mcp-security-framework 1.1.0__py3-none-any.whl → 1.1.2__py3-none-any.whl

tests/test_utils/test_datetime_compat.py

@@ -0,0 +1,147 @@
+"""
+Tests for Datetime Compatibility Module
+
+This module contains tests for the datetime compatibility functions that
+handle certificate datetime fields across different cryptography versions.
+
+Test Coverage:
+- Compatibility with cryptography>=42 (UTC fields)
+- Compatibility with cryptography<42 (legacy fields)
+- Timezone normalization
+- Version detection
+- Error handling
+
+Author: Vasiliy Zdanovskiy
+email: vasilyvz@gmail.com
+"""
+
+from datetime import datetime, timezone
+from unittest.mock import Mock, patch
+
+import pytest
+
+from mcp_security_framework.utils.datetime_compat import (
+    get_not_valid_after_utc,
+    get_not_valid_before_utc,
+    is_cryptography_42_plus,
+)
+
+
+class TestDatetimeCompatibility:
+    """Test suite for datetime compatibility functions."""
+
+    def test_get_not_valid_before_utc_with_utc_field(self):
+        """Test get_not_valid_before_utc with cryptography>=42 UTC field."""
+        # Mock certificate with UTC field (cryptography>=42)
+        mock_cert = Mock()
+        expected_time = datetime.now(timezone.utc)
+        mock_cert.not_valid_before_utc = expected_time
+        mock_cert.not_valid_before = datetime.now()  # Legacy field
+
+        result = get_not_valid_before_utc(mock_cert)
+
+        assert result == expected_time
+        assert result.tzinfo == timezone.utc
+
+    def test_get_not_valid_before_utc_with_legacy_field(self):
+        """Test get_not_valid_before_utc with cryptography<42 legacy field."""
+        # Mock certificate without UTC field (cryptography<42)
+        mock_cert = Mock()
+        mock_cert.not_valid_before_utc = None  # Field doesn't exist
+        naive_time = datetime.now()
+        mock_cert.not_valid_before = naive_time
+
+        result = get_not_valid_before_utc(mock_cert)
+
+        assert result.tzinfo == timezone.utc
+        assert result.replace(tzinfo=None) == naive_time
+
+    def test_get_not_valid_before_utc_with_legacy_field_already_utc(self):
+        """Test get_not_valid_before_utc with legacy field that's already UTC."""
+        # Mock certificate without UTC field but legacy field is already UTC
+        mock_cert = Mock()
+        mock_cert.not_valid_before_utc = None  # Field doesn't exist
+        utc_time = datetime.now(timezone.utc)
+        mock_cert.not_valid_before = utc_time
+
+        result = get_not_valid_before_utc(mock_cert)
+
+        assert result == utc_time
+        assert result.tzinfo == timezone.utc
+
+    def test_get_not_valid_after_utc_with_utc_field(self):
+        """Test get_not_valid_after_utc with cryptography>=42 UTC field."""
+        # Mock certificate with UTC field (cryptography>=42)
+        mock_cert = Mock()
+        expected_time = datetime.now(timezone.utc)
+        mock_cert.not_valid_after_utc = expected_time
+        mock_cert.not_valid_after = datetime.now()  # Legacy field
+
+        result = get_not_valid_after_utc(mock_cert)
+
+        assert result == expected_time
+        assert result.tzinfo == timezone.utc
+
+    def test_get_not_valid_after_utc_with_legacy_field(self):
+        """Test get_not_valid_after_utc with cryptography<42 legacy field."""
+        # Mock certificate without UTC field (cryptography<42)
+        mock_cert = Mock()
+        mock_cert.not_valid_after_utc = None  # Field doesn't exist
+        naive_time = datetime.now()
+        mock_cert.not_valid_after = naive_time
+
+        result = get_not_valid_after_utc(mock_cert)
+
+        assert result.tzinfo == timezone.utc
+        assert result.replace(tzinfo=None) == naive_time
+
+    def test_get_not_valid_after_utc_with_legacy_field_already_utc(self):
+        """Test get_not_valid_after_utc with legacy field that's already UTC."""
+        # Mock certificate without UTC field but legacy field is already UTC
+        mock_cert = Mock()
+        mock_cert.not_valid_after_utc = None  # Field doesn't exist
+        utc_time = datetime.now(timezone.utc)
+        mock_cert.not_valid_after = utc_time
+
+        result = get_not_valid_after_utc(mock_cert)
+
+        assert result == utc_time
+        assert result.tzinfo == timezone.utc
+
+    def test_is_cryptography_42_plus_basic(self):
+        """Test is_cryptography_42_plus basic functionality."""
