0x1949 Team - FAZEMRX - MANAGER
Edit File: test_httpauth.cpython-310.pyc
o �b�\ � @ s� d Z ddlZddlmZ ddlmZ ddlmZmZ ddl m Z m Z m Z ddl mZ ddlmZ dd lmZ dd lmZ dd lmZ dd lmZ dd lmZ ddlm Z m Z ddl m Z ddl m!Z!m"Z" ddl#m$Z$ ddl%m&Z&m'Z'm(Z( ddl)m*Z* ddl+m,Z, ddl-m.Z. dd� Z/G dd� d�Z0G dd� d�Z1G d d � d e1e0ej2�Z3G d d � d e1ej2�Z4G d d!� d!e1ej2�Z5eej6� G d"d#� d#�Z7G d$d%� d%ej2�Z8dS )&z! Tests for L{twisted.web._auth}. � N)� implementer)� verifyObject)�error�portal)� ANONYMOUS�AllowAnonymousAccess�'InMemoryUsernamePasswordDatabaseDontUse)�IUsernamePassword)� IPv4Address)�ConnectionDone)�globalLogPublisher)�Failure)�EventLoggingObserver)�unittest)�basic�digest)�BasicCredentialFactory)�HTTPAuthSessionWrapper�UnauthorizedResource)�ICredentialFactory)� IResource�Resource�getChildForRequest�� NOT_DONE_YET)�Data)� DummyRequestc C s t �| ��� S �N)�base64� b64encode�strip)�s� r" �@/usr/lib/python3/dist-packages/twisted/web/test/test_httpauth.pyr % s r c @ sJ e Zd ZdZdd� Zddd�Zdd � Zd d � Zd d � Zdd� Z dd� Z dS )�BasicAuthTestsMixinz� L{TestCase} mixin class which defines a number of tests for L{basic.BasicCredentialFactory}. Because this mixin defines C{setUp}, it must be inherited before L{TestCase}. c C s. | � � | _d| _d| _d| _t�| j�| _d S )Ns foos dreids S3CuR1Ty)� makeRequest�request�realm�username�passwordr r �credentialFactory��selfr" r" r# �setUp0 s zBasicAuthTestsMixin.setUp� GETNc C s t | j�d���)z� Create a request object to be passed to L{basic.BasicCredentialFactory.decode} along with a response value. Override this in a subclass. z did not implement makeRequest)�NotImplementedError� __class__)r, �method� clientAddressr" r" r# r% 7 s z BasicAuthTestsMixin.makeRequestc C � | � tt| j�� dS )zM L{BasicCredentialFactory} implements L{ICredentialFactory}. N�� assertTruer r r* r+ r" r" r# �test_interface? � z"BasicAuthTestsMixin.test_interfacec C sd t d�| jd| jg��}| j�|| j�}| �t� |�� | �|� | j�� | � |� | jd �� dS )z� L{basic.BasicCredentialFactory.decode} turns a base64-encoded response into a L{UsernamePassword} object with a password which reflects the one which was encoded in the response. � � :s wrongN) r �joinr( r) r* �decoder& r5 r � providedBy� checkPassword� assertFalse�r, �response�credsr" r" r# �test_usernamePasswordE s z)BasicAuthTestsMixin.test_usernamePasswordc C sX t d�| jd| jg��}|�d�}| j�|| j�}| �t t |�� | �|� | j�� dS )zz L{basic.BasicCredentialFactory.decode} decodes a base64-encoded response with incorrect padding. r8 r9 � =N) r r: r( r) r r* r; r& r5 r r r= r? r" r" r# �test_incorrectPaddingR s z)BasicAuthTestsMixin.test_incorrectPaddingc C s" d}| � tj| jj|| �� � dS )z� L{basic.BasicCredentialFactory.decode} raises L{LoginFailed} if passed a response which is not base64-encoded. � xN)� assertRaisesr � LoginFailedr* r; r% �r, r@ r" r" r# �test_invalidEncoding^ s �z(BasicAuthTestsMixin.test_invalidEncodingc C s& t d�}| �tj| jj|| �� � dS )z� L{basic.BasicCredentialFactory.decode} raises L{LoginFailed} when passed a response which is not valid base64-encoded text. s 123abc+/N)r rF r rG r* r; r% rH r" r" r# �test_invalidCredentialsk s �z+BasicAuthTestsMixin.test_invalidCredentials�r. N) �__name__� __module__� __qualname__�__doc__r- r% r6 rB rD rI rJ r" r" r" r# r$ ) s r$ c @ s e Zd Zddd�ZdS )� RequestMixinr. Nc C s, |du r t ddd�}td�}||_||_|S )zo Create a L{DummyRequest} (change me to create a L{twisted.web.http.Request} instead). N�TCP� localhosti� � /)r r r1 �client)r, r1 r2 r& r" r" r# r% z s zRequestMixin.makeRequestrK )rL rM rN r% r" r" r" r# rP y s rP c @ s e Zd ZdZdS )�BasicAuthTestszK Basic authentication tests which use L{twisted.web.http.Request}. N)rL rM rN rO r" r" r" r# rU � s rU c @ s8 e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd S ) �DigestAuthTestszL Digest authentication tests which use L{twisted.web.http.Request}. c C s, d| _ d| _t�| j| j �| _| �� | _dS )z> Create a DigestCredentialFactory for testing � test realm� md5N)r' � algorithmr �DigestCredentialFactoryr* r% r& r+ r" r" r# r- � s �zDigestAuthTests.setUpc sn d�d�dg� t � �� ����fdd�}���jjd|� ���td�d��}�j��|� ��� d � d S ) z� L{digest.DigestCredentialFactory.decode} calls the C{decode} method on L{twisted.cred.digest.DigestCredentialFactory} with the HTTP method and host of the request. s 169.254.0.1r. Fc s0 �� �| � �� �|� �� �|� d� d< d S )NTr )� assertEqual)� _response�_method�_host��done�hostr1 r@ r, r" r# �check� s z*DigestAuthTests.test_decode.<locals>.checkr; rQ �Q r N)�object�patchr* r r% r r; r5 )r, rb �reqr" r_ r# � test_decode� s zDigestAuthTests.test_decodec C r3 )zN L{DigestCredentialFactory} implements L{ICredentialFactory}. Nr4 r+ r" r" r# r6 � r7 z DigestAuthTests.test_interfacec C st | j �| j�}| �|d d� | �|d d� | �|d d� | �d|� | �d|� |�� D ]}| �d |� q/d S ) ah The challenge issued by L{DigestCredentialFactory.getChallenge} must include C{'qop'}, C{'realm'}, C{'algorithm'}, C{'nonce'}, and C{'opaque'} keys. The values for the C{'realm'} and C{'algorithm'} keys must match the values supplied to the factory's initializer. None of the values may have newlines in them. �qop� authr' rW rY rX �nonce�opaque� N)r* � getChallenger& r[ �assertIn�values� assertNotIn)r, � challenge�vr" r" r# �test_getChallenge� s �z!DigestAuthTests.test_getChallengec C sd | � dd�}| j�|�}| �|d d� | �|d d� | �|d d� | �d |� | �d |� dS ) z� L{DigestCredentialFactory.getChallenge} can issue a challenge even if the L{Request} it is passed returns L{None} from C{getClientIP}. r. Nrh ri r' rW rY rX rj rk )r% r* rm r[ rn )r, r& rq r" r" r# � test_getChallengeWithoutClientIP� s z0DigestAuthTests.test_getChallengeWithoutClientIPN) rL rM rN rO r- rg r6 rs rt r" r" r" r# rV � s rV c @ s@ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dS )�UnauthorizedResourceTestsz, Tests for L{UnauthorizedResource}. c C s4 t g �}| �|�dd�|� | �|�dd�|� dS )zF An L{UnauthorizedResource} is every child of itself. �fooN�bar)r �assertIdentical�getChildWithDefault)r, �resourcer" r" r# �test_getChildWithDefault� s z2UnauthorizedResourceTests.test_getChildWithDefaultc C s@ t td�g�}|�|� | �|jd� | �|j�d�dg� dS )z� Render L{UnauthorizedResource} for the given request object and verify that the response code is I{Unauthorized} and that a I{WWW-Authenticate} header is set in the response containing a