pyramid-fullauth 0.3.2__py2.7.egg → 0.5.0__py2.7.egg

tests/views/test_login.py

@@ -1,5 +1,7 @@
 """Log in related test."""
 import pytest
+import transaction
+
 from tests.tools import authenticate, is_user_logged, DEFAULT_USER
 
 
@@ -23,7 +25,11 @@ def test_login_view_secret(extended_app):
     assert 'email' in res.form.fields
 
 
-def test_login(active_user, extended_app):
+@pytest.mark.parametrize('email', (
+    DEFAULT_USER['email'].lower(),
+    DEFAULT_USER['email'].upper()
+))
+def test_login_ok(active_user, extended_app, email):
     """Actually log in test."""
     res = extended_app.get('/secret', status=302)
     res = res.follow()
@@ -31,7 +37,7 @@ def test_login(active_user, extended_app):
 
     assert is_user_logged(extended_app) is False
 
-    res = authenticate(extended_app)
+    res = authenticate(extended_app, email=email)
     assert 'Max-Age=' not in str(res)
 
     assert is_user_logged(extended_app) is True
@@ -149,3 +155,18 @@ def test_default_login_redirectaway(active_user, authable_app):
     authenticate(authable_app)
     res = authable_app.get('/login', status=303)
     assert res.location == 'http://localhost/'
+
+
+def test_login_invalid_cookie(db_session, active_user, extended_app):
+    """Test access login page by deleted user."""
+    res = authenticate(extended_app)
+    assert 'Max-Age=' not in str(res)
+
+    assert is_user_logged(extended_app) is True
+
+    db_session.delete(active_user)
+    transaction.commit()
+
+    # will rise Attribute error
+    res = extended_app.get('/login')
+    assert res.status_code == 200, "Should stay since user is no longer valid!"

tests/views/test_login_social.py

@@ -1,43 +1,54 @@
 """Social network login test."""
 import transaction
 from pyramid import testing
-from velruse import AuthenticationComplete
+from pyramid.compat import text_type
 from mock import MagicMock
 
+from velruse import AuthenticationComplete
 from pyramid_fullauth.views.social import SocialLoginViews
+
 from pyramid_fullauth.models import User
+from pyramid_fullauth.compat import urlparse, parse_qs
+
+from tests.views.conftest import mock_translate
 
 
 def test_social_login_link(social_app):
     """Login:Form displayed social form."""
     res = social_app.get('/login')
-    assert ('Connect with facebook</a>' in res.body)
+    assert ('Connect with facebook</a>' in res.body.decode('unicode_escape'))
 
 
 def test_social_click_link(social_app):
     """Click social login link."""
     res = social_app.get('/login/facebook?scope=email%2Coffline_access', status=302)
-    assert (res.headers['Location'].startswith(
-        'https://www.facebook.com/dialog/oauth/?scope=email%2Coffline_access&state='))
+    redirect = urlparse(res.headers['Location'])
+    query = parse_qs(redirect.query)
+    assert redirect.netloc == 'www.facebook.com', "We should redirect user to facebook"
+    assert redirect.path == '/dialog/oauth/', "Path should be oauth"
+    assert 'redirect_uri' in query
+    assert 'scope' in query
+    assert query['redirect_uri'] == ['http://localhost/login/facebook/callback']
+    assert query['scope'] == ['email,offline_access']
 
 
 def test_social_login_register(social_config, db_session):
     """Register fresh user and logs him in."""
     profile = {
-        'accounts': [{'domain': u'facebook.com', 'userid': u'2343'}],
-        'displayName': u'teddy',
-        'verifiedEmail': u'we@po.pl',
-        'preferredUsername': u'teddy',
-        'emails': [{'value': u'aasd@bwwqwe.pl'}],
-        'name': u'ted'
+        'accounts': [{'domain': text_type('facebook.com'), 'userid': text_type('2343')}],
+        'displayName': text_type('teddy'),
+        'verifiedEmail': text_type('we@po.pl'),
+        'preferredUsername': text_type('teddy'),
+        'emails': [{'value': text_type('aasd@bwwqwe.pl')}],
+        'name': text_type('ted')
     }
     credentials = {'oauthAccessToken': '7897048593434'}
-    provider_name = u'facebook'
-    provider_type = u'facebook'
+    provider_name = text_type('facebook')
+    provider_type = text_type('facebook')
     request = testing.DummyRequest()
     request.user = None
     request.registry = social_config.registry
-    request.remote_addr = u'127.0.0.123'
+    request.remote_addr = text_type('127.0.0.123')
     request.context = AuthenticationComplete(profile, credentials, provider_name, provider_type)
 
