pyramid-fullauth 0.3.0__py2.7.egg

tests/views/test_login_social.py

@@ -0,0 +1,254 @@
+"""Social network login test."""
+import transaction
+from pyramid import testing
+from velruse import AuthenticationComplete
+from mock import MagicMock
+
+from pyramid_fullauth.views.social import SocialLoginViews
+from pyramid_fullauth.models import User
+
+
+def test_social_login_link(social_app):
+    """Login:Form displayed social form."""
+    res = social_app.get('/login')
+    assert ('Connect with facebook</a>' in res.body)
+
+
+def test_social_click_link(social_app):
+    """Click social login link."""
+    res = social_app.get('/login/facebook?scope=email%2Coffline_access', status=302)
+    assert (res.headers['Location'].startswith(
+        'https://www.facebook.com/dialog/oauth/?scope=email%2Coffline_access&state='))
+
+
+def test_social_login_register(social_config, db_session):
+    """Register fresh user and logs him in."""
+    profile = {
+        'accounts': [{'domain': u'facebook.com', 'userid': u'2343'}],
+        'displayName': u'teddy',
+        'verifiedEmail': u'we@po.pl',
+        'preferredUsername': u'teddy',
+        'emails': [{'value': u'aasd@bwwqwe.pl'}],
+        'name': u'ted'
+    }
+    credentials = {'oauthAccessToken': '7897048593434'}
+    provider_name = u'facebook'
+    provider_type = u'facebook'
+    request = testing.DummyRequest()
+    request.user = None
+    request.registry = social_config.registry
+    request.remote_addr = u'127.0.0.123'
+    request.context = AuthenticationComplete(profile, credentials, provider_name, provider_type)
+
+    request.login_perform = MagicMock(name='login_perform')
+    request.login_perform.return_value = {'status': True}
+    view = SocialLoginViews(request)
+    out = view()
+    assert out == {'status': True}
+    transaction.commit()
+
+    # read first new account
+    user = db_session.query(User).one()
+    assert user.is_active
+    assert user.provider_id('facebook') == profile['accounts'][0]['userid']
+
+
+def test_login_different_social_account(social_config, db_session, facebook_user):
+    """
+    Login with different social account than connected from same provider.
+
+    System should let user in, but not change connection.
+    """
+    # profile mock response
+    profile = {
+        # facebook user id is different than user's
+        'accounts': [{'domain': u'facebook.com', 'userid': u'2343'}],
+        'displayName': u'teddy',
+        'verifiedEmail': facebook_user.email,
+        'preferredUsername': u'teddy',
+        'emails': [{'value': u'aasd@bwwqwe.pl'}],
+        'name': u'ted'
+    }
+    request = testing.DummyRequest()
+    request.user = None
+    request.registry = social_config.registry
+    request.remote_addr = u'127.0.0.123'
+    request.context = AuthenticationComplete(
+        profile,
+        {'oauthAccessToken': '7897048593434'},
+        u'facebook',
+        u'facebook')
+
+    request.login_perform = MagicMock(name='login_perform')
+    request.login_perform.return_value = {'status': True}
+    view = SocialLoginViews(request)
+    out = view()
+    # user should be authenticated recognized by email!
+    assert out['status'] is True
+    assert facebook_user.provider_id('facebook') is not profile['accounts'][0]['userid']
+
+
+def test_login_social_connect(social_config, active_user, db_session):
+    """Connect and logs user in."""
+    user = db_session.merge(active_user)
+
+    profile = {
+        'accounts': [{'domain': u'facebook.com', 'userid': u'2343'}],
+        'displayName': u'teddy',
+        'preferredUsername': u'teddy',
+        'emails': [{'value': user.email}],
+        'name': u'ted'
+    }
+    credentials = {'oauthAccessToken': '7897048593434'}
+    provider_name = u'facebook'
+    provider_type = u'facebook'
+    user = None
+    request = testing.DummyRequest()
+    request.user = user
+    request.registry = social_config.registry
+    request.remote_addr = u'127.0.0.123'
+    request.context = AuthenticationComplete(profile, credentials, provider_name, provider_type)
+
+    request.login_perform = MagicMock(name='login_perform')
+    request.login_perform.return_value = {'status': True}
+    view = SocialLoginViews(request)
+    out = view()
+    assert out == {'status': True}
+
+
+def test_logged_social_connect_account(social_config, active_user, db_session):
+    """Connect facebook account to logged in user."""
