tests for backend and middleware

Author: Massimiliano Pippi

oauth2_provider/tests/__init__.py

@@ -11,3 +11,5 @@
 from .test_application_views import *
 from .test_decorators import *
 from .test_oauth2_backends import *
+
+from .test_auth_backends import *

oauth2_provider/tests/test_auth_backends.py

@@ -0,0 +1,113 @@
+from django.test import TestCase, RequestFactory
+from django.test.utils import override_settings
+from django.contrib.auth import get_user_model
+from django.contrib.auth.models import AnonymousUser
+from django.utils.timezone import now, timedelta
+from django.conf.global_settings import MIDDLEWARE_CLASSES
+
+from ..models import get_application_model
+from ..models import AccessToken
+from ..backends import OAuth2Backend
+from ..middleware import OAuth2TokenMiddleware
+
+UserModel = get_user_model()
+ApplicationModel = get_application_model()
+
+
+class BaseTest(TestCase):
+    """
+    Base class for cases in this module
+    """
+    def setUp(self):
+        self.user = UserModel.objects.create_user("user", "[email protected]", "123456")
+        self.app = ApplicationModel.objects.create(
+            name='app',
+            client_type=ApplicationModel.CLIENT_CONFIDENTIAL,
+            authorization_grant_type=ApplicationModel.GRANT_CLIENT_CREDENTIALS,
+            user=self.user
+        )
+        self.token = AccessToken.objects.create(user=self.user,
+                                                token='tokstr',
+                                                application=self.app,
+                                                expires=now() + timedelta(days=365))
+        self.factory = RequestFactory()
+
+    def tearDown(self):
+        self.user.delete()
+        self.app.delete()
+        self.token.delete()
+
+
+class TestOAuth2Backend(BaseTest):
+
+    def test_authenticate(self):
+        auth_headers = {
+            'HTTP_AUTHORIZATION': 'Bearer ' + 'tokstr',
+        }
+        request = self.factory.get("/a-resource", **auth_headers)
+
+        backend = OAuth2Backend()
+        credentials = {'request': request}
+        u = backend.authenticate(**credentials)
+        self.assertEqual(u, self.user)
+
+    def test_authenticate_fail(self):
+        auth_headers = {
+            'HTTP_AUTHORIZATION': 'Bearer ' + 'badstring',
+        }
+        request = self.factory.get("/a-resource", **auth_headers)
+
+        backend = OAuth2Backend()
+        credentials = {'request': request}
+        self.assertIsNone(backend.authenticate(**credentials))
+
+        credentials = {'username': 'u', 'password': 'p'}
+        self.assertIsNone(backend.authenticate(**credentials))
+
+    def test_get_user(self):
+        backend = OAuth2Backend()
+        self.assertEqual(self.user, backend.get_user(self.user.pk))
+
+
+@override_settings(
+    AUTHENTICATION_BACKENDS=(
+        'oauth2_provider.backends.OAuth2Backend',
+        'django.contrib.auth.backends.ModelBackend',
+    ),
+    MIDDLEWARE_CLASSES=MIDDLEWARE_CLASSES+('oauth2_provider.middleware.OAuth2TokenMiddleware',)
+)
+class TestOAuth2Middleware(BaseTest):
+
+    def setUp(self):
+        super(TestOAuth2Middleware, self).setUp()
+        self.anon_user = AnonymousUser()
+
+    def test_middleware_wrong_headers(self):
+        m = OAuth2TokenMiddleware()
+        request = self.factory.get("/a-resource")
+        self.assertIsNone(m.process_request(request))
+        auth_headers = {
+            'HTTP_AUTHORIZATION': 'Beerer ' + 'badstring',  # a Beer token for you!
+        }
+        request = self.factory.get("/a-resource", **auth_headers)
+        self.assertIsNone(m.process_request(request))
+
+    def test_middleware_user_is_set(self):
+        m = OAuth2TokenMiddleware()
+        auth_headers = {
+            'HTTP_AUTHORIZATION': 'Bearer ' + 'tokstr',
+        }
+        request = self.factory.get("/a-resource", **auth_headers)
+        request.user = self.user
+        self.assertIsNone(m.process_request(request))
+        request.user = self.anon_user
+        self.assertIsNone(m.process_request(request))
+
+    def test_middleware_success(self):
+        m = OAuth2TokenMiddleware()
+        auth_headers = {
+            'HTTP_AUTHORIZATION': 'Bearer ' + 'tokstr',
+        }
+        request = self.factory.get("/a-resource", **auth_headers)
+        m.process_request(request)
+        self.assertEqual(request.user, self.user)