     request.login_perform = MagicMock(name='login_perform')
@@ -62,22 +73,22 @@ def test_login_different_social_account(social_config, db_session, facebook_user
     # profile mock response
     profile = {
         # facebook user id is different than user's
-        'accounts': [{'domain': u'facebook.com', 'userid': u'2343'}],
-        'displayName': u'teddy',
+        'accounts': [{'domain': text_type('facebook.com'), 'userid': text_type('2343')}],
+        'displayName': text_type('teddy'),
         'verifiedEmail': facebook_user.email,
-        'preferredUsername': u'teddy',
-        'emails': [{'value': u'aasd@bwwqwe.pl'}],
-        'name': u'ted'
+        'preferredUsername': text_type('teddy'),
+        'emails': [{'value': text_type('aasd@bwwqwe.pl')}],
+        'name': text_type('ted')
     }
     request = testing.DummyRequest()
     request.user = None
     request.registry = social_config.registry
-    request.remote_addr = u'127.0.0.123'
+    request.remote_addr = text_type('127.0.0.123')
     request.context = AuthenticationComplete(
         profile,
         {'oauthAccessToken': '7897048593434'},
-        u'facebook',
-        u'facebook')
+        text_type('facebook'),
+        text_type('facebook'))
 
     request.login_perform = MagicMock(name='login_perform')
     request.login_perform.return_value = {'status': True}
@@ -93,20 +104,20 @@ def test_login_social_connect(social_config, active_user, db_session):
     user = db_session.merge(active_user)
 
     profile = {
-        'accounts': [{'domain': u'facebook.com', 'userid': u'2343'}],
-        'displayName': u'teddy',
-        'preferredUsername': u'teddy',
+        'accounts': [{'domain': text_type('facebook.com'), 'userid': text_type('2343')}],
+        'displayName': text_type('teddy'),
+        'preferredUsername': text_type('teddy'),
         'emails': [{'value': user.email}],
-        'name': u'ted'
+        'name': text_type('ted')
     }
     credentials = {'oauthAccessToken': '7897048593434'}
-    provider_name = u'facebook'
-    provider_type = u'facebook'
+    provider_name = text_type('facebook')
+    provider_type = text_type('facebook')
     user = None
     request = testing.DummyRequest()
     request.user = user
     request.registry = social_config.registry
-    request.remote_addr = u'127.0.0.123'
+    request.remote_addr = text_type('127.0.0.123')
     request.context = AuthenticationComplete(profile, credentials, provider_name, provider_type)
 
     request.login_perform = MagicMock(name='login_perform')
@@ -121,21 +132,21 @@ def test_logged_social_connect_account(social_config, active_user, db_session):
     user = db_session.merge(active_user)
 
     profile = {
-        'accounts': [{'domain': u'facebook.com', 'userid': u'2343'}],
-        'displayName': u'teddy',
-        'preferredUsername': u'teddy',
-        'emails': [{'value': u'aasd@basd.pl'}],
-        'name': u'ted'
+        'accounts': [{'domain': text_type('facebook.com'), 'userid': text_type('2343')}],
+        'displayName': text_type('teddy'),
+        'preferredUsername': text_type('teddy'),
+        'emails': [{'value': text_type('aasd@basd.pl')}],
+        'name': text_type('ted')
     }
     credentials = {'oauthAccessToken': '7897048593434'}
-    provider_name = u'facebook'
-    provider_type = u'facebook'
+    provider_name = text_type('facebook')
+    provider_type = text_type('facebook')
     request = testing.DummyRequest()
     request.user = user
     request.registry = social_config.registry
-    request.remote_addr = u'127.0.0.123'
+    request.remote_addr = text_type('127.0.0.123')
     request.context = AuthenticationComplete(profile, credentials, provider_name, provider_type)
-    request._ = lambda msg, *args, **kwargs: msg
+    request._ = mock_translate
 
     request.login_perform = MagicMock(name='login_perform')
     request.login_perform.return_value = {'status': True}
@@ -153,21 +164,26 @@ def test_logged_social_connect_self(social_config, facebook_user, db_session):
     user = db_session.merge(facebook_user)
 
