schemathesis 3.34.0__py3-none-any.whl → 3.34.2__py3-none-any.whl

schemathesis/specs/openapi/checks.py

@@ -3,7 +3,7 @@ from __future__ import annotations
 from dataclasses import dataclass
 from http.cookies import SimpleCookie
 from typing import TYPE_CHECKING, Any, Dict, Generator, NoReturn, cast
-from urllib.parse import parse_qs, urlencode, urlparse, urlunparse
+from urllib.parse import parse_qs, urlparse
 
 from ... import failures
 from ...exceptions import (
@@ -150,15 +150,17 @@ def response_headers_conformance(response: GenericResponse, case: Case) -> bool
     for name, definition in defined_headers.items():
         value = response.headers.get(name)
         if value is not None:
-            parameter_definition = {"in": "header", **definition}
-            parameter: OpenAPI20Parameter | OpenAPI30Parameter
-            if isinstance(case.operation.schema, OpenApi30):
-                parameter = OpenAPI30Parameter(parameter_definition)
-            else:
-                parameter = OpenAPI20Parameter(parameter_definition)
-            schema = parameter.as_json_schema(case.operation)
-            coerced = _coerce_header_value(value, schema)
             with case.operation.schema._validating_response(scopes) as resolver:
+                if "$ref" in definition:
+                    _, definition = resolver.resolve(definition["$ref"])
+                parameter_definition = {"in": "header", **definition}
+                parameter: OpenAPI20Parameter | OpenAPI30Parameter
+                if isinstance(case.operation.schema, OpenApi30):
+                    parameter = OpenAPI30Parameter(parameter_definition)
+                else:
+                    parameter = OpenAPI20Parameter(parameter_definition)
+                schema = parameter.as_json_schema(case.operation)
+                coerced = _coerce_header_value(value, schema)
                 try:
                     jsonschema.validate(
                         coerced,
@@ -332,8 +334,6 @@ def ensure_resource_availability(response: GenericResponse, original: Case) -> b
 
 def ignored_auth(response: GenericResponse, case: Case) -> bool | None:
     """Check if an operation declares authentication as a requirement but does not actually enforce it."""
-    from requests import Session
-
     from .schemas import BaseOpenAPISchema
 
     if not isinstance(case.operation.schema, BaseOpenAPISchema):
@@ -344,14 +344,15 @@ def ignored_auth(response: GenericResponse, case: Case) -> bool | None:
     if security_parameters and 200 <= response.status_code < 300:
         if _contains_auth(response.request, security_parameters):
             # If there is auth in the request, then drop it and retry the call
-            request = _remove_auth_from_request(response.request, security_parameters)
-            response.request = request
-            new_response = Session().send(request)
-            if new_response.ok:
+            _remove_auth_from_case(case, security_parameters)
+            new_response = case.operation.schema.transport.send(case)
+            if 200 <= new_response.status_code < 300:
                 # Mutate the response object in place on the best effort basis
-                for attribute in new_response.__attrs__:
-                    setattr(response, attribute, getattr(new_response, attribute))
-                _remove_auth_from_case(case, security_parameters)
+                if hasattr(response, "__attrs__"):
+                    for attribute in new_response.__attrs__:
+                        setattr(response, attribute, getattr(new_response, attribute))
+                else:
+                    response.__dict__.update(new_response.__dict__)
                 _raise_auth_error(new_response, case.operation.verbose_name)
         else:
             # Successful response when there is no auth
@@ -415,40 +416,6 @@ def _contains_auth(request: PreparedRequest, security_parameters: list[SecurityP
     return False
 
 
-def _remove_auth_from_request(
-    request: PreparedRequest, security_parameters: list[SecurityParameter]
-) -> PreparedRequest:
-    """Remove security parameters from a request."""
-    from requests.cookies import get_cookie_header
-
-    request = request.copy()
-    parsed = urlparse(request.url)
-    query = parse_qs(parsed.query)  # type: ignore
-    should_replace_url = False
-
-    for parameter in security_parameters:
-        name = parameter["name"]
-        if parameter["in"] == "header":
-            request.headers.pop(name, None)
-        if parameter["in"] == "query":
-            query.pop(name, None)
-            should_replace_url = True
-        if parameter["in"] == "cookie":
-            del request._cookies[name]  # type: ignore
-
-    if should_replace_url:
-        components = [parsed.scheme, parsed.netloc, parsed.path, parsed.params, urlencode(query), parsed.fragment]
-        url = cast(str, urlunparse(components))  # type: ignore
-        request.url = url
-    # Re-generate the `Cookie` header if needed
-    raw_cookie = request.headers.pop("Cookie", None)
-    if raw_cookie is not None:
-        new_cookie_header = get_cookie_header(request._cookies, request)  # type: ignore
-        if new_cookie_header:
-            request.headers["Cookie"] = new_cookie_header
-    return request
-
-
 def _remove_auth_from_case(case: Case, security_parameters: list[SecurityParameter]) -> None:
     """Remove security parameters from a generated case.
 

schemathesis/transports/__init__.py

@@ -192,6 +192,7 @@ class RequestsTransport:
                 context=failures.RequestTimeout(message=message, timeout=timeout),
             ) from None
         response.verify = verify  # type: ignore[attr-defined]
+        response._session = session  # type: ignore[attr-defined]
         if close_session:
             session.close()
         return response

