wassname/flask-security
1
0
Fork 0
mirror of https://github.com/wassname/flask-security.git synced 2026-09-09 11:22:35 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #205 from HereLabsInc/catch_decoding_errors

Browse Source 
catch possible TypeError and ValueError from serializer
This commit is contained in:
Matt Wright
2014-01-24 07:31:51 -08:00
parent 9400032a1f 45c8951877
commit f854c24094
2 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/configured_tests.py
+10
View File
@@ -425,6 +425,16 @@ class RecoverableTests(SecurityTest):
m = self.get_message('INVALID_RESET_PASSWORD_TOKEN')
self.assertIn(m.encode('utf-8'), r.data)
def test_reset_password_with_mangled_token(self):
t = "WyIxNjQ2MzYiLCIxMzQ1YzBlZmVhM2VhZjYwODgwMDhhZGU2YzU0MzZjMiJd.BZEw_Q.lQyo3npdPZtcJ_sNHVHP103syjM&url_id=fbb89a8328e58c181ea7d064c2987874bc54a23d"
r = self._post('/reset/' + t, data={
'password': 'newpassword',
'password_confirm': 'newpassword'
}, follow_redirects=True)
m = self.get_message('INVALID_RESET_PASSWORD_TOKEN')
self.assertIn(m.encode('utf-8'), r.data)
class ExpiredResetPasswordTest(SecurityTest):