+        # This test just verifies the function doesn't crash
+        # and returns a boolean value
+        result = is_cryptography_42_plus()
+
+        assert isinstance(result, bool)
+
+    def test_compatibility_integration(self):
+        """Test integration of compatibility functions with real certificate-like objects."""
+        # Test with object that has both fields (simulating cryptography>=42)
+        mock_cert_new = Mock()
+        utc_time = datetime.now(timezone.utc)
+        mock_cert_new.not_valid_before_utc = utc_time
+        mock_cert_new.not_valid_after_utc = utc_time
+
+        before_result = get_not_valid_before_utc(mock_cert_new)
+        after_result = get_not_valid_after_utc(mock_cert_new)
+
+        assert before_result == utc_time
+        assert after_result == utc_time
+
+        # Test with object that has only legacy fields (simulating cryptography<42)
+        mock_cert_old = Mock()
+        naive_time = datetime.now()
+        mock_cert_old.not_valid_before_utc = None
+        mock_cert_old.not_valid_after_utc = None
+        mock_cert_old.not_valid_before = naive_time
+        mock_cert_old.not_valid_after = naive_time
+
+        before_result = get_not_valid_before_utc(mock_cert_old)
+        after_result = get_not_valid_after_utc(mock_cert_old)
+
+        assert before_result.tzinfo == timezone.utc
+        assert after_result.tzinfo == timezone.utc
+        assert before_result.replace(tzinfo=None) == naive_time
+        assert after_result.replace(tzinfo=None) == naive_time

mcp_security_framework-1.1.0.dist-info/RECORD

@@ -1,82 +0,0 @@
-mcp_security_framework/__init__.py,sha256=Q7FHjxcxvQn4JAFHMuHflyCHLR3F7-jmqMx7YaWgPtU,3136
-mcp_security_framework/constants.py,sha256=6jXpxTXpua76NgL1KkRYX3tAobCgtY3_4MGM2a1Blg0,5362
-mcp_security_framework/cli/__init__.py,sha256=cPLJ5iZYxSomXFjA4-IPWE3hmMx6ryiWaebyJSW68bc,369
-mcp_security_framework/cli/cert_cli.py,sha256=QW2YciGE5jKdfzYMwXCn-znNm22VhAaSHk4qH4tcp2w,19129
-mcp_security_framework/cli/security_cli.py,sha256=fmYVT03NbR7PrO6qUa9L1FQhTTPd1ZMFIB6H6nWLqOU,27993
-mcp_security_framework/core/__init__.py,sha256=LiX8_M5qWiTXccJFjSLxup9emhklp-poq57SvznsKEg,1729
-mcp_security_framework/core/auth_manager.py,sha256=yRLKp9YXQxpdRUqzlJ9xcCW4PnXpBBpSpMeeysrYWPU,38620
-mcp_security_framework/core/cert_manager.py,sha256=mPO5LNo6MdYgiY8akEQ-cn58AsQOCvnurOWYYFmC3WY,78659
-mcp_security_framework/core/permission_manager.py,sha256=Ts_O_A0AMl_vAcMxRG9LpYbBl3cR6Anv0LAS0rwpKr4,26489
-mcp_security_framework/core/rate_limiter.py,sha256=QMdlRRqf-GU7eUgM5vttjvhkYmFs2INX9f0qMgxO8BY,20694
-mcp_security_framework/core/security_manager.py,sha256=mwDSFHswp91Wc90PQ9JyIukqq15dO4lK56yjmoY5PDA,38176
-mcp_security_framework/core/ssl_manager.py,sha256=nCDrukaELONQs_uAfb30g69HDxRp2u4k0Bpq8eJH6Zo,27718
-mcp_security_framework/examples/__init__.py,sha256=RW-qTe-Fu3Hbl1Kyd58pWqYan92cmW-y0g2wEVCK850,1909
-mcp_security_framework/examples/comprehensive_example.py,sha256=ZEz1lOJM-a2hy8ccMeRdVZzdunGyOPhuYaf59xMWe4E,35738
-mcp_security_framework/examples/django_example.py,sha256=RFmZlXj9_fWpIjQrm3z798IQEq4iLZu8NbHg7NNAIbY,24433
-mcp_security_framework/examples/fastapi_example.py,sha256=BFJjDCq3kmHowxREvb9Cb2rqzRAJPOo5HzBx1ccGovc,36346
