Changeset 10409

Timestamp:

5 Jul 2013, 11:36:29 (11 years ago)

Author:

uli

Message:

Test and fix login behaviour in case we send service params.

Location:

main/waeup.cas/trunk/waeup/cas

Files:

• server.py (modified) (1 diff)
• tests/test_server.py (modified) (1 diff)

main/waeup.cas/trunk/waeup/cas/server.py

@@ -149 +149 @@
     resp.expires = 'Thu, 01 Dec 1994 16:00:00 GMT'
     resp.text = html
+    if not sso:
+        resp = set_session_cookie(db, resp)
     return resp
 

main/waeup.cas/trunk/waeup/cas/tests/test_server.py

@@ -224 +224 @@
         assert b'You logged in already' in resp3.body
 
+    def test_login_sso_with_service(self):
+        resp1 = self.app.get(
+            'https://localhost/login?service=http://service.com/')
+        assert resp1.status == '200 OK'
+        assert 'cas-tgc' not in self.app.cookies
+        form = resp1.forms[0]
+        form.set('username', 'bird')
+        form.set('password', 'bebop')
+        resp2 = form.submit('AUTHENTICATE')
+        assert resp2.status == '303 See Other'
+        assert resp2.headers['Location'].startswith(
+            'http://service.com/?ticket=ST-')
+        # we got a secure cookie
+        assert 'cas-tgc' in self.app.cookies
+        resp3 = self.app.get(
+            'https://localhost/login?service=http://service.com/')
+        assert resp3.status == '303 See Other'
+        assert resp3.headers['Location'].startswith(
+            'http://service.com/?ticket=ST-')
+
 
 class CASServerHelperTests(unittest.TestCase):