mirror of
https://github.com/ceph/ceph
synced 2025-01-09 12:42:31 +00:00
49ba4a7b84
Fixes: https://tracker.ceph.com/issues/36031 Signed-off-by: Ricardo Marques <rimarques@suse.com>
112 lines
3.7 KiB
Python
112 lines
3.7 KiB
Python
# -*- coding: utf-8 -*-
|
|
|
|
from __future__ import absolute_import
|
|
|
|
import time
|
|
|
|
from .helper import DashboardTestCase
|
|
|
|
|
|
class AuthTest(DashboardTestCase):
|
|
|
|
AUTO_AUTHENTICATE = False
|
|
|
|
def setUp(self):
|
|
self.reset_session()
|
|
|
|
def test_a_set_login_credentials(self):
|
|
self.create_user('admin2', 'admin2', ['administrator'])
|
|
self._post("/api/auth", {'username': 'admin2', 'password': 'admin2'})
|
|
self.assertStatus(201)
|
|
# self.assertJsonBody({"username": "admin2"})
|
|
data = self.jsonBody()
|
|
self.assertIn('username', data)
|
|
self.assertEqual(data['username'], "admin2")
|
|
self.assertIn('permissions', data)
|
|
for scope, perms in data['permissions'].items():
|
|
self.assertIsNotNone(scope)
|
|
self.assertIn('read', perms)
|
|
self.assertIn('update', perms)
|
|
self.assertIn('create', perms)
|
|
self.assertIn('delete', perms)
|
|
self.delete_user('admin2')
|
|
|
|
def test_login_valid(self):
|
|
self._post("/api/auth", {'username': 'admin', 'password': 'admin'})
|
|
self.assertStatus(201)
|
|
data = self.jsonBody()
|
|
self.assertIn('username', data)
|
|
self.assertEqual(data['username'], "admin")
|
|
self.assertIn('permissions', data)
|
|
for scope, perms in data['permissions'].items():
|
|
self.assertIsNotNone(scope)
|
|
self.assertIn('read', perms)
|
|
self.assertIn('update', perms)
|
|
self.assertIn('create', perms)
|
|
self.assertIn('delete', perms)
|
|
|
|
def test_login_stay_signed_in(self):
|
|
self._post("/api/auth", {
|
|
'username': 'admin',
|
|
'password': 'admin',
|
|
'stay_signed_in': True})
|
|
self.assertStatus(201)
|
|
self.assertIn('session_id', self.cookies())
|
|
for cookie in self.cookies():
|
|
if cookie.name == 'session_id':
|
|
self.assertIsNotNone(cookie.expires)
|
|
|
|
def test_login_not_stay_signed_in(self):
|
|
self._post("/api/auth", {
|
|
'username': 'admin',
|
|
'password': 'admin',
|
|
'stay_signed_in': False})
|
|
self.assertStatus(201)
|
|
self.assertIn('session_id', self.cookies())
|
|
for cookie in self.cookies():
|
|
if cookie.name == 'session_id':
|
|
self.assertIsNone(cookie.expires)
|
|
|
|
def test_login_invalid(self):
|
|
self._post("/api/auth", {'username': 'admin', 'password': 'inval'})
|
|
self.assertStatus(400)
|
|
self.assertJsonBody({
|
|
"component": "auth",
|
|
"code": "invalid_credentials",
|
|
"detail": "Invalid credentials"
|
|
})
|
|
|
|
def test_login_without_password(self):
|
|
self.create_user('admin2', '', ['administrator'])
|
|
self._post("/api/auth", {'username': 'admin2', 'password': ''})
|
|
self.assertStatus(400)
|
|
self.assertJsonBody({
|
|
"component": "auth",
|
|
"code": "invalid_credentials",
|
|
"detail": "Invalid credentials"
|
|
})
|
|
self.delete_user('admin2')
|
|
|
|
def test_logout(self):
|
|
self._post("/api/auth", {'username': 'admin', 'password': 'admin'})
|
|
self._delete("/api/auth")
|
|
self.assertStatus(204)
|
|
self.assertBody('')
|
|
self._get("/api/host")
|
|
self.assertStatus(401)
|
|
|
|
def test_session_expire(self):
|
|
self._ceph_cmd(['dashboard', 'set-session-expire', '2'])
|
|
self._post("/api/auth", {'username': 'admin', 'password': 'admin'})
|
|
self.assertStatus(201)
|
|
self._get("/api/host")
|
|
self.assertStatus(200)
|
|
time.sleep(3)
|
|
self._get("/api/host")
|
|
self.assertStatus(401)
|
|
self._ceph_cmd(['dashboard', 'set-session-expire', '1200'])
|
|
|
|
def test_unauthorized(self):
|
|
self._get("/api/host")
|
|
self.assertStatus(401)
|