+    user = db_session.merge(active_user)
+
+    profile = {
+        'accounts': [{'domain': u'facebook.com', 'userid': u'2343'}],
+        'displayName': u'teddy',
+        'preferredUsername': u'teddy',
+        'emails': [{'value': u'aasd@basd.pl'}],
+        'name': u'ted'
+    }
+    credentials = {'oauthAccessToken': '7897048593434'}
+    provider_name = u'facebook'
+    provider_type = u'facebook'
+    request = testing.DummyRequest()
+    request.user = user
+    request.registry = social_config.registry
+    request.remote_addr = u'127.0.0.123'
+    request.context = AuthenticationComplete(profile, credentials, provider_name, provider_type)
+    request._ = lambda msg, *args, **kwargs: msg
+
+    request.login_perform = MagicMock(name='login_perform')
+    request.login_perform.return_value = {'status': True}
+    view = SocialLoginViews(request)
+    out = view()
+    assert out['status'] is True
+
+    transaction.commit()
+    user = db_session.merge(user)
+    assert user.provider_id('facebook') == profile['accounts'][0]['userid']
+
+
+def test_logged_social_connect_self(social_config, facebook_user, db_session):
+    """Connect self."""
+    user = db_session.merge(facebook_user)
+
+    profile = {
+        'accounts': [{'domain': u'facebook.com', 'userid': user.provider_id('facebook')}],
+        'displayName': u'teddy',
+        'preferredUsername': u'teddy',
+        'emails': [{'value': user.email}],
+        'name': u'ted'
+    }
+    credentials = {'oauthAccessToken': '7897048593434'}
+    provider_name = u'facebook'
+    provider_type = u'facebook'
+    request = testing.DummyRequest()
+    request.user = user
+    request.registry = social_config.registry
+    request.remote_addr = u'127.0.0.123'
+    request.context = AuthenticationComplete(profile, credentials, provider_name, provider_type)
+    request._ = lambda msg, *args, **kwargs: msg
+
+    request.login_perform = MagicMock(name='login_perform')
+    request.login_perform.return_value = {'status': True}
+    view = SocialLoginViews(request)
+    out = view()
+    assert out['status'] is True
+
+    user = db_session.merge(facebook_user)
+    assert user.provider_id('facebook') == profile['accounts'][0]['userid']
+
+
+def test_logged_social_connect_second_account(social_config, facebook_user, db_session):
+    """Connect second facebook account to logged in user."""
+    user = db_session.merge(facebook_user)
+
+    # mock request
+    profile = {
+        'accounts': [{'domain': u'facebook.com', 'userid': u'2343'}],
+        'displayName': u'teddy',
+        'preferredUsername': u'teddy',
+        'emails': [{'value': u'aasd@basd.pl'}],
+        'name': u'ted'
+    }
+    credentials = {'oauthAccessToken': '7897048593434'}
+    provider_name = u'facebook'
+    provider_type = u'facebook'
+    request = testing.DummyRequest()
+    request.user = user
+    request.registry = social_config.registry
+    request.remote_addr = u'127.0.0.123'
+    request.context = AuthenticationComplete(profile, credentials, provider_name, provider_type)
+    request._ = lambda msg, *args, **kwargs: msg
+
+    request.login_perform = MagicMock(name='login_perform')
+    request.login_perform.return_value = {'status': True}
+    view = SocialLoginViews(request)
+    out = view()
+    # status should be false
+    assert out['status'] is False
+    assert out['msg'] == 'Your account is already connected to other ${provider} account.'
