Changeset 7138

Timestamp:

19 Nov 2011, 13:08:05 (13 years ago)

Author:

uli

Message:

Add regression tests to ensure that password checking also works when
a student password is None or empty string.

File:

• main/waeup.sirp/trunk/src/waeup/sirp/students/tests/test_authentication.py (modified) (1 diff)

main/waeup.sirp/trunk/src/waeup/sirp/students/tests/test_authentication.py

@@ -138 +138 @@
         return
 
+    def test_check_unset_password(self):
+        # empty and unset passwords do not match anything
+        self.fake_stud.password = None
+        result1 = self.account.checkPassword('')
+        self.fake_stud.password = ''
+        result2 = self.account.checkPassword('')
+        self.assertEqual(result1, False)
+        self.assertEqual(result2, False)
+        return
+
+    def test_check_password_no_string(self):
+        # if passed in password is not a string, we gain no access
+        self.fake_stud.password = 'secret'
+        result1 = self.account.checkPassword(None)
+        result2 = self.account.checkPassword(object())
+        self.assertEqual(result1, False)
+        self.assertEqual(result2, False)
+        return
+
     def test_role_set(self):
         # make sure we can set roles for principals denoted by account