mirror of
https://github.com/YunoHost-Apps/django-fmd_ynh.git
synced 2024-09-03 18:26:27 +02:00
e0e4a265ac
* Cache CI `.cache` path * Run Safety check in CI * Use https://install.python-poetry.org * remove flynt * Update django settings * Bugfix tox config * Update/Bugfix YunoHost scripts * Update tests
206 lines
7.1 KiB
Python
206 lines
7.1 KiB
Python
from axes.models import AccessLog
|
|
from bx_django_utils.test_utils.html_assertion import (
|
|
HtmlAssertionMixin,
|
|
assert_html_response_snapshot,
|
|
)
|
|
from django.conf import LazySettings, settings
|
|
from django.contrib.auth.models import User
|
|
from django.http import FileResponse, HttpResponse
|
|
from django.test import override_settings
|
|
from django.test.testcases import TestCase
|
|
from django.urls.base import reverse
|
|
from django_yunohost_integration.test_utils import generate_basic_auth
|
|
|
|
from findmydevice import __version__
|
|
|
|
|
|
@override_settings(DEBUG=False)
|
|
class DjangoYnhTestCase(HtmlAssertionMixin, TestCase):
|
|
def setUp(self):
|
|
super().setUp()
|
|
|
|
# Always start a fresh session:
|
|
self.client = self.client_class()
|
|
|
|
def test_settings(self):
|
|
assert isinstance(settings, LazySettings)
|
|
assert settings.configured is True
|
|
|
|
assert 'django_yunohost_integration' in settings.INSTALLED_APPS
|
|
assert 'findmydevice.apps.FindMyDeviceConfig' in settings.INSTALLED_APPS
|
|
|
|
assert settings.PATH_URL == 'app_path'
|
|
|
|
assert str(settings.FINALPATH).endswith('/local_test/opt_yunohost')
|
|
assert str(settings.PUBLIC_PATH).endswith('/local_test/var_www')
|
|
assert str(settings.LOG_FILE).endswith('/local_test/var_log_django-fmd.log')
|
|
|
|
assert settings.ROOT_URLCONF == 'urls'
|
|
|
|
def test_config_panel_settings(self):
|
|
# config_panel.toml settings, set via tests.conftest.pytest_configure():
|
|
assert settings.DEBUG_ENABLED == '0' and settings.DEBUG is False
|
|
assert settings.LOG_LEVEL == 'INFO'
|
|
assert settings.ADMIN_EMAIL == 'foo-bar@test.tld'
|
|
assert settings.DEFAULT_FROM_EMAIL == 'django_app@test.tld'
|
|
|
|
def test_auth(self):
|
|
assert settings.PATH_URL == 'app_path'
|
|
assert reverse('admin:index') == '/app_path/admin/'
|
|
|
|
# SecurityMiddleware should redirects all non-HTTPS requests to HTTPS:
|
|
assert settings.SECURE_SSL_REDIRECT is True
|
|
response = self.client.get('/app_path/', secure=False)
|
|
self.assertRedirects(
|
|
response,
|
|
status_code=301, # permanent redirect
|
|
expected_url='https://testserver/app_path/',
|
|
fetch_redirect_response=False,
|
|
)
|
|
|
|
response = self.client.get('/app_path/', secure=True)
|
|
self.assertTemplateUsed(response, 'fmd/login_info.html')
|
|
self.assert_html_parts(
|
|
response,
|
|
parts=(
|
|
'<title>Log in | Find My Device</title>',
|
|
'<p class="errornote">To find your device, you must be logged in.</p>',
|
|
'<a href="/yunohost/sso/">Log in</a>',
|
|
),
|
|
)
|
|
assert_html_response_snapshot(response, query_selector=None, validate=False)
|
|
|
|
def test_web_page_as_sso_user(self):
|
|
assert User.objects.count() == 0
|
|
self.client.cookies['SSOwAuthUser'] = 'test'
|
|
response = self.client.get(
|
|
path='/app_path/',
|
|
HTTP_REMOTE_USER='test',
|
|
HTTP_AUTH_USER='test',
|
|
HTTP_AUTHORIZATION='basic dGVzdDp0ZXN0MTIz',
|
|
secure=True,
|
|
)
|
|
assert isinstance(response, FileResponse)
|
|
|
|
assert User.objects.count() == 1
|
|
user = User.objects.first()
|
|
assert user.username == 'test'
|
|
|
|