+    assert user.provider_id('facebook') is not profile['accounts'][0]['userid']
+
+
+def test_logged_social_connect_used_account(social_config, facebook_user, db_session):
+    """Try to connect facebook account to logged in user used by other user."""
+    # this user will be logged and trying to connect facebook's user account.
+    fresh_user = User(
+        email='new@user.pl',
+        password='somepassword',
+        address_ip='127.0.0.1')
+    db_session.add(fresh_user)
+    transaction.commit()
+    user = db_session.merge(facebook_user)
+    fresh_user = db_session.merge(fresh_user)
+
+    # mock request
+    profile = {
+        'accounts': [{'domain': u'facebook.com', 'userid': user.provider_id('facebook')}],
+        'displayName': u'teddy',
+        'preferredUsername': u'teddy',
+        'emails': [{'value': u'aasd@basd.pl'}],
+        'name': u'ted'
+    }
+    credentials = {'oauthAccessToken': '7897048593434'}
+    provider_name = u'facebook'
+    provider_type = u'facebook'
+    request = testing.DummyRequest()
+    request.user = fresh_user
+    request.registry = social_config.registry
+    request.remote_addr = u'127.0.0.123'
+    request.context = AuthenticationComplete(profile, credentials, provider_name, provider_type)
+    request._ = lambda msg, *args, **kwargs: msg
+
+    request.login_perform = MagicMock(name='login_perform')
+    request.login_perform.return_value = {'status': True}
+    # call!
+    view = SocialLoginViews(request)
+    out = view()
+    # status should be false
+    assert out['status'] is False
+    assert out['msg'] == 'This ${provider} account is already connected with other account.'
+    transaction.begin()
+    fresh_user = db_session.merge(fresh_user)
+    assert fresh_user.provider_id('facebook') is None

tests/views/test_logout.py

@@ -0,0 +1,42 @@
+"""Logout related tests."""
+import time
+
+from tests.tools import authenticate, is_user_logged
+
+
+def test_logout(active_user, extended_app):
+    """Check logout action."""
+    authenticate(extended_app)
+    assert is_user_logged(extended_app) is True
+
+    extended_app.get('/logout', status=302)
+    assert is_user_logged(extended_app) is False
+    res = extended_app.get('/secret', status=302)
+    assert res.status_code == 302
+
+
+def test_logout_login(active_user, extended_config, extended_app):
+    """Check logout action with configured logout redirection."""
+    extended_config.registry['config'].fullauth.redirects.logout = 'login'
+    authenticate(extended_app)
+    assert is_user_logged(extended_app) is True
+
+    res = extended_app.get('/logout', status=302)
+    assert is_user_logged(extended_app) is False
+    # redirection should be done to login page.
+    assert '/login' in res.location
+    res = extended_app.get('/secret', status=302)
+    assert res.status_code == 302
+
+
+def test_automatic_logout(active_user, short_config, short_app):
+    """Test automatic logout."""
+    timeout = short_config.registry['config']['fullauth']['AuthTkt']['timeout'] + 1
+
+    authenticate(short_app)
+    # Simulating inactivity
+    time.sleep(timeout)
+    res = short_app.get('/email/change')
+    assert res.headers['Location'] == 'http://localhost/login?after=%2Femail%2Fchange'
+    res = res.follow()
+    assert res.form

tests/views/test_register.py

@@ -0,0 +1,134 @@
+"""Registration related tests."""
+from HTMLParser import HTMLParser
+
+import pytest
+import transaction
+from sqlalchemy.orm.exc import NoResultFound
+
+from pyramid_fullauth.models import User
+from tests.tools import DEFAULT_USER
+
+
+def test_register_view(default_app):
+    """Display register form."""
+    res = default_app.get('/register')
+    assert res.form
+
+
+@pytest.mark.parametrize('email, password', (
+    # casual
+    (DEFAULT_USER['email'], DEFAULT_USER['password']),
+    # loooong password
+    (DEFAULT_USER['email'], DEFAULT_USER['password'] * 10000),
+))
+def test_register_success(db_session, default_app, email, password):
+    """Register user successfully."""
