schemathesis 3.15.4__py3-none-any.whl → 4.4.2__py3-none-any.whl

schemathesis/config/_operations.py

@@ -0,0 +1,335 @@
+from __future__ import annotations
+
+import re
+from contextlib import contextmanager
+from dataclasses import dataclass
+from typing import TYPE_CHECKING, Any, Callable, Generator
+
+from schemathesis.config._auth import AuthConfig
+from schemathesis.config._checks import ChecksConfig
+from schemathesis.config._diff_base import DiffBase
+from schemathesis.config._env import resolve
+from schemathesis.config._error import ConfigError
+from schemathesis.config._generation import GenerationConfig
+from schemathesis.config._parameters import load_parameters
+from schemathesis.config._phases import PhasesConfig
+from schemathesis.config._rate_limit import build_limiter
+from schemathesis.config._warnings import WarningsConfig
+from schemathesis.core.errors import IncorrectUsage
+from schemathesis.filters import FilterSet, HasAPIOperation, expression_to_filter_function, is_deprecated
+
+if TYPE_CHECKING:
+    from pyrate_limiter import Limiter
+
+    from schemathesis.schemas import APIOperation
+
+FILTER_ATTRIBUTES = [
+    ("name", "name"),
+    ("method", "method"),
+    ("path", "path"),
+    ("tag", "tag"),
+    ("operation-id", "operation_id"),
+]
+
+
+@contextmanager
+def reraise_filter_error(attr: str) -> Generator:
+    try:
+        yield
+    except IncorrectUsage as exc:
+        if str(exc) == "Filter already exists":
+            raise ConfigError(
+                f"Filter for '{attr}' already exists. You can't simultaneously include and exclude the same thing."
+            ) from None
+        raise
+    except re.error as exc:
+        raise ConfigError(
+            f"Filter for '{attr}' contains an invalid regular expression: {exc.pattern!r}\n\n  {exc}"
+        ) from None
+
+
+@dataclass
+class OperationsConfig(DiffBase):
+    operations: list[OperationConfig]
+
+    __slots__ = ("operations",)
+
+    def __init__(self, *, operations: list[OperationConfig] | None = None):
+        self.operations = operations or []
+
+    def __repr__(self) -> str:
+        if self.operations:
+            return f"[{', '.join(DiffBase.__repr__(cfg) for cfg in self.operations)}]"
+        return "[]"
+
+    @classmethod
+    def from_hierarchy(cls, configs: list[OperationsConfig]) -> OperationsConfig:  # type: ignore[override]
+        return cls(operations=sum([config.operations for config in reversed(configs)], []))
+
+    def get_for_operation(self, operation: APIOperation) -> OperationConfig:
+        configs = [config for config in self.operations if config._filter_set.applies_to(operation)]
+        if not configs:
+            return OperationConfig()
+        return OperationConfig.from_hierarchy(configs)
+
+    def create_filter_set(
+        self,
+        *,
+        include_path: tuple[str, ...],
+        include_method: tuple[str, ...],
+        include_name: tuple[str, ...],
+        include_tag: tuple[str, ...],
+        include_operation_id: tuple[str, ...],
+        include_path_regex: str | None,
+        include_method_regex: str | None,
+        include_name_regex: str | None,
+        include_tag_regex: str | None,
+        include_operation_id_regex: str | None,
+        exclude_path: tuple[str, ...],
+        exclude_method: tuple[str, ...],
+        exclude_name: tuple[str, ...],
+        exclude_tag: tuple[str, ...],
+        exclude_operation_id: tuple[str, ...],
+        exclude_path_regex: str | None,
+        exclude_method_regex: str | None,
+        exclude_name_regex: str | None,
+        exclude_tag_regex: str | None,
+        exclude_operation_id_regex: str | None,
+        include_by: Callable | None,
+        exclude_by: Callable | None,
+        exclude_deprecated: bool,
+    ) -> FilterSet:
+        # Build explicit include filters
+        include_set = FilterSet()
+        if include_by:
+            include_set.include(include_by)
+        for name_ in include_name:
+            include_set.include(name=name_)
+        for method in include_method:
+            include_set.include(method=method)
+        for path in include_path:
+            include_set.include(path=path)
+        for tag in include_tag:
+            include_set.include(tag=tag)
+        for operation_id in include_operation_id:
+            include_set.include(operation_id=operation_id)
+        if (
+            include_name_regex
+            or include_method_regex
+            or include_path_regex
+            or include_tag_regex
+            or include_operation_id_regex
+        ):
+            include_set.include(
+                name_regex=include_name_regex,
+                method_regex=include_method_regex,
