Changeset 15287 for main/waeup.kofa/trunk/src/waeup/kofa/tests

Timestamp:

9 Jan 2019, 21:17:08 (6 years ago)

Author:

Henrik Bettermann

Message:

Stored insecure passwords are no longer accepted.
Officers with an insecure password can't login and are
redirected to the ChangePasswordRequestPage to request a
new password.

File:

• main/waeup.kofa/trunk/src/waeup/kofa/tests/test_authentication.py (modified) (5 diffs)

main/waeup.kofa/trunk/src/waeup/kofa/tests/test_authentication.py

@@ -40 +40 @@
     IKofaPluggable)
 
+SECRET = 'HgtuZZZ8'
 
 class FakeSite(grok.Site, grok.Container):
@@ -133 +134 @@
         self.getRootFolder()['app'] = FakeSite()
         self.site = self.getRootFolder()['app']
-        self.site['users'] = {'bob': Account('bob', 'secret')}
+        self.site['users'] = {'bob': Account('bob', SECRET)}
         setSite(self.site)
         return
@@ -155 +156 @@
         plugin = UserAuthenticatorPlugin()
         result1 = plugin.authenticateCredentials(
-            dict(login='bob', password='secret'))
+            dict(login='bob', password=SECRET))
         result2 = plugin.authenticateCredentials(
             dict(login='bob', password='nonsense'))
@@ -185 +186 @@
         # do `num` failed logins and a valid one afterwards
         del self.site['users']
-        self.site['users'] = {'bob': Account('bob', 'secret')}
+        self.site['users'] = {'bob': Account('bob', SECRET)}
         plugin = UserAuthenticatorPlugin()
         resultlist = []
@@ -193 +194 @@
                 dict(login='bob', password='wrongsecret')))
         resultlist.append(plugin.authenticateCredentials(
-            dict(login='bob', password='secret')))
+            dict(login='bob', password=SECRET)))
         return resultlist