76 lines
2.7 KiB
Python
76 lines
2.7 KiB
Python
import unittest
|
|
|
|
from flask import json
|
|
|
|
from app.core import app
|
|
from app.model import USER, getUser, GROUP, TUTORSHIP, tutorship_class, group_class, user_class
|
|
|
|
|
|
class AuthTestCase(unittest.TestCase):
|
|
uid = None
|
|
gid = None
|
|
tid = None
|
|
|
|
@classmethod
|
|
def setUpClass(cls):
|
|
if getUser(login="admin") is None:
|
|
query = USER.insert().values(login="admin", email="admin@admin.com", role="4", phone="00.00.00.00.00")
|
|
res = query.execute()
|
|
cls.uid = res.lastrowid
|
|
query = GROUP.insert().values(name="test", year="2017", class_long="classe toto", class_short="toto",
|
|
department="plop", ressources_dir="/plop/toto", resp_id=cls.uid)
|
|
res = query.execute()
|
|
cls.gid = res.lastrowid
|
|
query = TUTORSHIP.insert().values(student_id=cls.uid, ptutor_id=cls.uid, group_id=cls.gid)
|
|
res = query.execute()
|
|
cls.tid = res.lastrowid
|
|
|
|
@classmethod
|
|
def tearDownClass(cls):
|
|
if cls.uid is not None and cls.gid is not None and cls.tid is not None:
|
|
query = TUTORSHIP.delete().where(tutorship_class.id == cls.tid)
|
|
query.execute()
|
|
query = GROUP.delete().where(group_class.id == cls.gid)
|
|
query.execute()
|
|
query = USER.delete().where(user_class.id == cls.uid)
|
|
query.execute()
|
|
|
|
def setUp(self):
|
|
self.app = app.test_client()
|
|
|
|
def tearDown(self):
|
|
pass
|
|
|
|
def login(self, email, password):
|
|
return self.app.post('/api/login',
|
|
data=json.dumps(
|
|
dict(
|
|
login=email,
|
|
password=password
|
|
)
|
|
), content_type='application/json')
|
|
|
|
def logout(self):
|
|
return self.app.delete('/api/login')
|
|
|
|
def test_login_logout(self):
|
|
rv = self.login('admin', 'admin')
|
|
self.assertEqual(rv.status_code, 200, 'Login as admin Failed')
|
|
|
|
rv = self.logout()
|
|
self.assertEqual(rv.status_code, 200, 'Logout Failed')
|
|
|
|
rv = self.login('adminx', 'admin')
|
|
self.assertEqual(rv.status_code, 401, 'Authentication from CAS has not failed for the invalid user xadmin !')
|
|
|
|
rv = self.login('admin', 'adminx')
|
|
self.assertEqual(rv.status_code, 401,
|
|
'Authentication from CAS has not failed for the invalid password xadmin !')
|
|
|
|
rv = self.login('toto', 'toto')
|
|
self.assertEqual(rv.status_code, 403, 'Authentication shouldn\'t be allowed for user toto !')
|
|
|
|
|
|
if __name__ == '__main__':
|
|
unittest.main()
|