Give blueshirts another auth scope

Author: PeterJCLaw

code_submitter/auth.py

@@ -150,6 +150,14 @@ def get_team(self, info: NemesisUserInfo) -> Optional[str]:
 
         return team
 
+    def get_scopes(self, info: NemesisUserInfo) -> List[str]:
+        scopes = ['authenticated']
+
+        if info['is_blueshirt']:
+            scopes.append('blueshirt')
+
+        return scopes
+
     async def validate(self, username: str, password: str) -> ValidationResult:
         if not username:
             raise AuthenticationError("Must provide a username")
@@ -159,8 +167,9 @@ async def validate(self, username: str, password: str) -> ValidationResult:
         info = await self.load_user(username, password)
 
         team = self.get_team(info)
+        scopes = self.get_scopes(info)
 
-        return ['authenticated'], User(username, team)
+        return scopes, User(username, team)
 
 
 class DummyNemesisBackend(NemesisBackend):

tests/tests_auth.py

@@ -74,3 +74,21 @@ async def endpoint(request: Request) -> Response:
         self.assertEqual('user', user.username, "Wrong username for user")
 
         self.assertEqual(['authenticated'], scopes, "Wrong scopes for user")
+
+    def test_blueshirt(self) -> None:
+        @self.fake_nemesis.route('/user/user')
+        async def endpoint(request: Request) -> Response:
+            self.info['teams'] = []
+            self.info['is_blueshirt'] = True
+            return JSONResponse(self.info)
+
+        scopes, user = self.await_(self.backend.validate('user', 'pass'))
+
+        self.assertIsNone(user.team, "Wrong team for user")
+        self.assertEqual('user', user.username, "Wrong username for user")
+
+        self.assertEqual(
+            ['authenticated', 'blueshirt'],
+            scopes,
+            "Wrong scopes for user",
+        )