challenge. � example.com� � www-authenticates basic realm="example.com"N)r r �renderr[ � responseCode�responseHeaders� getRawHeaders)r, r& rz r" r" r# �_unauthorizedRenderTest� s �z1UnauthorizedResourceTests._unauthorizedRenderTestc C s* | � � }| �|� | �dd�|j�� dS )z� L{UnauthorizedResource} renders with a 401 response code and a I{WWW-Authenticate} header and puts a simple unauthorized message into the response body. s Unauthorizedr8 N�r% r� r[ r: �written�r, r& r" r" r# � test_render� s z%UnauthorizedResourceTests.test_renderc C s. | j dd�}| �|� | �dd�|j�� dS )z� The rendering behavior of L{UnauthorizedResource} for a I{HEAD} request is like its handling of a I{GET} request, but no response body is written. s HEAD)r1 r8 Nr� r� r" r" r# �test_renderHEAD� s z)UnauthorizedResourceTests.test_renderHEADc C s: t td�g�}| �� }|�|� | �|j�d�dg� dS )z� The realm value included in the I{WWW-Authenticate} header set in the response when L{UnauthorizedResounrce} is rendered has quotes and backslashes escaped. z example\"foor~ s basic realm="example\\\"foo"N)r r r% r r[ r� r� )r, rz r& r" r" r# �test_renderQuotesRealm s �z0UnauthorizedResourceTests.test_renderQuotesRealmc C sP t t�dd�g�}| �� }|�|� |j�d�d }| �d|� | �d|� dS )z� The digest value included in the I{WWW-Authenticate} header set in the response when L{UnauthorizedResource} is rendered has quotes and backslashes escaped. rX s example\"foor~ r s realm="example\\\"foo"s hm="md5N)r r rZ r% r r� r� rn )r, rz r& � authHeaderr" r" r# �test_renderQuotesDigest s � z1UnauthorizedResourceTests.test_renderQuotesDigestN) rL rM rN rO r{ r� r� r� r� r� r" r" r" r# ru � s ru c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �RealmaJ A simple L{IRealm} implementation which gives out L{WebAvatar} for any avatarId. @type loggedIn: C{int} @ivar loggedIn: The number of times C{requestAvatar} has been invoked for L{IResource}. @type loggedOut: C{int} @ivar loggedOut: The number of times the logout callback has been invoked. c C s d| _ d| _|| _d S )Nr )� loggedOut�loggedIn� avatarFactory)r, r� r" r" r# �__init__5 s zRealm.__init__c G s. t |v r| jd7 _t | �|�| jfS t� ��N� )r r� r� �logoutr/ )r, �avatarId�mind� interfacesr" r" r# � requestAvatar: s zRealm.requestAvatarc C s | j d7 _ d S r� )r� r+ r" r" r# r� @ � z Realm.logoutN)rL rM rN rO r� r� r� r" r" r" r# r� ( s r� c @ s� e Zd ZdZeZdd� Zdd� Zdd� Zdd � Z d d � Z d d � Z dd� Z dd� Z dd� Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&S )'�HTTPAuthHeaderTestsz. Tests for L{HTTPAuthSessionWrapper}. c C s� d| _ d| _d| _d| _d| _t� | _| j�| j | j� t| jd�| _ | j � | jt| jd�� | j | j i| _ t | j j �| _t�| j| jg�| _g | _t| j| j�| _dS )z\ Create a realm, portal, and L{HTTPAuthSessionWrapper} to use in the tests. s foo bars bar bazs& contents of the avatar resource itselfs foo-childs' contents of the foo child of the avatar� text/plainN)r( r) � avatarContent� childName� childContentr �checker�addUserr �avatar�putChild�avatarsr� �getr' r �Portal�credentialFactoriesr �wrapperr+ r" r" r# r- K s zHTTPAuthHeaderTests.setUpc C s2 t | jd | j �}|j�dd| � t| j|�S )z� Add an I{basic authorization} header to the given request and