{schemathesis-3.34.0.dist-info → schemathesis-3.34.2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: schemathesis
-Version: 3.34.0
+Version: 3.34.2
 Summary: Property-based testing framework for Open API and GraphQL based apps
 Project-URL: Documentation, https://schemathesis.readthedocs.io/en/stable/
 Project-URL: Changelog, https://schemathesis.readthedocs.io/en/stable/changelog.html

{schemathesis-3.34.0.dist-info → schemathesis-3.34.2.dist-info}/RECORD

@@ -100,7 +100,7 @@ schemathesis/specs/graphql/validation.py,sha256=uINIOt-2E7ZuQV2CxKzwez-7L9tDtqzM
 schemathesis/specs/openapi/__init__.py,sha256=HDcx3bqpa6qWPpyMrxAbM3uTo0Lqpg-BUNZhDJSJKnw,279
 schemathesis/specs/openapi/_cache.py,sha256=PAiAu4X_a2PQgD2lG5H3iisXdyg4SaHpU46bRZvfNkM,4320
 schemathesis/specs/openapi/_hypothesis.py,sha256=XtC-rYiH-GHvWykdSSzPFVK7jHNNL7NtibjSEeIZDQw,24122
-schemathesis/specs/openapi/checks.py,sha256=K4Eu9e85Tue54_xGp9dp5P8CuuDAcDlqJAM4iRVzXA0,21090
+schemathesis/specs/openapi/checks.py,sha256=LiwoL5W_qK40j-JFSc9hfM8IGSszMBUWe71YZJ5FBzw,19931
 schemathesis/specs/openapi/constants.py,sha256=JqM_FHOenqS_MuUE9sxVQ8Hnw0DNM8cnKDwCwPLhID4,783
 schemathesis/specs/openapi/converter.py,sha256=TaYgc5BBHPdkN-n0lqpbeVgLu3eL3L8Wu3y_Vo3TJaQ,2800
 schemathesis/specs/openapi/definitions.py,sha256=Z186F0gNBSCmPg-Kk7Q-n6XxEZHIOzgUyeqixlC62XE,94058
@@ -139,13 +139,13 @@ schemathesis/stateful/sink.py,sha256=xjsqJYH5WETKh5pDGlchYyjT3HcjzHEotUjvo1p0JsE
 schemathesis/stateful/state_machine.py,sha256=u7PkwCjxTZZcePC7GPiOUuu4uhqUees3UuorD_0Sx_c,12938
 schemathesis/stateful/statistic.py,sha256=xPLiCw61ofNXQicqcK_sZyLHiqiGcgQARpwd8AiRubM,487
 schemathesis/stateful/validation.py,sha256=JtqnRzl11ZbVR8Lcr0xBJKoOXzx8VUfRz92jOnB2Smg,3605
-schemathesis/transports/__init__.py,sha256=tIJm79N_pBHM5ccvez4Z4mW-VrG1LfN8yq7B0v9YDGk,12832
+schemathesis/transports/__init__.py,sha256=L60_GCzJiX9jFYKVft4aeZb8EmyV6e72k8K73y2zvmE,12898
 schemathesis/transports/auth.py,sha256=yELjkEkfx4g74hNrd0Db9aFf0xDJDRIwhg2vzKOTZGg,1138
 schemathesis/transports/content_types.py,sha256=VrcRQvF5T_TUjrCyrZcYF2LOwKfs3IrLcMtkVSp1ImI,2189
 schemathesis/transports/headers.py,sha256=hr_AIDOfUxsJxpHfemIZ_uNG3_vzS_ZeMEKmZjbYiBE,990
 schemathesis/transports/responses.py,sha256=6-gvVcRK0Ho_lSydUysBNFWoJwZEiEgf6Iv-GWkQGd8,1675
-schemathesis-3.34.0.dist-info/METADATA,sha256=J6cG2yfIh_VOAI7UbhuD_TEKHla0zgqghCjawG6nwLw,18373
-schemathesis-3.34.0.dist-info/WHEEL,sha256=hKi7AIIx6qfnsRbr087vpeJnrVUuDokDHZacPPMW7-Y,87
-schemathesis-3.34.0.dist-info/entry_points.txt,sha256=VHyLcOG7co0nOeuk8WjgpRETk5P1E2iCLrn26Zkn5uk,158
-schemathesis-3.34.0.dist-info/licenses/LICENSE,sha256=PsPYgrDhZ7g9uwihJXNG-XVb55wj2uYhkl2DD8oAzY0,1103
-schemathesis-3.34.0.dist-info/RECORD,,
+schemathesis-3.34.2.dist-info/METADATA,sha256=_1OPHWfBbVS9tUFtPcJJzu5L278bmaNBTfmgpafdmN0,18373
+schemathesis-3.34.2.dist-info/WHEEL,sha256=hKi7AIIx6qfnsRbr087vpeJnrVUuDokDHZacPPMW7-Y,87
+schemathesis-3.34.2.dist-info/entry_points.txt,sha256=VHyLcOG7co0nOeuk8WjgpRETk5P1E2iCLrn26Zkn5uk,158
+schemathesis-3.34.2.dist-info/licenses/LICENSE,sha256=PsPYgrDhZ7g9uwihJXNG-XVb55wj2uYhkl2DD8oAzY0,1103
+schemathesis-3.34.2.dist-info/RECORD,,