֛h]SrSSKrSSKJr SSKJrJr SSKJr SSK J r J r J r J r Jr SSKJr SSKJr SS KJr SS KJr S r"S S \ 5r"SS\5rg)z[ Tests for L{twisted.cred._digest} and the associated bits in L{twisted.cred.credentials}. N)hexlify)md5sha1) verifyObject)DigestCredentialFactoryIUsernameDigestHashcalcHA1calcHA2 calcResponse) LoginFailed) IPv4Address) networkString)TestCasecJ[R"U5R5$)N)base64 b64encodestrip)ss eC:\Users\psant\Downloads\Noiseback\school\venv\Lib\site-packages\twisted/cred/test/test_digestauth.pyrrs   A  $ $ &&c8^\rSrSrSrU4SjrSrSrSrU=r $)FakeDigestCredentialFactory!zP A Fake Digest Credential Factory that generates a predictable nonce and opaque c4>[TU]"U0UD6 SUlg)N0)super__init__ privateKey)selfargskwargs __class__s rr$FakeDigestCredentialFactory.__init__'s $)&)rcg)z Generate a static nonce s178288758716122392881254770685rs r_generateNonce*FakeDigestCredentialFactory._generateNonce+s1rcg)z Return a stable time rr%r&s r_getTime$FakeDigestCredentialFactory._getTime1sr)r) __name__ __module__ __qualname____firstlineno____doc__rr'r*__static_attributes__ __classcell__)r"s@rrr!s 1 rrc&\rSrSrSrSrS\4SjrSrSr S\4Sjr S\4S jr S r S r S rS rS\4SjrSrSrS\4SjrSrSrS+SjrSrS+SjrSrSrSrSrSrSrSrSr Sr!S r"S!r#S"r$S#r%S$r&S%r'S&r(S'r)S(r*S)r+g*),DigestAuthTests8z L{TestCase} mixin class which defines a number of tests for L{DigestCredentialFactory}. Because this mixin defines C{setUp}, it must be inherited before L{TestCase}. cSUlSUlSUlSUlSUlSUlSUl[SS S 5UlS Ul [URUR5Ul g ) z. Create a DigestCredentialFactory for testing foobarsbazquuxs test realmmd5s 29fc54aa1641c6fa0e151419361c8f23auths/write/TCPz10.2.3.4iuGETN) usernamepasswordrealm algorithmcnonceqopurir clientAddressmethodrcredentialFactoryr&s rsetUpDigestAuthTests.setUp?sd" " " 9 ( EB !8!Trr8c8Sn[XRURURX0R5nSR URURUR45n[ U"U5R55nURXF5 g)zv L{calcHA1} accepts the C{'md5'} algorithm and returns an MD5 hash of its parameters, excluding the nonce and cnonce. s abc123xyz:N) r r<r>r=r@joinrdigest assertEqual)r _algorithm_hashnoncehashA1a1expecteds rtest_MD5HashA1DigestAuthTests.test_MD5HashA1Nst   tzz4==% YY tzz4==A B59++-. *rcSn[SURURURXR5nURS-UR-S-UR-n[ [ U5R55nUS-U-S-UR-n[ [ U5R55nURX%5 g)z{ L{calcHA1} accepts the C{'md5-sess'} algorithm and returns an MD5 hash of its parameters, including the nonce and cnonce. s xyz321abcmd5-sessrIN) r r<r>r=r@rrrKrL)rrOrPrQha1rRs rtest_MD5SessionHashA1%DigestAuthTests.test_MD5SessionHashA1[s   DMM5++ ]]T !DJJ . 5 Ec"gnn&' 4Z% $ & 43r7>>+, *rc0URS[5 g)zu L{calcHA1} accepts the C{'sha'} algorithm and returns a SHA hash of its parameters, excluding the nonce and cnonce. shaN)rSrr&s rtest_SHAHashA1DigestAuthTests.test_SHAHashA1js FD)rcSn[XURSS5nUS-UR-n[U"U5R55nUR XF5 g)z L{calcHA2} accepts the C{'md5'} algorithm and returns an MD5 hash of its arguments, excluding the entity hash for QOP other than C{'auth-int'}. r;r9NrIr rBrrKrL)rrMrNrDhashA2a2rRs rtest_MD5HashA2Auth"DigestAuthTests.test_MD5HashA2AuthqsT