-mcp_security_framework/examples/flask_example.py,sha256=6BhplNC9yA-7cBs03J1Amo0sR7V0vP4NFj8LP3Sd9JA,20619
-mcp_security_framework/examples/gateway_example.py,sha256=BOEmykUJ56eGilZJT5V1j1swaW62MvlXLrE1aL0l2pw,33279
-mcp_security_framework/examples/microservice_example.py,sha256=MUKAqV-0-xLga6VVddgVNfAsapgOgh7RDroWrDhEkvE,29951
-mcp_security_framework/examples/standalone_example.py,sha256=IckipYe2I4wzbdmOV2EN1_ycucY-W4fU57ocKEgOtzQ,30633
-mcp_security_framework/examples/test_all_examples.py,sha256=BkxHUUL_2hWc2f3b15lnlja3Zwp6frcic9GQVfhaXEY,20074
-mcp_security_framework/middleware/__init__.py,sha256=wSBfpfdrz4ErqhwCOJI1uxbQ5Q22_2HdjrxmwwWuj0o,8027
-mcp_security_framework/middleware/auth_middleware.py,sha256=kk0koMxrESjJ_nZ_6h5WvuupGA0exK1Q19n0Spuw1k8,10242
-mcp_security_framework/middleware/fastapi_auth_middleware.py,sha256=LsCBlU4XRja66VCDkYEHk7fmD27-SrAGyPOijtxmRHQ,17502
-mcp_security_framework/middleware/fastapi_middleware.py,sha256=J8olLT3SICbM-NJ2m11cPkOfhREtlJHYk5ENfggbuU4,27260
-mcp_security_framework/middleware/flask_auth_middleware.py,sha256=e94Y8SqfPikg0V-tap3iK9TffHqSCKXvclKdBCatLWg,20891
-mcp_security_framework/middleware/flask_middleware.py,sha256=wtHafpEgOvA8ZEIzJQzt-LqbIrcFWd1sz8QJXNpgkEU,21083
-mcp_security_framework/middleware/mtls_middleware.py,sha256=TsI9BwFkX98KqG9E1bpFFOrcA8vsaumRc0GH6dOEHRs,14694
-mcp_security_framework/middleware/rate_limit_middleware.py,sha256=EgjF7mzhkdgfL4nT4eLtKchWmmwaa50WCuIVwYwl_ac,13661
-mcp_security_framework/middleware/security_middleware.py,sha256=aQDt9ktMzs0KzNq_aW_23dfOSTmIrWHNj_ps0O7MK40,17804
-mcp_security_framework/schemas/__init__.py,sha256=lefkbRlbj2ICfasSj51MQ04o3z1YycnbnknSJCFfXbU,2590
-mcp_security_framework/schemas/config.py,sha256=dMlMum-pCWMwYoqBm14dUD725pOW63dYPfIqXv_0maQ,25816
-mcp_security_framework/schemas/models.py,sha256=5L-GdtHmuH8HfYkAueeN2Amm6l9i0jIv72jJbDejLlI,26813
-mcp_security_framework/schemas/responses.py,sha256=nVXaqF5GTSprXTa_wiUEu38nvSw9WAXtKViAJNbO-Xg,23206
-mcp_security_framework/tests/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-mcp_security_framework/utils/__init__.py,sha256=wwwdmQYHTSz0Puvs9FD6aIKmWp3NFARe3JPWNH-b_wk,3098
-mcp_security_framework/utils/cert_utils.py,sha256=TzErmDK_dAtDCNDnUPh_Oa13HkUDev-G_pHGSXS3cB4,17160
-mcp_security_framework/utils/crypto_utils.py,sha256=OH2V7_C3FjStxFTIXMUPfNXZuWG2-QjgoBrIH4Lv4p0,12392
-mcp_security_framework/utils/validation_utils.py,sha256=e9BX3kw9gdXSmFsc7lmG-qnzSlK0-Ynn7Xs4uKHquF4,16279
-tests/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-tests/conftest.py,sha256=Ws5h-n_hAry_QKquFA0h1TW-v8sHGi2_t06S0s5YOw8,9024
-tests/test_cli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-tests/test_cli/test_cert_cli.py,sha256=3hL_4y9-908sjgLrFQVNrm0Pr8yacNCAzKf9avisfDY,14327
-tests/test_cli/test_security_cli.py,sha256=oMEUEzt-B-UR-acAzUa-BR1YDOGEwdmKiSy-MIuflGE,25926
-tests/test_core/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-tests/test_core/test_auth_manager.py,sha256=tyJUe3yBP95SFwbhSr_IloKhEQw0BuEdvjAC1Hnwu4s,22540
-tests/test_core/test_cert_manager.py,sha256=MPbrf0qUvRP0Yj67xowuw7gI20HQWgBobGsvFz30iKM,36083
-tests/test_core/test_permission_manager.py,sha256=0XeghWXZqVpKyyRuhuDu1dkLUSwuZaFWkRQxQhkkFVI,14966