response2 = HttpResponse(response.getvalue())
|
|
self.assert_html_parts(
|
|
response2,
|
|
parts=(
|
|
'<title>FMD</title>',
|
|
'<h2>Find My Device</h2>',
|
|
'<link rel="stylesheet" href="./static/fmd_externals/style.css">',
|
|
'<script src="./static/fmd_externals/logic.js"></script>',
|
|
),
|
|
)
|
|
assert_html_response_snapshot(response2, query_selector=None, validate=False)
|
|
|
|
def test_create_unknown_user(self):
|
|
assert User.objects.count() == 0
|
|
|
|
self.client.cookies['SSOwAuthUser'] = 'test'
|
|
|
|
response = self.client.get(
|
|
path='/app_path/admin/',
|
|
HTTP_REMOTE_USER='test',
|
|
HTTP_AUTH_USER='test',
|
|
HTTP_AUTHORIZATION='basic dGVzdDp0ZXN0MTIz',
|
|
secure=True,
|
|
)
|
|
|
|
assert User.objects.count() == 1
|
|
user = User.objects.first()
|
|
assert user.username == 'test'
|
|
assert user.is_active is True
|
|
assert user.is_staff is True # Set by: conf.setup_user.setup_project_user
|
|
assert user.is_superuser is False
|
|
|
|
assert response.status_code == 200
|
|
self.assert_html_parts(
|
|
response,
|
|
parts=(
|
|
'<title>Site administration | Find My Device admin</title>',
|
|
'<strong>test</strong>',
|
|
f'<a href="/app_path/admin/">Django Find My Device v{__version__}</a>',
|
|
),
|
|
)
|
|
|
|
def test_wrong_auth_user(self):
|
|
assert User.objects.count() == 0
|
|
assert AccessLog.objects.count() == 0
|
|
|
|
self.client.cookies['SSOwAuthUser'] = 'test'
|
|
|
|
response = self.client.get(
|
|
path='/app_path/admin/',
|
|
HTTP_REMOTE_USER='test',
|
|
HTTP_AUTH_USER='foobar', # <<< wrong user name
|
|
HTTP_AUTHORIZATION='basic dGVzdDp0ZXN0MTIz',
|
|
secure=True,
|
|
)
|
|
|
|
assert User.objects.count() == 1
|
|
user = User.objects.first()
|
|
assert user.username == 'test'
|
|
assert user.is_active is True
|
|
assert user.is_staff is True # Set by: conf.setup_user.setup_project_user
|
|
assert user.is_superuser is False
|
|
|
|
assert AccessLog.objects.count() == 1
|
|
|
|
assert response.status_code == 403 # Forbidden
|
|
|
|
def test_wrong_cookie(self):
|
|
assert User.objects.count() == 0
|
|
assert AccessLog.objects.count() == 0
|
|
|
|
self.client.cookies['SSOwAuthUser'] = 'foobar' # <<< wrong user name
|
|
|
|
response = self.client.get(
|
|
path='/app_path/admin/',
|
|
HTTP_REMOTE_USER='test',
|
|
HTTP_AUTH_USER='test',
|
|
HTTP_AUTHORIZATION='basic dGVzdDp0ZXN0MTIz',
|
|
secure=True,
|
|
)
|
|
|
|
assert User.objects.count() == 1
|
|
user = User.objects.first()
|
|
assert user.username == 'test'
|
|
assert user.is_active is True
|
|
assert user.is_staff is True # Set by: conf.setup_user.setup_project_user
|
|
assert user.is_superuser is False
|
|
|
|
assert AccessLog.objects.count() == 1
|
|
|
|
assert response.status_code == 403 # Forbidden
|
|
|
|
def test_wrong_authorization_user(self):
|
|
assert User.objects.count() == 0
|
|
|
|
self.client.cookies['SSOwAuthUser'] = 'test'
|
|
|
|
response = self.client.get(
|
|
path='/app_path/admin/',
|
|
HTTP_REMOTE_USER='test',
|
|
HTTP_AUTH_USER='test',
|
|
HTTP_AUTHORIZATION=generate_basic_auth(
|
|
username='foobar', # <<< wrong user name
|
|
password='test123',
|
|
),
|
|
secure=True,
|
|
)
|
|
|
|
assert User.objects.count() == 1
|
|
user = User.objects.first()
|
|
assert user.username == 'test'
|
|
assert user.is_active is True
|
|
assert user.is_staff is True # Set by: conf.setup_user.setup_project_user
|
|
assert user.is_superuser is False
|
|
|
|
assert AccessLog.objects.count() == 1
|
|
|
|
assert response.status_code == 403 # Forbidden
|