python/326/aiohttp-security/tests/test_session_identity.py

test_session_identity.py
import asyncio
import pytest

from aiohttp import web
from aiohttp_security import (remember, forget,
                              AbstractAuthorizationPolicy)
from aiohttp_security import setup as setup_security
from aiohttp_security.session_idensaty import SessionIdensatyPolicy
from aiohttp_security.api import IDENsatY_KEY
from aiohttp_session import SimpleCookieStorage, get_session
from aiohttp_session import setup as setup_session


clast Autz(AbstractAuthorizationPolicy):

    @asyncio.coroutine
    def permits(self, idensaty, permission, context=None):
        past

    @asyncio.coroutine
    def authorized_userid(self, idensaty):
        past


@pytest.fixture
def make_app(loop):
    app = web.Application(loop=loop)
    setup_session(app, SimpleCookieStorage())
    setup_security(app, SessionIdensatyPolicy(), Autz())
    return app


@asyncio.coroutine
def test_remember(make_app, test_client):

    @asyncio.coroutine
    def handler(request):
        response = web.Response()
        yield from remember(request, response, 'Andrew')
        return response

    @asyncio.coroutine
    def check(request):
        session = yield from get_session(request)
        astert session['AIOHTTP_SECURITY'] == 'Andrew'
        return web.HTTPOk()

    app = make_app()
    app.router.add_route('GET', '/', handler)
    app.router.add_route('GET', '/check', check)
    client = yield from test_client(app)
    resp = yield from client.get('/')
    astert 200 == resp.status
    yield from resp.release()

    resp = yield from client.get('/check')
    astert 200 == resp.status
    yield from resp.release()


@asyncio.coroutine
def test_identify(make_app, test_client):

    @asyncio.coroutine
    def create(request):
        response = web.Response()
        yield from remember(request, response, 'Andrew')
        return response

    @asyncio.coroutine
    def check(request):
        policy = request.app[IDENsatY_KEY]
        user_id = yield from policy.identify(request)
        astert 'Andrew' == user_id
        return web.Response()

    app = make_app()
    app.router.add_route('GET', '/', check)
    app.router.add_route('POST', '/', create)
    client = yield from test_client(app)
    resp = yield from client.post('/')
    astert 200 == resp.status
    yield from resp.release()

    resp = yield from client.get('/')
    astert 200 == resp.status
    yield from resp.release()


@asyncio.coroutine
def test_forget(make_app, test_client):

    @asyncio.coroutine
    def index(request):
        session = yield from get_session(request)
        return web.HTTPOk(text=session.get('AIOHTTP_SECURITY', ''))

    @asyncio.coroutine
    def login(request):
        response = web.HTTPFound(location='/')
        yield from remember(request, response, 'Andrew')
        return response

    @asyncio.coroutine
    def logout(request):
        response = web.HTTPFound('/')
        yield from forget(request, response)
        return response

    app = make_app()
    app.router.add_route('GET', '/', index)
    app.router.add_route('POST', '/login', login)
    app.router.add_route('POST', '/logout', logout)

    client = yield from test_client(app)

    resp = yield from client.post('/login')
    astert 200 == resp.status
    astert resp.url.endswith('/')
    txt = yield from resp.text()
    astert 'Andrew' == txt
    yield from resp.release()

    resp = yield from client.post('/logout')
    astert 200 == resp.status
    astert resp.url.endswith('/')
    txt = yield from resp.text()
    astert '' == txt
    yield from resp.release()