     profile = {
-        'accounts': [{'domain': u'facebook.com', 'userid': user.provider_id('facebook')}],
-        'displayName': u'teddy',
-        'preferredUsername': u'teddy',
-        'emails': [{'value': user.email}],
-        'name': u'ted'
+        'accounts': [{'domain': text_type('facebook.com'), 'userid': user.provider_id('facebook')}],
+        'displayName':
+        text_type('teddy'),
+        'preferredUsername':
+        text_type('teddy'),
+        'emails':
+        [{'value': user.email}],
+        'name':
+        text_type('ted')
     }
-    credentials = {'oauthAccessToken': '7897048593434'}
-    provider_name = u'facebook'
-    provider_type = u'facebook'
+    credentials = {'oauthAccessToken':
+                   '7897048593434'}
+    provider_name = text_type('facebook')
+    provider_type = text_type('facebook')
     request = testing.DummyRequest()
     request.user = user
     request.registry = social_config.registry
-    request.remote_addr = u'127.0.0.123'
+    request.remote_addr = text_type('127.0.0.123')
     request.context = AuthenticationComplete(profile, credentials, provider_name, provider_type)
-    request._ = lambda msg, *args, **kwargs: msg
+    request._ = mock_translate
 
     request.login_perform = MagicMock(name='login_perform')
     request.login_perform.return_value = {'status': True}
@@ -185,21 +201,27 @@ def test_logged_social_connect_second_account(social_config, facebook_user, db_s
 
     # mock request
     profile = {
-        'accounts': [{'domain': u'facebook.com', 'userid': u'2343'}],
-        'displayName': u'teddy',
-        'preferredUsername': u'teddy',
-        'emails': [{'value': u'aasd@basd.pl'}],
-        'name': u'ted'
+        'accounts':
+        [{'domain': text_type('facebook.com'), 'userid': text_type('2343')}],
+        'displayName':
+        text_type('teddy'),
+        'preferredUsername':
+        text_type('teddy'),
+        'emails':
+        [{'value': text_type('aasd@basd.pl')}],
+        'name':
+        text_type('ted')
     }
-    credentials = {'oauthAccessToken': '7897048593434'}
-    provider_name = u'facebook'
-    provider_type = u'facebook'
+    credentials = {'oauthAccessToken':
+                   '7897048593434'}
+    provider_name = text_type('facebook')
+    provider_type = text_type('facebook')
     request = testing.DummyRequest()
     request.user = user
     request.registry = social_config.registry
-    request.remote_addr = u'127.0.0.123'
+    request.remote_addr = text_type('127.0.0.123')
     request.context = AuthenticationComplete(profile, credentials, provider_name, provider_type)
-    request._ = lambda msg, *args, **kwargs: msg
+    request._ = mock_translate
 
     request.login_perform = MagicMock(name='login_perform')
     request.login_perform.return_value = {'status': True}
@@ -215,9 +237,10 @@ def test_logged_social_connect_used_account(social_config, facebook_user, db_ses
     """Try to connect facebook account to logged in user used by other user."""
     # this user will be logged and trying to connect facebook's user account.
     fresh_user = User(
-        email='new@user.pl',
-        password='somepassword',
-        address_ip='127.0.0.1')
+        email=text_type('new@user.pl'),
+        password=text_type('somepassword'),
+        address_ip=text_type('127.0.0.1')
+    )
     db_session.add(fresh_user)
     transaction.commit()
     user = db_session.merge(facebook_user)
@@ -225,21 +248,26 @@ def test_logged_social_connect_used_account(social_config, facebook_user, db_ses
 
     # mock request
     profile = {
-        'accounts': [{'domain': u'facebook.com', 'userid': user.provider_id('facebook')}],
-        'displayName': u'teddy',
-        'preferredUsername': u'teddy',
-        'emails': [{'value': u'aasd@basd.pl'}],
-        'name': u'ted'
+        'accounts':
+        [{'domain': text_type('facebook.com'), 'userid': user.provider_id('facebook')}],
+        'displayName':
+        text_type('teddy'),
+        'preferredUsername':
+        text_type('teddy'),
+        'emails':
+        [{'value': text_type('aasd@basd.pl')}],
+        'name':
+        text_type('ted')
     }
     credentials = {'oauthAccessToken': '7897048593434'}
-    provider_name = u'facebook'
-    provider_type = u'facebook'
+    provider_name = text_type('facebook')
+    provider_type = text_type('facebook')
     request = testing.DummyRequest()
     request.user = fresh_user
     request.registry = social_config.registry
-    request.remote_addr = u'127.0.0.123'
+    request.remote_addr = text_type('127.0.0.123')
     request.context = AuthenticationComplete(profile, credentials, provider_name, provider_type)
-    request._ = lambda msg, *args, **kwargs: msg
+    request._ = mock_translate
 