then dispatch it, starting from C{self.wrapper} and returning the resulting L{IResource}. r9 � authorization� Basic )r r( r) �requestHeaders� addRawHeaderr r� )r, r& � authorizationr" r" r# �_authorizedBasicLogin^ s z)HTTPAuthHeaderTests._authorizedBasicLoginc sH �� �jg�� t�j� �}� �� }� �fdd�}|�|� � �|� |S )z� Resource traversal which encounters an L{HTTPAuthSessionWrapper} results in an L{UnauthorizedResource} instance when the request does not have the required I{Authorization} headers. c � �� � jd� d S �Nr} �r[ r� ��result�r& r, r" r# � cbFinishedr r� z@HTTPAuthHeaderTests.test_getChildWithDefault.<locals>.cbFinished)r% r� r r� � notifyFinish� addCallbackr �r, �child�dr� r" r� r# r{ h s z,HTTPAuthHeaderTests.test_getChildWithDefaultc sf �j �td�� ���jg�� � j�d|� t�j� �}� � � }� �fdd�}|� |� � � |� |S )a( Create a request with the given value as the value of an I{Authorization} header and perform resource traversal with it, starting at C{self.wrapper}. Assert that the result is a 401 response code. Return a L{Deferred} which fires when this is all done. r| r� c r� r� r� r� r� r" r# r� � r� zAHTTPAuthHeaderTests._invalidAuthorizationTest.<locals>.cbFinished) r� �appendr r% r� r� r� r r� r� r� r )r, r@ r� r� r� r" r� r# �_invalidAuthorizationTesty s z-HTTPAuthHeaderTests._invalidAuthorizationTestc C s | � dtd� �S )z� Resource traversal which enouncters an L{HTTPAuthSessionWrapper} results in an L{UnauthorizedResource} when the request has an I{Authorization} header with a user which does not exist. r� s foo:bar)r� r r+ r" r" r# �(test_getChildWithDefaultUnauthorizedUser� s z<HTTPAuthHeaderTests.test_getChildWithDefaultUnauthorizedUserc C s | � dt| jd � �S )z� Resource traversal which enouncters an L{HTTPAuthSessionWrapper} results in an L{UnauthorizedResource} when the request has an I{Authorization} header with a user which exists and the wrong password. r� s :bar)r� r r( r+ r" r" r# �,test_getChildWithDefaultUnauthorizedPassword� s �z@HTTPAuthHeaderTests.test_getChildWithDefaultUnauthorizedPasswordc C s | � d�S )z� Resource traversal which enouncters an L{HTTPAuthSessionWrapper} results in an L{UnauthorizedResource} when the request has an I{Authorization} header with an unrecognized scheme. s Quux foo bar baz)r� r+ r" r" r# �*test_getChildWithDefaultUnrecognizedScheme� s z>HTTPAuthHeaderTests.test_getChildWithDefaultUnrecognizedSchemec sV �j �td�� ���jg�� ��� �}� �� }� �fdd�}|�|� � �|� |S )z� Resource traversal which encounters an L{HTTPAuthSessionWrapper} results in an L{IResource} which renders the L{IResource} avatar retrieved from the portal when the request has a valid I{Authorization} header. r| c � �� � j�jg� d S r )r[ r� r� ��ignoredr� r" r# r� � � zJHTTPAuthHeaderTests.test_getChildWithDefaultAuthorized.<locals>.cbFinished) r� r� r r% r� r� r� r� r r� r" r� r# �"test_getChildWithDefaultAuthorized� s z6HTTPAuthHeaderTests.test_getChildWithDefaultAuthorizedc sR �j �td�� ��g �� ��� �}� �� }� �fdd�}|�|� � �|� |S )a Resource traversal which terminates at an L{HTTPAuthSessionWrapper} and includes correct authentication headers results in the L{IResource} avatar (not one of its children) retrieved from the portal being rendered. r| c r� r )r[ r� r� r� r� r" r# r� � r� z=HTTPAuthHeaderTests.test_renderAuthorized.