+    assert db_session.query(User).count() == 0
+
+    res = default_app.get('/register')
+    res.form['email'] = email
+    res.form['password'] = password
+    res.form['confirm_password'] = password
+    res = res.form.submit(extra_environ={'REMOTE_ADDR': '0.0.0.0'})
+    transaction.commit()
+
+    user = db_session.query(User).filter(User.email == email).one()
+
+    # User should not have active account at this moment
+    assert user.is_active is not None
+    assert user.check_password(password)
+
+
+def test_register_user_exists(db_session, user, default_app):
+    """Trying to register existing user."""
+    res = default_app.get('/register')
+    res.form['email'] = DEFAULT_USER['email']
+    res.form['password'] = DEFAULT_USER['password']
+    res.form['confirm_password'] = DEFAULT_USER['password']
+    res = res.form.submit(extra_environ={'REMOTE_ADDR': '0.0.0.0'})
+    transaction.commit()
+
+    assert 'User with given e-mail already exists' in res.body
+
+
+@pytest.mark.parametrize('email, password, confirm_password, error', (
+    # no email
+    (None, DEFAULT_USER['password'], DEFAULT_USER['password'],
+        'E-mail is empty'),
+    # empty email
+    ('', DEFAULT_USER['password'], DEFAULT_USER['password'],
+        'E-mail is empty'),
+    # not matching passwords
+    (DEFAULT_USER['email'], DEFAULT_USER['password'], DEFAULT_USER['password'] + 'Typo',
+        'Passwords don\'t match'),
+    # long, incorect email
+    (u'email' * 100 + '@wap.pl', DEFAULT_USER['password'], DEFAULT_USER['password'],
+        'Incorrect e-mail format'),
+    # too short password
+    (DEFAULT_USER['email'], '12', '12',
+        'Password is too short'),
+    # empty password
+    (DEFAULT_USER['email'], '', '', 'Please enter your password'),
+))
+def test_register_error(db_session, default_app, email, password, confirm_password, error):
+    """Error in registration process."""
+    assert db_session.query(User).count() == 0
+
+    res = default_app.get('/register')
+    if email is not None:
+        res.form['email'] = email
+    res.form['password'] = password
+    res.form['confirm_password'] = confirm_password
+    res = res.form.submit(extra_environ={'REMOTE_ADDR': '0.0.0.0'})
+    transaction.commit()
+
+    assert error in HTMLParser().unescape(res.body)
+    assert db_session.query(User).count() == 0
+
+
+def test_register_wrong_csrf(db_session, default_app):
+    """CSRF error during registration."""
+    assert db_session.query(User).count() == 0
+
+    res = default_app.get('/register')
+    res.form['email'] = DEFAULT_USER['email']
+    res.form['password'] = DEFAULT_USER['password']
+    res.form['confirm_password'] = DEFAULT_USER['password']
+    res.form['csrf_token'] = 'wrong_token'
+    res = res.form.submit(extra_environ={'REMOTE_ADDR': '0.0.0.0'},
+                          status=401)
+    transaction.commit()
+
+    assert db_session.query(User).count() == 0
+
+
+def test_no_pass_confirm(db_session, nopassconfirm_app):
+    """Register without password confirm option."""
+    assert db_session.query(User).count() == 0
+
+    res = nopassconfirm_app.get('/register')
+    res.form['email'] = DEFAULT_USER['email']
+    res.form['password'] = DEFAULT_USER['password']
+    res = res.form.submit(extra_environ={'REMOTE_ADDR': '0.0.0.0'})
+
+    assert 'Passwords don\'t match!' not in HTMLParser().unescape(res.body)
+    transaction.commit()
+
+    user = db_session.query(User).filter(User.email == DEFAULT_USER['email']).one()
+
+    # User should not have active account at this moment
+    assert user.is_active is not None
+    assert user.check_password(DEFAULT_USER['password'])
+
+
+def test_register_action_no_password_required(db_session, nopassregister_app):
+    """Register without password required."""