TXXwE d]TXX %59++-. *rcSnSn[XURSU5nUS-UR-S-U-n[U"U5R55nUR XW5 g)z L{calcHA2} accepts the C{'md5'} algorithm and returns an MD5 hash of its arguments, including the entity hash for QOP of C{'auth-int'}. r;s foobarbazsauth-intrINr_)rrMrNrDhentityr`rarRs rtest_MD5HashA2AuthInt%DigestAuthTests.test_MD5HashA2AuthInt}sc TXX{GL d]TXX % ,w 659++-. *rc&URS5 g)z L{calcHA2} accepts the C{'md5-sess'} algorithm and QOP of C{'auth'} and returns the same value as it does for the C{'md5'} algorithm. rVN)rbr&s rtest_MD5SessHashA2Auth&DigestAuthTests.test_MD5SessHashA2Auths  ,rc&URS5 g)z L{calcHA2} accepts the C{'md5-sess'} algorithm and QOP of C{'auth-int'} and returns the same value as it does for the C{'md5'} algorithm. rVN)rfr&s rtest_MD5SessHashA2AuthInt)DigestAuthTests.test_MD5SessHashA2AuthInts "";/rc0URS[5 g)z L{calcHA2} accepts the C{'sha'} algorithm and returns a SHA hash of its arguments, excluding the entity hash for QOP other than C{'auth-int'}. r[N)rbrr&s rtest_SHAHashA2Auth"DigestAuthTests.test_SHAHashA2Auths -rc0URS[5 g)z L{calcHA2} accepts the C{'sha'} algorithm and returns a SHA hash of its arguments, including the entity hash for QOP of C{'auth-int'}. r[N)rfrr&s rtest_SHAHashA2AuthInt%DigestAuthTests.test_SHAHashA2AuthInts ""640rc SnSnSnUS-U-S-U-n[U"U5R55n[X4XSSS5nURXx5 g)z L{calcResponse} accepts the C{'md5'} algorithm and returns an MD5 hash of its parameters, excluding the nonce count, client nonce, and QoP value if the nonce count and client nonce are L{None} abc123789xyzlmnopqrINrrKr rL) rrMrNrPr`rOresponserRrKs rtest_MD5HashResponse$DigestAuthTests.test_MD5HashResponsesb D=5(4/&85?1134fjtTR *rc&URS5 g)z L{calcResponse} accepts the C{'md5-sess'} algorithm and returns an MD5 hash of its parameters, excluding the nonce count, client nonce, and QoP value if the nonce count and client nonce are L{None} rVN)rzr&s rtest_MD5SessionHashResponse+DigestAuthTests.test_MD5SessionHashResponses !!+.rc0URS[5 g)z L{calcResponse} accepts the C{'sha'} algorithm and returns a SHA hash of its parameters, excluding the nonce count, client nonce, and QoP value if the nonce count and client nonce are L{None} r[N)rzrr&s rtest_SHAHashResponse$DigestAuthTests.test_SHAHashResponses !!&$/rc SnSnSnSnSnSnUS-U-S-U-S-U-S-U-S-U-n [U"U 5R55n [X4XXgU5n URX5 g) z L{calcResponse} accepts the C{'md5'} algorithm and returns an MD5 hash of its parameters, including the nonce count, client nonce, and QoP value if they are specified. rurvrws00000004s abcxyz123r9rINrx) rrMrNrPr`rO nonceCount clientNoncerAryrRrKs rtest_MD5HashResponseExtra)DigestAuthTests.test_MD5HashResponseExtras  "                  5?1134 Jz  *rc&URS5 g)z L{calcResponse} accepts the C{'md5-sess'} algorithm and returns an MD5 hash of its parameters, including the nonce count, client nonce, and QoP value if they are specified. rVN)rr&s r test_MD5SessionHashResponseExtra0DigestAuthTests.test_MD5SessionHashResponseExtras &&{3rc0URS[5 g)z L{calcResponse} accepts the C{'sha'} algorithm and returns a SHA hash of its parameters, including the nonce count, client nonce, and QoP value if they are specified. r[N)rrr&s rtest_SHAHashResponseExtra)DigestAuthTests.test_SHAHashResponseExtras &&vt4rc SU;aURUS'SU;aURUS'SU;aURUS'SU;aURUS'SU;aURUS'SU;aUR US'U(aSnOSnS R UR5VVs/sH(upEUcM SR [U5S X5U45PM* snn5$s snnf) a Format all given keyword arguments and their values suitably for use as the value of an HTTP header. @types quotes: C{bool} @param quotes: A flag indicating whether to quote the values of each field in the response. @param **kw: Keywords and C{bytes} values which will be treated as field name/value pairs to include in the result. @rtype: C{bytes} @return: The given fields formatted for use as an HTTP header value. r<r>r?rAr@rB"rs, =) r<r>r?rAr@rBrJitemsr)rquoteskwquotekvs rformatResponseDigestAuthTests.formatResponses R !]]BzN " **BwK b "nnB{O ?BuI 2 ;;BxL ?BuI EEzz!hhj (FQD-*D%EBC(    s ) C 6"C c VURS5nURS5R5nURS5n[X@RURUR X0R 5n[USURUS5n[XgXCX R U5nU$)z0 Calculate the response for the given challenge rOr?rAr;N) getlowerr r<r>r=r@r rBr ) r challengencountrOalgorArWha2rRs rgetDigestResponse!DigestAuthTests.getDigestResponses g&}}[)//1mmE" --T]]E;; dFDHHc48$v{{CPrcURRURR5nSnUR UUSUR X#5UUSS9nURR X@RURR5nURURUR55 URURURS-55 g)z L{DigestCredentialFactory.decode} accepts a digest challenge response and parses it into an L{IUsernameHashedPassword} provider. 00000001rOopaque)rrOryncrwrongN rE getChallengerChostrrdecoderD assertTrue checkPasswordr= assertFalse)rrrrclientResponsecredss r test_responseDigestAuthTests.test_response.s **778J8J8O8OP ,,G$++I:X& - &&-- KK););)@)@  ++DMM:; ,,T]]X-EFGrc&URS5 g)z L{DigestCredentialFactory.decode} accepts a digest challenge response which does not quote the values of its fields and parses it into an L{IUsernameHashedPassword} provider in the same way it would a response which included quoted field values. FN)rr&s rtest_responseWithoutQuotes*DigestAuthTests.test_responseWithoutQuotesCs 5!rc4SUlURS5 g)z L{DigestCredentialFactory.decode} accepts a digest challenge response which quotes the values of its fields and includes a C{b","} in the URI field. s /some,path/TN)rBrr&s rtest_responseWithCommaURI)DigestAuthTests.test_responseWithCommaURILs " 4 rc2SUlUR5 g)z[ The case of the algorithm value in the response is ignored when checking the credentials. sMD5Nr?rr&s rtest_caseInsensitiveAlgorithm-DigestAuthTests.test_caseInsensitiveAlgorithmUs   rc2SUlUR5 g)zF The algorithm defaults to MD5 if it is not supplied in the response. Nrr&s rtest_md5DefaultAlgorithm(DigestAuthTests.test_md5DefaultAlgorithm]s rcURRS5nSnURUSURX5UUSS9nURR X0R S5nUR URUR55 URURURS-55 g)z{ L{DigestCredentialFactory.decode} accepts a digest challenge response even if the client address it is passed is