wassname/flask-security
1
0
Fork 0
mirror of https://github.com/wassname/flask-security.git synced 2026-08-12 12:00:37 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add configurable http auth realm and optional realm specification in http_auth_required decorator

Browse Source
This commit is contained in:
Matt Wright
2012-07-12 14:16:54 -04:00
parent a2d31d1d8d
commit dcdfb4d3e7
4 changed files with 51 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/functional_tests.py
+34 -2
View File
@@ -2,6 +2,7 @@
from __future__ import with_statement
import base64
import time
try:
@@ -130,8 +131,30 @@ class DefaultSecurityTests(SecurityTest):
r = self._get('/token', headers={"X-Auth-Token": 'X'})
self.assertEqual(401, r.status_code)
def test_http_auth(self):
r = self._get('/http', headers={
'Authorization': 'Basic ' + base64.b64encode("joe@lp.com:password")
})
self.assertIn('HTTP Authentication', r.data)
class ConfiguredURLTests(SecurityTest):
def test_invalid_http_auth(self):
r = self._get('/http', headers={
'Authorization': 'Basic ' + base64.b64encode("joe@lp.com:bogus")
})
self.assertIn('<h1>Unauthorized</h1>', r.data)
self.assertIn('WWW-Authenticate', r.headers)
self.assertEquals('Basic realm="Login Required"', r.headers['WWW-Authenticate'])
def test_custom_http_auth_realm(self):
r = self._get('/http_custom_realm', headers={
'Authorization': 'Basic ' + base64.b64encode("joe@lp.com:bogus")
})
self.assertIn('<h1>Unauthorized</h1>', r.data)
self.assertIn('WWW-Authenticate', r.headers)
self.assertEquals('Basic realm="My Realm"', r.headers['WWW-Authenticate'])
class ConfiguredSecurityTests(SecurityTest):
AUTH_CONFIG = {
'SECURITY_REGISTERABLE': True,
@@ -141,7 +164,8 @@ class ConfiguredURLTests(SecurityTest):
'SECURITY_POST_LOGIN_VIEW': '/post_login',
'SECURITY_POST_LOGOUT_VIEW': '/post_logout',
'SECURITY_POST_REGISTER_VIEW': '/post_register',
'SECURITY_UNAUTHORIZED_VIEW': '/unauthorized'
'SECURITY_UNAUTHORIZED_VIEW': '/unauthorized',
'SECURITY_DEFAULT_HTTP_AUTH_REALM': 'Custom Realm'
}
def test_login_view(self):
@@ -171,6 +195,14 @@ class ConfiguredURLTests(SecurityTest):
msg = 'You are not allowed to access the requested resouce'
self.assertIn(msg, r.data)
def test_default_http_auth_realm(self):
r = self._get('/http', headers={
'Authorization': 'Basic ' + base64.b64encode("joe@lp.com:bogus")
})
self.assertIn('<h1>Unauthorized</h1>', r.data)
self.assertIn('WWW-Authenticate', r.headers)
self.assertEquals('Basic realm="Custom Realm"', r.headers['WWW-Authenticate'])
class RegisterableTests(SecurityTest):
AUTH_CONFIG = {