+                path_regex=include_path_regex,
+                tag_regex=include_tag_regex,
+                operation_id_regex=include_operation_id_regex,
+            )
+
+        # Build explicit exclude filters
+        exclude_set = FilterSet()
+        if exclude_by:
+            exclude_set.include(exclude_by)
+        for name_ in exclude_name:
+            exclude_set.include(name=name_)
+        for method in exclude_method:
+            exclude_set.include(method=method)
+        for path in exclude_path:
+            exclude_set.include(path=path)
+        for tag in exclude_tag:
+            exclude_set.include(tag=tag)
+        for operation_id in exclude_operation_id:
+            exclude_set.include(operation_id=operation_id)
+        if (
+            exclude_name_regex
+            or exclude_method_regex
+            or exclude_path_regex
+            or exclude_tag_regex
+            or exclude_operation_id_regex
+        ):
+            exclude_set.include(
+                name_regex=exclude_name_regex,
+                method_regex=exclude_method_regex,
+                path_regex=exclude_path_regex,
+                tag_regex=exclude_tag_regex,
+                operation_id_regex=exclude_operation_id_regex,
+            )
+
+        # Add deprecated operations to exclude filters if requested
+        if exclude_deprecated:
+            exclude_set.include(is_deprecated)
+
+        return self.filter_set_with(include=include_set, exclude=exclude_set)
+
+    def filter_set_with(self, include: FilterSet, exclude: FilterSet | None = None) -> FilterSet:
+        if not self.operations and exclude is None:
+            return include
+        operations = list(self.operations)
+
+        final = FilterSet()
+        exclude = exclude or FilterSet()
+
+        def priority_filter(ctx: HasAPIOperation) -> bool:
+            """Filter operations according to CLI and config priority."""
+            for op_config in operations:
+                if op_config._filter_set.match(ctx) and not op_config.enabled:
+                    return False
+
+            if not include.is_empty():
+                if exclude.is_empty():
+                    return include.match(ctx)
+                return include.match(ctx) and not exclude.match(ctx)
+            elif not exclude.is_empty():
+                return not exclude.match(ctx)
+
+            return True
+
+        # Add our priority function as the filter
+        final.include(priority_filter)
+
+        return final
+
+
+@dataclass
+class OperationConfig(DiffBase):
+    _filter_set: FilterSet
+    enabled: bool
+    headers: dict | None
+    proxy: str | None
+    continue_on_failure: bool | None
+    tls_verify: bool | str | None
+    rate_limit: Limiter | None
+    max_redirects: int | None
+    request_timeout: float | int | None
+    request_cert: str | None
+    request_cert_key: str | None
+    parameters: dict[str, Any]
+    warnings: WarningsConfig | None
+    auth: AuthConfig
+    checks: ChecksConfig
+    phases: PhasesConfig
+    generation: GenerationConfig
+
+    __slots__ = (
+        "_filter_set",
+        "enabled",
+        "headers",
+        "proxy",
+        "continue_on_failure",
+        "tls_verify",
+        "rate_limit",
+        "_rate_limit",
+        "max_redirects",
+        "request_timeout",
+        "request_cert",
+        "request_cert_key",
+        "parameters",
+        "warnings",
+        "auth",
+        "checks",
+        "phases",
+        "generation",
+    )
+
+    def __init__(
+        self,
+        *,
+        filter_set: FilterSet | None = None,
+        enabled: bool = True,
+        headers: dict | None = None,
+        proxy: str | None = None,
+        continue_on_failure: bool | None = None,
+        tls_verify: bool | str | None = None,
+        rate_limit: str | None = None,
+        max_redirects: int | None = None,
+        request_timeout: float | int | None = None,
+        request_cert: str | None = None,
+        request_cert_key: str | None = None,
+        parameters: dict[str, Any] | None = None,
+        warnings: WarningsConfig | None = None,
+        auth: AuthConfig | None = None,
+        checks: ChecksConfig | None = None,
+        phases: PhasesConfig | None = None,
+        generation: GenerationConfig | None = None,
+    ) -> None:
+        self._filter_set = filter_set or FilterSet()
+        self.enabled = enabled
+        self.headers = headers
+        self.proxy = proxy
+        self.continue_on_failure = continue_on_failure
+        self.tls_verify = tls_verify
+        if rate_limit is not None:
+            self.rate_limit = build_limiter(rate_limit)
+        else:
+            self.rate_limit = rate_limit