<locals>.cbFinished)r� r� r r% r� r� r� r r� r" r� r# �test_renderAuthorized� s z)HTTPAuthHeaderTests.test_renderAuthorizedc sr t t�G dd� d��}|� � �j�� � ���jg��t�j��}��� }� ��fdd�}|� |� �� |� |S )z� When L{HTTPAuthSessionWrapper} finds an L{ICredentialFactory} to issue a challenge, it calls the C{getChallenge} method with the request as an argument. c @ s e Zd ZdZdd� Zdd� ZdS )zUHTTPAuthHeaderTests.test_getChallengeCalledWithRequest.<locals>.DumbCredentialFactorys dumbc S s g | _ d S r )�requestsr+ r" r" r# r� � s z^HTTPAuthHeaderTests.test_getChallengeCalledWithRequest.<locals>.DumbCredentialFactory.__init__c S s | j �|� i S r )r� r� r� r" r" r# rm � s zbHTTPAuthHeaderTests.test_getChallengeCalledWithRequest.<locals>.DumbCredentialFactory.getChallengeN)rL rM rN �schemer� rm r" r" r" r# �DumbCredentialFactory� s r� c s �� � j�g� d S r )r[ r� r� ��factoryr& r, r" r# r� � � zJHTTPAuthHeaderTests.test_getChallengeCalledWithRequest.<locals>.cbFinished) r r r� r� r% r� r r� r� r� r )r, r� r� r� r� r" r� r# �"test_getChallengeCalledWithRequest� s z6HTTPAuthHeaderTests.test_getChallengeCalledWithRequestc C sh | j �td�� G dd� dt�}| j�| j|� � | �| jg�}| �|�}|� |� | � | j j d� |S )a Issue a request for an authentication-protected resource using valid credentials and then return the C{DummyRequest} instance which was used. This is a helper for tests about the behavior of the logout callback. r| c @ s e Zd Zdd� ZdS )z7HTTPAuthHeaderTests._logoutTest.<locals>.SlowerResourcec S s t S r r r� r" r" r# r � � z>HTTPAuthHeaderTests._logoutTest.<locals>.SlowerResource.renderN)rL rM rN r r" r" r" r# �SlowerResource� s r� r ) r� r� r r r� r� r� r% r� r r[ r' r� )r, r� r& r� r" r" r# � _logoutTest� s z HTTPAuthHeaderTests._logoutTestc C s$ | � � }|�� | �| jjd� dS )zX The realm's logout callback is invoked after the resource is rendered. r� N)r� �finishr[ r' r� r� r" r" r# � test_logout s z HTTPAuthHeaderTests.test_logoutc C s. | � � }|�ttd��� | �| jjd� dS )z� The realm's logout callback is also invoked if there is an error generating the response (for example, if the client disconnects early). zSimulated disconnectr� N)r� �processingFailedr r r[ r' r� r� r" r" r# �test_logoutOnError s z&HTTPAuthHeaderTests.test_logoutOnErrorc C sH | j �td�� | �| jg�}|j�dd� t| j|�}| � |t � dS )z� Resource traversal which enouncters an L{HTTPAuthSessionWrapper} results in an L{UnauthorizedResource} when the request has a I{Basic Authorization} header which cannot be decoded using base64. r| r� s Basic decode should failN) r� r� r r% r� r� r� r r� �assertIsInstancer )r, r& r� r" r" r# �test_decodeRaises s � z%HTTPAuthHeaderTests.test_decodeRaisesc C sH d}| � | j�|�d� td�}| j�|� | � | j�|�|df� dS )z� L{HTTPAuthSessionWrapper._selectParseHeader} returns a two-tuple giving the L{ICredentialFactory} to use to parse the header and a string containing the portion of the header which remains to be parsed. s Basic abcdef123456)NNr| s abcdef123456N)r[ r� �_selectParseHeaderr r� r� )r, �basicAuthorizationr� r" r" r# �test_selectParseResponse$ s � �z,HTTPAuthHeaderTests.test_selectParseResponsec s� t �| t�}G dd� dt�� G � fdd�d�}| j�|� � | �| jg�}|j� dd� t | j |�}|� |� | � |jd� | �dt|�� | �|d d j� � | � t| �� ��d� d S ) z� Any unexpected exception raised by the credential factory's C{decode} method results in a 500 response code and causes the exception to be logged. c @ � e Zd ZdS )zKHTTPAuthHeaderTests.test_unexpectedDecodeError.