     request.login_perform = MagicMock(name='login_perform')
     request.login_perform.return_value = {'status': True}

tests/views/test_register.py

@@ -1,8 +1,12 @@
 """Registration related tests."""
-from HTMLParser import HTMLParser
+try:
+    from HTMLParser import HTMLParser
+except ImportError:
+    from html.parser import HTMLParser
 
 import pytest
 import transaction
+from pyramid.compat import text_type
 from sqlalchemy.orm.exc import NoResultFound
 
 from pyramid_fullauth.models import User
@@ -48,7 +52,7 @@ def test_register_user_exists(db_session, user, default_app):
     res = res.form.submit(extra_environ={'REMOTE_ADDR': '0.0.0.0'})
     transaction.commit()
 
-    assert 'User with given e-mail already exists' in res.body
+    assert 'User with given e-mail already exists' in res.body.decode('unicode_escape')
 
 
 @pytest.mark.parametrize('email, password, confirm_password, error', (
@@ -62,7 +66,7 @@ def test_register_user_exists(db_session, user, default_app):
     (DEFAULT_USER['email'], DEFAULT_USER['password'], DEFAULT_USER['password'] + 'Typo',
         'Passwords don\'t match'),
     # long, incorect email
-    (u'email' * 100 + '@wap.pl', DEFAULT_USER['password'], DEFAULT_USER['password'],
+    (text_type('email') * 100 + text_type('@wap.pl'), DEFAULT_USER['password'], DEFAULT_USER['password'],
         'Incorrect e-mail format'),
     # too short password
     (DEFAULT_USER['email'], '12', '12',
@@ -82,7 +86,7 @@ def test_register_error(db_session, default_app, email, password, confirm_passwo
     res = res.form.submit(extra_environ={'REMOTE_ADDR': '0.0.0.0'})
     transaction.commit()
 
-    assert error in HTMLParser().unescape(res.body)
+    assert error in HTMLParser().unescape(res.body.decode('unicode_escape'))
     assert db_session.query(User).count() == 0
 
 
@@ -111,7 +115,7 @@ def test_no_pass_confirm(db_session, nopassconfirm_app):
     res.form['password'] = DEFAULT_USER['password']
     res = res.form.submit(extra_environ={'REMOTE_ADDR': '0.0.0.0'})
 
-    assert 'Passwords don\'t match!' not in HTMLParser().unescape(res.body)
+    assert 'Passwords don\'t match!' not in HTMLParser().unescape(res.body.decode('unicode_escape'))
     transaction.commit()
 
     user = db_session.query(User).filter(User.email == DEFAULT_USER['email']).one()

tests/views/test_reset.py

@@ -1,6 +1,11 @@
 """Reset password views."""
-from HTMLParser import HTMLParser
+try:
+    from HTMLParser import HTMLParser
+except ImportError:
+    from html.parser import HTMLParser
+
 import transaction
+from pyramid.compat import text_type
 
 from pyramid_fullauth.models import User
 
@@ -33,9 +38,9 @@ def test_reset_email_not_exists(user, db_session, default_app):
     user = db_session.merge(user)
 
     res = default_app.get('/password/reset')
-    res.form['email'] = u'wrong@example.com'
+    res.form['email'] = text_type('wrong@example.com')
     res = res.form.submit()
-    assert 'Error! User does not exists' in res
+    assert 'Error! User does not exist' in res
 
 
 def test_reset_proceed(user, db_session, default_app):
@@ -82,7 +87,7 @@ def test_reset_proceed_wrong_confirm(user, db_session, default_app):
     res.form['confirm_password'] = NEW_PASSWORD + 'Typo'
     res = res.form.submit()
 
-    assert 'Error! Password doesn\'t match' in HTMLParser().unescape(res.body)
+    assert 'Error! Password doesn\'t match' in HTMLParser().unescape(res.body.decode('unicode_escape'))
 
 
 def test_reset_proceed_wrong_csrf(user, db_session, default_app):