+    with pytest.raises(NoResultFound):
+        db_session.query(User).filter(User.email == DEFAULT_USER['email']).one()
+
+    res = nopassregister_app.get('/register')
+    res.form['email'] = DEFAULT_USER['email']
+    res = res.form.submit(extra_environ={'REMOTE_ADDR': '0.0.0.0'})
+    transaction.commit()
+
+    db_session.query(User).filter(User.email == DEFAULT_USER['email']).one()

tests/views/test_reset.py

@@ -0,0 +1,100 @@
+"""Reset password views."""
+from HTMLParser import HTMLParser
+import transaction
+
+from pyramid_fullauth.models import User
+
+NEW_PASSWORD = 'YouShallPass'
+
+
+def test_reset_view(default_app):
+    """Simple get test."""
+    res = default_app.get('/password/reset')
+    assert res.form
+
+
+def test_reset_action(user, db_session, default_app):
+    """Successful password reset request."""
+    user = db_session.merge(user)
+    assert user.reset_key is None
+
+    res = default_app.get('/password/reset')
+    res.form['email'] = user.email
+    res = res.form.submit()
+
+    transaction.commit()
+
+    user = db_session.query(User).filter(User.email == user.email).one()
+    assert user.reset_key is not None
+
+
+def test_reset_email_not_exists(user, db_session, default_app):
+    """Reset password request with wrong email (not in database)."""
+    user = db_session.merge(user)
+
+    res = default_app.get('/password/reset')
+    res.form['email'] = u'wrong@example.com'
+    res = res.form.submit()
+    assert 'Error! User does not exists' in res
+
+
+def test_reset_proceed(user, db_session, default_app):
+    """Actually change password."""
+    user = db_session.merge(user)
+    user.set_reset()
+    transaction.commit()
+
+    user = db_session.merge(user)
+    res = default_app.get('/password/reset/' + user.reset_key)
+    assert 'Recover your password - choose new password' in res
+
+    res.form['password'] = NEW_PASSWORD
+    res.form['confirm_password'] = NEW_PASSWORD
+    res = res.form.submit()
+
+    user = db_session.query(User).filter(User.email == user.email).one()
+    assert user.reset_key is None
+    assert user.check_password(NEW_PASSWORD) is True
+
+
+def test_reset_proceed_wrong_reset_key(user, db_session, default_app):
+    """Try changing password with wrong reset_key."""
+    user = db_session.merge(user)
+    user.set_reset()
+    transaction.commit()
+
+    user = db_session.merge(user)
+    res = default_app.get(
+        '/password/reset/' + user.reset_key + 'randomchars', status=404)
+    assert res.status_code == 404
+
+
+def test_reset_proceed_wrong_confirm(user, db_session, default_app):
+    """Reset test for reseting pasword with notmatched passwords."""
+    user = db_session.merge(user)
+    user.set_reset()
+    transaction.commit()
+
+    user = db_session.merge(user)
+    res = default_app.get('/password/reset/' + user.reset_key)
+
+    res.form['password'] = NEW_PASSWORD
+    res.form['confirm_password'] = NEW_PASSWORD + 'Typo'
+    res = res.form.submit()
+
+    assert 'Error! Password doesn\'t match' in HTMLParser().unescape(res.body)
+
+
+def test_reset_proceed_wrong_csrf(user, db_session, default_app):
+    """Reset test for reseting pasword with notmatched csrf."""
+    user = db_session.merge(user)
+    user.set_reset()
+    transaction.commit()
+
+    user = db_session.merge(user)
+    res = default_app.get('/password/reset/' + user.reset_key)
+
+    res.form['password'] = NEW_PASSWORD
+    res.form['confirm_password'] = NEW_PASSWORD
+    res.form['csrf_token'] = 'sadasere723612dassdgaSDs7a'
+    res.form.submit(status=401)