+        self._rate_limit = rate_limit
+        self.max_redirects = max_redirects
+        self.request_timeout = request_timeout
+        self.request_cert = request_cert
+        self.request_cert_key = request_cert_key
+        self.parameters = parameters or {}
+        self.warnings = warnings
+        self.auth = auth or AuthConfig()
+        self.checks = checks or ChecksConfig()
+        self.phases = phases or PhasesConfig()
+        self.generation = generation or GenerationConfig()
+
+    @classmethod
+    def from_dict(cls, data: dict[str, Any]) -> OperationConfig:
+        filter_set = FilterSet()
+        seen = set()
+        for key_suffix, arg_suffix in (("", ""), ("-regex", "_regex")):
+            for attr, arg_name in FILTER_ATTRIBUTES:
+                key = f"include-{attr}{key_suffix}"
+                if key in data:
+                    seen.add(key)
+                    with reraise_filter_error(attr):
+                        filter_set.include(**{f"{arg_name}{arg_suffix}": data[key]})
+                key = f"exclude-{attr}{key_suffix}"
+                if key in data:
+                    seen.add(key)
+                    with reraise_filter_error(attr):
+                        filter_set.exclude(**{f"{arg_name}{arg_suffix}": data[key]})
+        for key, method in (("include-by", filter_set.include), ("exclude-by", filter_set.exclude)):
+            if key in data:
+                seen.add(key)
+                expression = data[key]
+                try:
+                    func = expression_to_filter_function(expression)
+                    method(func)
+                except ValueError:
+                    raise ConfigError(f"Invalid filter expression: '{expression}'") from None
+        if not set(data) - seen:
+            raise ConfigError("Operation filters defined, but no settings are being overridden")
+
+        warnings_value = data.get("warnings")
+        # If warnings is True or None, keep it as None to inherit from project level
+        # Only create a WarningsConfig if it's False or a specific list/dict
+        if warnings_value is True or warnings_value is None:
+            warnings = None
+        else:
+            warnings = WarningsConfig.from_value(warnings_value)
+
+        return cls(
+            filter_set=filter_set,
+            enabled=data.get("enabled", True),
+            headers={resolve(key): resolve(value) for key, value in data.get("headers", {}).items()}
+            if "headers" in data
+            else None,
+            proxy=resolve(data.get("proxy")),
+            continue_on_failure=data.get("continue-on-failure", None),
+            tls_verify=resolve(data.get("tls-verify")),
+            rate_limit=resolve(data.get("rate-limit")),
+            max_redirects=data.get("max-redirects"),
+            request_timeout=data.get("request-timeout"),
+            request_cert=resolve(data.get("request-cert")),
+            request_cert_key=resolve(data.get("request-cert-key")),
+            parameters=load_parameters(data),
+            warnings=warnings,
+            auth=AuthConfig.from_dict(data.get("auth", {})),
+            checks=ChecksConfig.from_dict(data.get("checks", {})),
+            phases=PhasesConfig.from_dict(data.get("phases", {})),
+            generation=GenerationConfig.from_dict(data.get("generation", {})),
+        )

schemathesis/config/_output.py

@@ -0,0 +1,171 @@
+from __future__ import annotations
+
+from dataclasses import dataclass
+from typing import Any
+
+from schemathesis.config._diff_base import DiffBase
+
+# Exact keys to sanitize
+DEFAULT_KEYS_TO_SANITIZE = [
+    "phpsessid",
+    "xsrf-token",
+    "_csrf",
+    "_csrf_token",
+    "_session",
+    "_xsrf",
+    "aiohttp_session",
+    "api_key",
+    "api-key",
+    "apikey",
+    "auth",
+    "authorization",
+    "connect.sid",
+    "cookie",
+    "credentials",
+    "csrf",
+    "csrf_token",
+    "csrf-token",
+    "csrftoken",
+    "ip_address",
+    "mysql_pwd",
+    "passwd",
+    "password",
+    "private_key",
+    "private-key",
+    "privatekey",
+    "remote_addr",
+    "remote-addr",
+    "secret",
+    "session",
+    "sessionid",
+    "set_cookie",
+    "set-cookie",
+    "token",
+    "x_api_key",
+    "x-api-key",
+    "x_csrftoken",
+    "x-csrftoken",
+    "x_forwarded_for",
+    "x-forwarded-for",
+    "x_real_ip",
+    "x-real-ip",
+]
+
+# Markers indicating potentially sensitive keys
+DEFAULT_SENSITIVE_MARKERS = [
+    "token",
+    "key",
+    "secret",
+    "password",
+    "auth",
+    "session",
+    "passwd",
+    "credential",
+]
+
+DEFAULT_REPLACEMENT = "[Filtered]"
+
+
+@dataclass(repr=False)
+class SanitizationConfig(DiffBase):
+    """Configuration for sanitizing sensitive data."""
