Changeset 10416 for main/waeup.cas/trunk/waeup/cas/tests

Timestamp:

8 Jul 2013, 08:35:22 (11 years ago)

Author:

uli

Message:

Support /validate (CAS 1.0).

File:

• main/waeup.cas/trunk/waeup/cas/tests/test_server.py (modified) (4 diffs)

main/waeup.cas/trunk/waeup/cas/tests/test_server.py

@@ -13 +13 @@
     create_tgc_value, check_login_ticket, set_session_cookie,
     check_session_cookie, get_template, delete_session_cookie,
+    check_service_ticket,
     )
 
@@ -95 +96 @@
         # we can access a validation page
         app = CASServer()
-        req = Request.blank('http://localhost/validate')
-        resp = app(req)
-        assert resp.status == '501 Not Implemented'
+        req = Request.blank('http://localhost/validate?service=foo&ticket=bar')
+        resp = app(req)
+        assert resp.status == '200 OK'
 
     def test_logout(self):
@@ -254 +255 @@
         assert b'like you to' in resp.body
         assert b'http://www.logout.com' in resp.body
+
+    def test_validate_invalid(self):
+        # 2.4.2 validation failures is indicated by a given format
+        app = CASServer()
+        params = 'ticket=foo&service=bar'
+        req = Request.blank('https://localhost/validate?%s' % params)
+        resp = app(req)
+        assert resp.body == b'no\n\n'
+
+    def test_validate_valid(self):
+        # 2.4 validation success is indicated by a given format
+        app = CASServer()
+        sticket = create_service_ticket(
+            'someuser', 'http://service.com/', sso=False)
+        app.db.add(sticket)
+        params = 'ticket=%s&service=%s' % (
+            sticket.ticket, sticket.service)
+        req = Request.blank('https://localhost/validate?%s' % params)
+        resp = app(req)
+        assert resp.body == b'yes\nsomeuser\n'
+
+    def test_validate_renew_invalid(self):
+        # 2.4.1 with `renew` we accept only non-sso issued tickets
+        app = CASServer()
+        sticket = create_service_ticket(
+            'someuser', 'http://service.com/', sso=True)
+        app.db.add(sticket)
+        params = 'ticket=%s&service=%s&renew=true' % (
+            sticket.ticket, sticket.service)
+        req = Request.blank('https://localhost/validate?%s' % params)
+        resp = app(req)
+        assert resp.body == b'no\n\n'
+
+    def test_validate_renew_valid(self):
+        # 2.4.1 with `renew` we accept only non-sso issued tickets
+        app = CASServer()
+        sticket = create_service_ticket(
+            'someuser', 'http://service.com/', sso=False)
+        app.db.add(sticket)
+        params = 'ticket=%s&service=%s&renew=true' % (
+            sticket.ticket, sticket.service)
+        req = Request.blank('https://localhost/validate?%s' % params)
+        resp = app(req)
+        assert resp.body == b'yes\nsomeuser\n'
 
 
@@ -480 +525 @@
             TicketGrantingCookie.value == value)
         assert len(list(q)) == 0
+
+    def test_check_service_ticket(self):
+        db = DB('sqlite:///')
+        st = ServiceTicket(
+            'ST-123456', 'someuser', 'http://myservice.com', True)
+        db.add(st)
+        assert check_service_ticket(db, None, 'foo') is None
+        assert check_service_ticket(db, 'foo', None) is None
+        assert check_service_ticket(db, 'ST-123456', 'foo') is None
+        assert check_service_ticket(db, 'foo', 'http://myservice.com') is None
+        result = check_service_ticket(db, 'ST-123456', 'http://myservice.com')
+        assert isinstance(result, ServiceTicket)
+        assert result.user == 'someuser'
+        assert check_service_ticket(
+            db,  'ST-123456', 'http://myservice.com', True) is None
+        assert check_service_ticket(
+            db,  'ST-123456', 'http://myservice.com', False) is not None