L{None}. NrrOrrOryrrr) rErrrrrDrrr=rrrrrrs rtest_responseWithoutClientIP,DigestAuthTests.test_responseWithoutClientIPds **77= ,,G$++I:X& -  &&--nkk4P ++DMM:; ,,T]]X-EFGrcJURRURR5nSnUR USUR X5UUSS9nURR X0RURR5nURURUR55 URURURS-55 SnUR USUR X5UUSS9nURR X0RURR5nURURUR55 URURURS-55 g)zU L{DigestCredentialFactory.decode} handles multiple responses to a single challenge. rrOrrrs00000002Nrrs rtest_multiResponse"DigestAuthTests.test_multiResponsevst **778J8J8O8OP ,,G$++I:X& - &&-- KK););)@)@  ++DMM:; ,,T]]X-EFG ,,G$++I:X& - &&-- KK););)@)@  ++DMM:; ,,T]]X-EFGrcURRURR5nSnUR USUR X5UUSS9nURR USURR5nURURUR55 URURURS-55 g)z L{DigestCredentialFactory.decode} returns an L{IUsernameHashedPassword} provider which rejects a correct password for the given user if the challenge response request is made using a different HTTP method than was used to request the initial challenge. rrOrrsPOSTrN) rErrCrrrrrrr=rs rtest_failsWithDifferentMethod-DigestAuthTests.test_failsWithDifferentMethods**778J8J8O8OP ,,G$++I:X& -  &&-- GT%7%7%<%<  ,,T]];< ,,T]]X-EFGrcUR[URRUR SS9UR UR R5nUR[U5S5 UR[URRUR SS9UR UR R5nUR[U5S5 g)z L{DigestCredentialFactory.decode} raises L{LoginFailed} if the response has no username field or if the username field is empty. N)r<z$Invalid response, no username given.r assertRaisesr rErrrDrCrrLstrres rtest_noUsernameDigestAuthTests.test_noUsernames      " " ) )     . KK    # #   Q!GH      " " ) )     - KK    # #   Q!GHrcUR[URRUR SS9UR UR R5nUR[U5S5 g)zW L{DigestCredentialFactory.decode} raises L{LoginFailed} if the response has no nonce. ru)rz!Invalid response, no nonce given.Nrrs r test_noNonceDigestAuthTests.test_noNoncesd      " " ) )   y  1 KK    # #   Q!DErcUR[URRUR 5UR UR R5nUR[U5S5 g)zX L{DigestCredentialFactory.decode} raises L{LoginFailed} if the response has no opaque. z"Invalid response, no opaque given.Nrrs r test_noOpaqueDigestAuthTests.test_noOpaques_      " " ) )    ! KK    # #   Q!EFrcURRURR5nSnUR USUR X5UUSS9nURR X0RURR5nUR[[U55 URS-UR-S-UR-n[U5nURUR[!UR#5555 UR%S5 UR'UR[!UR#5555 g)z L{DigestCredentialFactory.decode} returns an L{IUsernameDigestHash} provider which can verify a hash of the form 'username:realm:password'. rrOrrrIrN)rErrCrrrrrDrrrr<r>r=r checkHashrrKupdater)rrrrr cleartexthashs rtest_checkHashDigestAuthTests.test_checkHashs  **778J8J8O8OP ,,G$++I:X& - &&-- KK););)@)@   %8%@AMMD(4::5?@ H )?@Arc [URUR5nURURR 5nUR [URSUSURR 5nUR[U5S5 S[S5-nUR [URUUSURR 5nUR[U5S5 UR [URSUSURR 5nUR[U5S5 S[SRUS[URR 5S455-nUR [URUUSURR 5nUR[U5S 5 g ) zx L{DigestCredentialFactory.decode} raises L{LoginFailed} when the opaque value does not contain all the required parts. s badOpaquerOz&Invalid response, invalid opaque valuesfoo-snonce,clientipr,r7z,Invalid response, invalid opaque/time valuesN)rr?r>rrCrrr _verifyOpaquerLrrrJr)rrErexc badOpaques rtest_invalidOpaque"DigestAuthTests.test_invalidOpaques 8 S%2243E3E3J3JK    + +  g     # #   S#KLi(9::    + +  g     # #   S#KL   + +  g     # #   S#KLi II7#]43E3E3J3J%KYW      + +  g     # #   S#QRrc([URUR5nURURR 5nUR SURR 5nUR[URUUSURR 5nUR[U5S5 UR[URUSURR 5nUR[U5S5 g)z L{DigestCredentialFactory.decode} raises L{LoginFailed} when the given nonce from the response does not match the nonce encoded in the opaque. s 1234567890rOz2Invalid response, incompatible opaque/nonce valuesrN) rr?r>rrCr_generateOpaquerr rrLr)rrErbadNonceOpaquers rtest_incompatibleNonce&DigestAuthTests.test_incompatibleNonce1s 8 S%2243E3E3J3JK *:: 4--22    + +  g     # #   S#WX   + +      # #   S#WXrc|[URUR5nURURR 5nSnUR URR U5 URUSU5nUR[URUUSURR 5 g)z L{DigestCredentialFactory.decode} raises L{LoginFailed} when the request comes from a client IP other than what is encoded in the opaque. z10.0.0.1rON) rr?r>rrCrassertNotEqualrrr r)rrEr badAddressrs rtest_incompatibleClientIP)DigestAuthTests.test_incompatibleClientIPOs 8 S%2243E3E3J3JK   D..33Z@*:: g       + +  g     # #  rc[URUR5nURURR 5nSR US[URR 5S45n[[X1R-5R55n[U5nSR XERS545nUR[UR UUSURR 5 g)z L{DigestCredentialFactory.decode} raises L{LoginFailed} when the given opaque is older than C{DigestCredentialFactory.CHALLENGE_LIFETIME_SECS} rrOs -137876876- N)rr?r>rrCrrJrrrrrKrrrr r)rrErkeyrKekeyoldNonceOpaques r test_oldNonceDigestAuthTests.test_oldNoncehs 8 S%2243E3E3J3JK ii w t/A/A/F/F!G W S#?#??@GGIJ~FJJu,=#>?    + +  g     # #  rc[URUR5nURURR 5nSR US[URR 5S45n[[US-5R55nSR U[U545nUR[URUUSURR 5 g)zf L{DigestCredentialFactory.decode} raises L{LoginFailed} when the opaque checksum fails verification. rrOrsthis is not the right pkeyrN)rr?r>rrCrrJrrrrKrrr r)rrErrrK badChecksums rtest_mismatchedOpaqueChecksum-DigestAuthTests.test_mismatchedOpaqueChecksums 8 S%2243E3E3J3JK ii w t/A/A/F/F!G N S#@@AHHJKii3 89     + +  g     # #  rc ^SnUH%up#pEUR[[SUUUSSUS9 M' g)z L{calcHA1} raises L{TypeError} when any of the pszUsername, pszRealm, or pszPassword arguments are specified with the preHA1 keyword argument. ))suserrealmpasswordpreHA1)NrNr)NNrrr8snoncescnonce)preHA1N)r TypeErrorr )r arguments pszUsernamepszRealm pszPasswordrs rtest_incompatibleCalcHA1Options/DigestAuthTests.test_incompatibleCalcHA1OptionssJ  ;D 6K;     ;Drc`URRSS5nURSU5 g)zu L{DigestCredentialFactory._generateOpaque} returns a value without newlines, regardless of the length of the nonce. snlong nonce long nonce long nonce long nonce long nonce long nonce long nonce long nonce long nonce long nonce Nr)rEr assertNotIn)rrs rtest_noNewlineOpaque$DigestAuthTests.test_noNewlineOpaques- ''778KTR 'r) r?rCr@rErDr=rAr>rBr<N)T),r,r-r.r/r0rFrrSrXr\rbrfrirlrorrrzr}rrrrrrrrrrrrrrrrrrrrrrrrr r1r%rrr4r48s U)/c + +*-3# +06S +-0.1/5C+ /04:+B45& P H*"!H$!HFH,I2 F GB41SfY< 2 0 .2(rr4)r0rbinasciirhashlibrrzope.interface.verifyrtwisted.cred.credentialsrrr r r twisted.cred.errorr twisted.internet.addressr twisted.python.compatrtwisted.trial.unittestrrrr4r%rrrsP .+0/+'"9.~ (h~ (r