+
+    enabled: bool
+    keys_to_sanitize: list[str]
+    sensitive_markers: list[str]
+    replacement: str
+
+    __slots__ = ("enabled", "keys_to_sanitize", "sensitive_markers", "replacement")
+
+    def __init__(
+        self,
+        *,
+        enabled: bool = True,
+        keys_to_sanitize: list[str] | None = None,
+        sensitive_markers: list[str] | None = None,
+        replacement: str | None = None,
+    ) -> None:
+        self.enabled = enabled
+        self.keys_to_sanitize = keys_to_sanitize or DEFAULT_KEYS_TO_SANITIZE
+        self.sensitive_markers = sensitive_markers or DEFAULT_SENSITIVE_MARKERS
+        self.replacement = replacement or DEFAULT_REPLACEMENT
+
+    @classmethod
+    def from_dict(cls, data: dict[str, Any]) -> SanitizationConfig:
+        return cls(
+            enabled=data.get("enabled", True),
+            keys_to_sanitize=[k.lower() for k in data.get("keys-to-sanitize", [])] or DEFAULT_KEYS_TO_SANITIZE,
+            sensitive_markers=[m.lower() for m in data.get("sensitive-markers", [])] or DEFAULT_SENSITIVE_MARKERS,
+            replacement=data.get("replacement", DEFAULT_REPLACEMENT),
+        )
+
+    def update(self, *, enabled: bool | None = None) -> None:
+        if enabled is not None:
+            self.enabled = enabled
+
+
+MAX_PAYLOAD_SIZE = 512
+MAX_LINES = 10
+MAX_WIDTH = 80
+
+
+@dataclass(repr=False)
+class TruncationConfig(DiffBase):
+    """Configuration for truncating large output."""
+
+    enabled: bool
+    max_payload_size: int
+    max_lines: int
+    max_width: int
+
+    __slots__ = ("enabled", "max_payload_size", "max_lines", "max_width")
+
+    def __init__(
+        self,
+        *,
+        enabled: bool = True,
+        max_payload_size: int = MAX_PAYLOAD_SIZE,
+        max_lines: int = MAX_LINES,
+        max_width: int = MAX_WIDTH,
+    ) -> None:
+        self.enabled = enabled
+        self.max_payload_size = max_payload_size
+        self.max_lines = max_lines
+        self.max_width = max_width
+
+    @classmethod
+    def from_dict(cls, data: dict[str, Any]) -> TruncationConfig:
+        return cls(
+            enabled=data.get("enabled", True),
+            max_payload_size=data.get("max-payload-size", MAX_PAYLOAD_SIZE),
+            max_lines=data.get("max-lines", MAX_LINES),
+            max_width=data.get("max-width", MAX_WIDTH),
+        )
+
+    def update(self, *, enabled: bool | None = None) -> None:
+        if enabled is not None:
+            self.enabled = enabled
+
+
+@dataclass(repr=False)
+class OutputConfig(DiffBase):
+    sanitization: SanitizationConfig
+    truncation: TruncationConfig
+
+    __slots__ = ("sanitization", "truncation")
+
+    def __init__(
+        self,
+        *,
+        sanitization: SanitizationConfig | None = None,
+        truncation: TruncationConfig | None = None,
+    ) -> None:
+        self.sanitization = sanitization or SanitizationConfig()
+        self.truncation = truncation or TruncationConfig()
+
+    @classmethod
+    def from_dict(cls, data: dict[str, Any]) -> OutputConfig:
+        return cls(
+            sanitization=SanitizationConfig.from_dict(data.get("sanitization", {})),
+            truncation=TruncationConfig.from_dict(data.get("truncation", {})),
+        )

schemathesis/config/_parameters.py

@@ -0,0 +1,19 @@
+from __future__ import annotations
+
+from typing import Any, Literal
+
+from schemathesis.config._env import resolve
+
+# Define valid parameter locations from OpenAPI
+ParameterLocation = Literal["path", "query", "header", "cookie", "body"]
+VALID_LOCATIONS: list[ParameterLocation] = ["path", "query", "header", "cookie", "body"]
+
+
+def load_parameters(data: dict[str, Any]) -> dict[str, Any]:
+    parameters = {}
+    for key, value in data.get("parameters", {}).items():
+        if isinstance(value, str):
+            parameters[key] = resolve(value)
+        else:
+            parameters[key] = value
+    return parameters