if CSRF state does not match session
|
|
"""
|
|
assert await oauth.get_oauth_username("code", state="wrong", session={"state": "state"}) is None
|