<locals>.UnexpectedExceptionN�rL rM rN r" r" r" r# �UnexpectedException= � r� c s$ e Zd ZdZdd� Z� fdd�ZdS )zBHTTPAuthHeaderTests.test_unexpectedDecodeError.<locals>.BadFactorys badc S s i S r r" )r, rT r" r" r# rm C r� zOHTTPAuthHeaderTests.test_unexpectedDecodeError.<locals>.BadFactory.getChallengec � � � �r r" )r, r@ r& �r� r" r# r; F � zIHTTPAuthHeaderTests.test_unexpectedDecodeError.<locals>.BadFactory.decodeN)rL rM rN r� rm r; r" r� r" r# � BadFactory@ s r� r� s Bad abc�� r� r � log_failureN)r �createWithCleanupr � Exceptionr� r� r% r� r� r� r r� r r[ r� � assertEquals�lenr� �value�flushLoggedErrors)r, � logObserverr� r& r� r" r� r# �test_unexpectedDecodeError5 s z.HTTPAuthHeaderTests.test_unexpectedDecodeErrorc s� t �| t�}G dd� dt�� G � fdd�d�}| j�|� � | j�td�� | � | j g�}| � |�}|� |� | � |jd� | �dt|�� | �|d d j� � | � t| �� ��d� d S ) z� Any unexpected failure from L{Portal.login} results in a 500 response code and causes the failure to be logged. c @ r� )zJHTTPAuthHeaderTests.test_unexpectedLoginError.<locals>.UnexpectedExceptionNr� r" r" r" r# r� Z r� r� c s e Zd ZefZ� fdd�ZdS )zDHTTPAuthHeaderTests.test_unexpectedLoginError.<locals>.BrokenCheckerc r� r r" )r, � credentialsr� r" r# �requestAvatarId` r� zTHTTPAuthHeaderTests.test_unexpectedLoginError.<locals>.BrokenChecker.requestAvatarIdN)rL rM rN r �credentialInterfacesr� r" r� r" r# � BrokenChecker] s r� r| r� r� r r� N)r r� r r� r �registerCheckerr� r� r r% r� r� r r[ r� r� r� r� r� r� )r, r� r� r& r� r" r� r# �test_unexpectedLoginErrorS s z-HTTPAuthHeaderTests.test_unexpectedLoginErrorc s� d�t � �jt< �jt ��jt�d�� �j�t� � �j � t d�� �� �jg�� t �j� �}� �� }� ��fdd�}|�|� � �|� |S )zl Anonymous requests are allowed if a L{Portal} has an anonymous checker registered. s* contents of the unprotected child resourcer� r| c s �� � j�g� d S r )r[ r� r� �r& r, �unprotectedContentsr" r# r� r� z<HTTPAuthHeaderTests.test_anonymousAccess.<locals>.cbFinished)r r� r r� r� r r r� r r� r� r r% r r� r� r� r r� r" r� r# �test_anonymousAccessm s � z(HTTPAuthHeaderTests.test_anonymousAccessN)rL rM rN rO r r% r- r� r{ r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r" r" r" r# r� D s* r� )9rO r �zope.interfacer �zope.interface.verifyr � twisted.credr r �twisted.cred.checkersr r r �twisted.cred.credentialsr �twisted.internet.addressr �twisted.internet.errorr �twisted.loggerr �twisted.python.failurer �twisted.test.proto_helpersr � twisted.trialr �twisted.web._authr r �twisted.web._auth.basicr �twisted.web._auth.wrapperr r �twisted.web.iwebr �twisted.web.resourcer r r �twisted.web.serverr �twisted.web.staticr �twisted.web.test.test_webr r r$ rP �TestCaserU rV ru �IRealmr� r� r" r" r" r# �<module> s< PK M