-tests/test_core/test_rate_limiter.py,sha256=YzzlhlxZm-A7YGMiIV8LXDA0zmb_6uRF9GRx9s21Q0U,22544
-tests/test_core/test_security_manager.py,sha256=y8klHTMeBoh16wI-10-7gd92T7ZpmuPaSmDtfWM88Ns,35007
-tests/test_core/test_ssl_manager.py,sha256=Vm_Nw4SoVro_iwPPc_uD9CwzXpVBkGyVH7EqDtHawvU,20362
-tests/test_examples/__init__.py,sha256=VC0N1wB9d01Acnqfos-9x68o23xxHkRhAh4-1qJKUTc,157
-tests/test_examples/test_comprehensive_example.py,sha256=JqCa7QKlk0wY0jHm9G22_AkWcuQCTIOOvCoCnWr3ZIA,26142
-tests/test_examples/test_fastapi_example.py,sha256=BsWlWdRue7VwluWaj3psaeIlQl7Ra_kBBJqOzsMRMws,13260
-tests/test_examples/test_flask_example.py,sha256=nh7As80LDz2vZXhLOo9IaJDNZiYBRdMbItDS_PhihwE,12822
-tests/test_examples/test_standalone_example.py,sha256=rw8Djqw9dhgtz2P50y9rBXUWYij30uK-cjdWzJHyamI,8520
-tests/test_integration/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-tests/test_integration/test_auth_flow.py,sha256=-qtPdfy_uGbcW8wh4K31VlSlFkHiLKYRszg8lC5_o0E,19212
-tests/test_integration/test_certificate_flow.py,sha256=ILX7b01Oum5DBYb4UusSzwniqgUkc5bbhLzcPEihjJo,19969
-tests/test_integration/test_fastapi_integration.py,sha256=5BhqPSWC07WCgoq4moEx9PX0XLJxOLljGrd25ZwccUs,13401
-tests/test_integration/test_flask_integration.py,sha256=hZ3yerzG8n1hrTLKMR0-LuERTYEide_-t_8xyvUSvjY,15767
-tests/test_integration/test_standalone_integration.py,sha256=K8n7hkSYEqwCMSxfNC0Iwedr9SA7YJSFXIeoq0kRqLc,19076
-tests/test_middleware/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-tests/test_middleware/test_fastapi_auth_middleware.py,sha256=pORcQ1DssYBcO1yEQO402mUFgXRn9QRfkaQKshlm06o,30139
-tests/test_middleware/test_fastapi_middleware.py,sha256=43U1PGHDa9a8AnvJpbuyUE1psDuvj2-g64dWkEuqTBM,21150
-tests/test_middleware/test_flask_auth_middleware.py,sha256=KP-JvrtZbf67i-g8rkXJmBnay_CppXqTGuDh-ZQu1gM,25356
-tests/test_middleware/test_flask_middleware.py,sha256=OfucOhChC3rr8UdSYz2EWQzCtA0oalMqzDxdiT1tNOQ,23364
-tests/test_middleware/test_security_middleware.py,sha256=X7Ui-jPkZ2czobEZRf6NwXovH8sGiwYYUdIR7ADQLXA,19653
-tests/test_schemas/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-tests/test_schemas/test_config.py,sha256=Bp_yZ_HBIl7jcR7Wb1S9iCB0tCu_Ov26YKHTulDs1RU,29430
-tests/test_schemas/test_models.py,sha256=bBeZOPqveuVJuEi_BTVWdVsdj08JXJTEFwvBM4eFRVU,34311
-tests/test_schemas/test_responses.py,sha256=ZSbO7A3ThPBovTXO8PFF-2ONWAjJx2dMOoV2lQIfd8s,40774
-tests/test_schemas/test_serialization.py,sha256=jCugAyrdD6Mw1U7Kxni9oTukarZmMMl6KUcl6cq_NTk,18599
-tests/test_utils/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-tests/test_utils/test_cert_utils.py,sha256=2k1kUCJy0T2HPBwOcU5USGfEBQZ_rGzumAGkDdywLak,21232
-tests/test_utils/test_crypto_utils.py,sha256=yEb4hzG6-irj2DPoXY0DUboJfbeR87ussgTuBpxLGz4,20737
-tests/test_utils/test_validation_utils.py,sha256=lus_wHJ2WyVnBGQ28S7dSv78uWcCIuLhn5uflJw-uGw,18569
-mcp_security_framework-1.1.0.dist-info/METADATA,sha256=QZQBtZE8weA0gcd3G0g2Yx2GErDQ-TLqge2_CCmlIf4,11680
-mcp_security_framework-1.1.0.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-mcp_security_framework-1.1.0.dist-info/entry_points.txt,sha256=qBh92fVDmd1m2f3xeW0hTu3Ksg8QfGJyV8UEkdA2itg,142
-mcp_security_framework-1.1.0.dist-info/top_level.txt,sha256=ifUiGrTDcD574MXSOoAN2rp2wpUvWlb4jD9LTUgDWCA,29
-mcp_security_framework-1.1.0.dist-info/RECORD,,