3afd9791ef
The environment module will be configured once, during code initialization. Subsequently all other possibly-evented modules will retrieve from environment and transparently obtain either the eventlet or standard library modules. If eventlet, httplib, subprocess or other environment dependant module is referenced outside of the environment module it should be considered a bug. The changes to tests are required to ensure that test is imported first to setup the environment. Hopefully these can all be replaced with an __init__.py in a post-nose keystone. Implements: blueprint extract-eventlet Change-Id: Icacd6f2ee0906ac5d303777c1f87a184f38283bf
101 lines
3.9 KiB
Python
101 lines
3.9 KiB
Python
# vim: tabstop=4 shiftwidth=4 softtabstop=4
|
|
|
|
# Copyright 2013 OpenStack LLC
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
import uuid
|
|
|
|
from keystone import test
|
|
|
|
from keystone import auth
|
|
from keystone import exception
|
|
|
|
|
|
# for testing purposes only
|
|
METHOD_NAME = 'simple-challenge-response'
|
|
EXPECTED_RESPONSE = uuid.uuid4().hex
|
|
DEMO_USER_ID = uuid.uuid4().hex
|
|
|
|
|
|
class SimpleChallengeResponse(auth.AuthMethodHandler):
|
|
def authenticate(self, context, auth_payload, user_context):
|
|
if 'response' in auth_payload:
|
|
if auth_payload['response'] != EXPECTED_RESPONSE:
|
|
raise exception.Unauthorized('Wrong answer')
|
|
user_context['user_id'] = DEMO_USER_ID
|
|
else:
|
|
return {"challenge": "What's the name of your high school?"}
|
|
|
|
|
|
class TestAuthPlugin(test.TestCase):
|
|
def setUp(self):
|
|
super(TestAuthPlugin, self).setUp()
|
|
self.config([
|
|
test.etcdir('keystone.conf.sample'),
|
|
test.testsdir('test_overrides.conf'),
|
|
test.testsdir('backend_sql.conf'),
|
|
test.testsdir('backend_sql_disk.conf'),
|
|
test.testsdir('test_auth_plugin.conf')])
|
|
self.load_backends()
|
|
auth.controllers.AUTH_METHODS[METHOD_NAME] = SimpleChallengeResponse()
|
|
self.api = auth.controllers.Auth()
|
|
|
|
def test_unsupported_auth_method(self):
|
|
method_name = uuid.uuid4().hex
|
|
auth_data = {'methods': [method_name]}
|
|
auth_data[method_name] = {'test': 'test'}
|
|
auth_data = {'identity': auth_data}
|
|
self.assertRaises(exception.AuthMethodNotSupported,
|
|
auth.controllers.AuthInfo,
|
|
None,
|
|
auth_data)
|
|
|
|
def test_addition_auth_steps(self):
|
|
auth_data = {'methods': ['simple-challenge-response']}
|
|
auth_data['simple-challenge-response'] = {
|
|
'test': 'test'}
|
|
auth_data = {'identity': auth_data}
|
|
auth_info = auth.controllers.AuthInfo(None, auth_data)
|
|
auth_context = {'extras': {}, 'method_names': []}
|
|
try:
|
|
self.api.authenticate({}, auth_info, auth_context)
|
|
except exception.AdditionalAuthRequired as e:
|
|
self.assertTrue('methods' in e.authentication)
|
|
self.assertTrue(METHOD_NAME in e.authentication['methods'])
|
|
self.assertTrue(METHOD_NAME in e.authentication)
|
|
self.assertTrue('challenge' in e.authentication[METHOD_NAME])
|
|
|
|
# test correct response
|
|
auth_data = {'methods': ['simple-challenge-response']}
|
|
auth_data['simple-challenge-response'] = {
|
|
'response': EXPECTED_RESPONSE}
|
|
auth_data = {'identity': auth_data}
|
|
auth_info = auth.controllers.AuthInfo(None, auth_data)
|
|
auth_context = {'extras': {}, 'method_names': []}
|
|
self.api.authenticate({}, auth_info, auth_context)
|
|
self.assertEqual(auth_context['user_id'], DEMO_USER_ID)
|
|
|
|
# test incorrect response
|
|
auth_data = {'methods': ['simple-challenge-response']}
|
|
auth_data['simple-challenge-response'] = {
|
|
'response': uuid.uuid4().hex}
|
|
auth_data = {'identity': auth_data}
|
|
auth_info = auth.controllers.AuthInfo(None, auth_data)
|
|
auth_context = {'extras': {}, 'method_names': []}
|
|
self.assertRaises(exception.Unauthorized,
|
|
self.api.authenticate,
|
|
{},
|
|
auth_info,
|
|
auth_context)
|