173 lines
7.5 KiB
Python
173 lines
7.5 KiB
Python
# Copyright 2012 OpenStack Foundation
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
import datetime
|
|
import uuid
|
|
|
|
from oslo_utils import timeutils
|
|
import six
|
|
|
|
from keystone import config
|
|
from keystone import exception
|
|
from keystone import tests
|
|
from keystone.tests import test_backend
|
|
|
|
|
|
CONF = config.CONF
|
|
|
|
|
|
class KvsToken(tests.TestCase, test_backend.TokenTests):
|
|
def setUp(self):
|
|
super(KvsToken, self).setUp()
|
|
self.load_backends()
|
|
|
|
def test_flush_expired_token(self):
|
|
self.assertRaises(
|
|
exception.NotImplemented,
|
|
self.token_provider_api._persistence.flush_expired_tokens)
|
|
|
|
def _update_user_token_index_direct(self, user_key, token_id, new_data):
|
|
persistence = self.token_provider_api._persistence
|
|
token_list = persistence.driver._get_user_token_list_with_expiry(
|
|
user_key)
|
|
# Update the user-index so that the expires time is _actually_ expired
|
|
# since we do not do an explicit get on the token, we only reference
|
|
# the data in the user index (to save extra round-trips to the kvs
|
|
# backend).
|
|
for i, data in enumerate(token_list):
|
|
if data[0] == token_id:
|
|
token_list[i] = new_data
|
|
break
|
|
self.token_provider_api._persistence.driver._store.set(user_key,
|
|
token_list)
|
|
|
|
def test_cleanup_user_index_on_create(self):
|
|
user_id = six.text_type(uuid.uuid4().hex)
|
|
valid_token_id, data = self.create_token_sample_data(user_id=user_id)
|
|
expired_token_id, expired_data = self.create_token_sample_data(
|
|
user_id=user_id)
|
|
|
|
expire_delta = datetime.timedelta(seconds=86400)
|
|
|
|
# NOTE(morganfainberg): Directly access the data cache since we need to
|
|
# get expired tokens as well as valid tokens.
|
|
token_persistence = self.token_provider_api._persistence
|
|
user_key = token_persistence.driver._prefix_user_id(user_id)
|
|
user_token_list = token_persistence.driver._store.get(user_key)
|
|
valid_token_ref = token_persistence.get_token(valid_token_id)
|
|
expired_token_ref = token_persistence.get_token(expired_token_id)
|
|
expected_user_token_list = [
|
|
(valid_token_id, timeutils.isotime(valid_token_ref['expires'],
|
|
subsecond=True)),
|
|
(expired_token_id, timeutils.isotime(expired_token_ref['expires'],
|
|
subsecond=True))]
|
|
self.assertEqual(expected_user_token_list, user_token_list)
|
|
new_expired_data = (expired_token_id,
|
|
timeutils.isotime(
|
|
(timeutils.utcnow() - expire_delta),
|
|
subsecond=True))
|
|
self._update_user_token_index_direct(user_key, expired_token_id,
|
|
new_expired_data)
|
|
valid_token_id_2, valid_data_2 = self.create_token_sample_data(
|
|
user_id=user_id)
|
|
valid_token_ref_2 = token_persistence.get_token(valid_token_id_2)
|
|
expected_user_token_list = [
|
|
(valid_token_id, timeutils.isotime(valid_token_ref['expires'],
|
|
subsecond=True)),
|
|
(valid_token_id_2, timeutils.isotime(valid_token_ref_2['expires'],
|
|
subsecond=True))]
|
|
user_token_list = token_persistence.driver._store.get(user_key)
|
|
self.assertEqual(expected_user_token_list, user_token_list)
|
|
|
|
# Test that revoked tokens are removed from the list on create.
|
|
token_persistence.delete_token(valid_token_id_2)
|
|
new_token_id, data = self.create_token_sample_data(user_id=user_id)
|
|
new_token_ref = token_persistence.get_token(new_token_id)
|
|
expected_user_token_list = [
|
|
(valid_token_id, timeutils.isotime(valid_token_ref['expires'],
|
|
subsecond=True)),
|
|
(new_token_id, timeutils.isotime(new_token_ref['expires'],
|
|
subsecond=True))]
|
|
user_token_list = token_persistence.driver._store.get(user_key)
|
|
self.assertEqual(expected_user_token_list, user_token_list)
|
|
|
|
|
|
class KvsCatalog(tests.TestCase, test_backend.CatalogTests):
|
|
def setUp(self):
|
|
super(KvsCatalog, self).setUp()
|
|
self.load_backends()
|
|
self._load_fake_catalog()
|
|
|
|
def config_overrides(self):
|
|
super(KvsCatalog, self).config_overrides()
|
|
self.config_fixture.config(
|
|
group='catalog',
|
|
driver='keystone.catalog.backends.kvs.Catalog')
|
|
|
|
def _load_fake_catalog(self):
|
|
self.catalog_foobar = self.catalog_api.driver._create_catalog(
|
|
'foo', 'bar',
|
|
{'RegionFoo': {'service_bar': {'foo': 'bar'}}})
|
|
|
|
def test_get_catalog_404(self):
|
|
# FIXME(dolph): this test should be moved up to test_backend
|
|
# FIXME(dolph): exceptions should be UserNotFound and ProjectNotFound
|
|
self.assertRaises(exception.NotFound,
|
|
self.catalog_api.get_catalog,
|
|
uuid.uuid4().hex,
|
|
'bar')
|
|
|
|
self.assertRaises(exception.NotFound,
|
|
self.catalog_api.get_catalog,
|
|
'foo',
|
|
uuid.uuid4().hex)
|
|
|
|
def test_get_catalog(self):
|
|
catalog_ref = self.catalog_api.get_catalog('foo', 'bar')
|
|
self.assertDictEqual(catalog_ref, self.catalog_foobar)
|
|
|
|
def test_get_catalog_endpoint_disabled(self):
|
|
# This test doesn't apply to KVS because with the KVS backend the
|
|
# application creates the catalog (including the endpoints) for each
|
|
# user and project. Whether endpoints are enabled or disabled isn't
|
|
# a consideration.
|
|
f = super(KvsCatalog, self).test_get_catalog_endpoint_disabled
|
|
self.assertRaises(exception.NotFound, f)
|
|
|
|
def test_get_v3_catalog_endpoint_disabled(self):
|
|
# There's no need to have disabled endpoints in the kvs catalog. Those
|
|
# endpoints should just be removed from the store. This just tests
|
|
# what happens currently when the super impl is called.
|
|
f = super(KvsCatalog, self).test_get_v3_catalog_endpoint_disabled
|
|
self.assertRaises(exception.NotFound, f)
|
|
|
|
def test_list_regions_filtered_by_parent_region_id(self):
|
|
self.skipTest('KVS backend does not support hints')
|
|
|
|
def test_service_filtering(self):
|
|
self.skipTest("kvs backend doesn't support filtering")
|
|
|
|
|
|
class KvsTokenCacheInvalidation(tests.TestCase,
|
|
test_backend.TokenCacheInvalidation):
|
|
def setUp(self):
|
|
super(KvsTokenCacheInvalidation, self).setUp()
|
|
self.load_backends()
|
|
self._create_test_data()
|
|
|
|
def config_overrides(self):
|
|
super(KvsTokenCacheInvalidation, self).config_overrides()
|
|
self.config_fixture.config(
|
|
group='token',
|
|
driver='keystone.token.persistence.backends.kvs.Token')
|