כh\&SrSSKrSSKJr SSKJr SSKJrJr SSK J r J r J r SSK Jr SSKJr SS KJr SS KJr SS KJr SS KJr SS KJr SSKJrJr SSKJr SSK J!r!J"r" SSK#J$r$ SSK%J&r&J'r'J(r( SSK)J*r* SSK+J,r, SSK-J.r. Sr/"SS5r0"SS5r1"SS\1\0\Rd5r3"SS\1\Rd5r4"SS \1\Rd5r5\"\Rl5 "S!S"5r7"S#S$\Rd5r8g)%z! Tests for L{twisted.web._auth}. N) implementer) verifyObject)errorportal) ANONYMOUSAllowAnonymousAccess'InMemoryUsernamePasswordDatabaseDontUse)IUsernamePassword) IPv4Address)ConnectionDone)EventLoggingObserver)globalLogPublisher)Failure)unittest)basicdigest)BasicCredentialFactory)HTTPAuthSessionWrapperUnauthorizedResource)ICredentialFactory) IResourceResourcegetChildForRequest NOT_DONE_YET)Data) DummyRequestcJ[R"U5R5$N)base64 b64encodestrip)ss bC:\Users\psant\Downloads\Noiseback\school\venv\Lib\site-packages\twisted/web/test/test_httpauth.pyr!r!%s   A  $ $ &&cF\rSrSrSrSrS SjrSrSrSr S r S r S r g) BasicAuthTestsMixin)z L{TestCase} mixin class which defines a number of tests for L{basic.BasicCredentialFactory}. Because this mixin defines C{setUp}, it must be inherited before L{TestCase}. cUR5UlSUlSUlSUl[ R "UR5Ulg)NsfoosdreidsS3CuR1Ty) makeRequestrequestrealmusernamepasswordrrcredentialFactoryselfs r$setUpBasicAuthTestsMixin.setUp0s>'')    # !&!=!=djj!Ir%Nc4[UR<S35e)z Create a request object to be passed to L{basic.BasicCredentialFactory.decode} along with a response value. Override this in a subclass. z did not implement makeRequest)NotImplementedError __class__)r1method clientAddresss r$r*BasicAuthTestsMixin.makeRequest7s "T^^$66T"UVVr%cVUR[[UR55 g)z= L{BasicCredentialFactory} implements L{ICredentialFactory}. N assertTruerrr/r0s r$test_interface"BasicAuthTestsMixin.test_interface?  %79O9OPQr%c[SRURSUR/55nURR XR 5nUR[R"U55 URURUR55 URURURS-55 g)z L{basic.BasicCredentialFactory.decode} turns a base64-encoded response into a L{UsernamePassword} object with a password which reflects the one which was encoded in the response. r%:swrongN) r!joinr-r.r/decoder+r<r providedBy checkPassword assertFalser1responsecredss r$test_usernamePassword)BasicAuthTestsMixin.test_usernamePasswordEs SXXt}}dDMM&JKL&&--h E )44U;< ++DMM:; ,,T]]X-EFGr%cd[SRURSUR/55nUR S5nUR R XR5nUR[[U55 URURUR55 g)zb L{basic.BasicCredentialFactory.decode} decodes a base64-encoded response with incorrect padding. r%rA=N) r!rBr-r.r"r/rCr+r<rr rErGs r$test_incorrectPadding)BasicAuthTestsMixin.test_incorrectPaddingRs} SXXt}}dDMM&JKL>>$'&&--h E  %6>? ++DMM:;r%cSnUR[RURRUUR 55 g)zp L{basic.BasicCredentialFactory.decode} raises L{LoginFailed} if passed a response which is not base64-encoded. xN) assertRaisesr LoginFailedr/rCr*r1rHs r$test_invalidEncoding(BasicAuthTestsMixin.test_invalidEncoding^s>       " " ) )       r%c[S5nUR[RURR UUR 55 g)z} L{basic.BasicCredentialFactory.decode} raises L{LoginFailed} when passed a response which is not valid base64-encoded text. s123abc+/N)r!rRrrSr/rCr*rTs r$test_invalidCredentials+BasicAuthTestsMixin.test_invalidCredentialsksC [)      " " ) )       r%)r/r.r,r+r-GETN) __name__ __module__ __qualname____firstlineno____doc__r2r*r=rJrNrUrX__static_attributes__r%r$r'r')s. JWR H <    r%r'c\rSrSrSSjrSrg) RequestMixinyNcTUc [SSS5n[S5nXlX#lU$)zW Create a L{DummyRequest} (change me to create a L{twisted.web.http.Request} instead). TCP localhosti/)r rr7client)r1r7r8r+s r$r*RequestMixin.makeRequestzs1  '{DAMt$&r%rbrZ)r\r]r^r_r*rarbr%r$rdrdys r%rdc\rSrSrSrSrg)BasicAuthTestszC Basic authentication tests which use L{twisted.web.http.Request}. rbN)r\r]r^r_r`rarbr%r$rmrmsr%rmc6\rSrSrSrSrSrSrSrSr Sr g ) DigestAuthTestszD Digest authentication tests which use L{twisted.web.http.Request}. cSUlSUl[R"URUR5UlUR 5Ulg)z. Create a DigestCredentialFactory for testing test realmmd5N)r, algorithmrDigestCredentialFactoryr/r*r+r0s r$r2DigestAuthTests.setUpsD# !'!?!? NNDJJ" '') r%c,^^^^^SmSmS/m[5mUUUUU4SjnTRTRRSU5 TR T[ STS55nTRR TU5 TRTS5 g ) z L{digest.DigestCredentialFactory.decode} calls the C{decode} method on L{twisted.cred.digest.DigestCredentialFactory} with the HTTP method and host of the request. s 169.254.0.1r[Fc|>TRTU5 TRTU5 TRTU5 STS'g)NTr) assertEqual) _response_method_hostdonehostr7rHr1s r$check*DigestAuthTests.test_decode..checks<   Xy 1   VW -   T5 )DGr%rCrgQrN)objectpatchr/rr*r rCr<)r1rreqr~rr7rHs` @@@@r$ test_decodeDigestAuthTests.test_decodes w8   4))00(EBv{5$'CD %%h4 Q r%cVUR[[UR55 g)z> L{DigestCredentialFactory} implements L{ICredentialFactory}. Nr;r0s r$r=DigestAuthTests.test_interfacer?r%cfURRUR5nURUSS5 URUSS5 URUSS5 UR SU5 UR SU5 UR 5HnUR S U5 M g ) a8 The challenge issued by L{DigestCredentialFactory.getChallenge} must include C{'qop'}, C{'realm'}, C{'algorithm'}, C{'nonce'}, and C{'opaque'} keys. The values for the C{'realm'} and C{'algorithm'} keys must match the values supplied to the factory's initializer. None of the values may have newlines in them. qopauthr,rsrurtnonceopaque N)r/ getChallenger+rzassertInvalues assertNotIn)r1 challengevs r$test_getChallenge!DigestAuthTests.test_getChallenges**77 E  5)73 7+]; ;/8 gy) h *!!#A   UA &$r%c$URSS5nURRU5nURUSS5 URUSS5 URUSS5 UR S U5 UR S U5 g) z L{DigestCredentialFactory.getChallenge} can issue a challenge even if the L{Request} it is passed returns L{None} from C{getClientIP}. r[Nrrr,rsrurtrr)r*r/rrzr)r1r+rs r$ test_getChallengeWithoutClientIP0DigestAuthTests.test_getChallengeWithoutClientIPs ""640**77@  5)73 7+]; ;/8 gy) h *r%)rur/r,r+N) r\r]r^r_r`r2rr=rrrarbr%r$rprps! *!,R '" +r%rpc<\rSrSrSrSrSrSrSrSr Sr S r g ) UnauthorizedResourceTestsz$ Tests for L{UnauthorizedResource}. c[/5nURURSS5U5 URURSS5U5 g)z6 An L{UnauthorizedResource} is every child of itself. fooNbar)rassertIdenticalgetChildWithDefault)r1resources r$test_getChildWithDefault2UnauthorizedResourceTests.test_getChildWithDefaultsH(+ X99%FQ X99%FQr%c[[S5/5nURU5 URURS5 URUR R S5S/5 g)z Render L{UnauthorizedResource} for the given request object and verify that the response code is I{Unauthorized} and that a I{WWW-Authenticate} header is set in the response containing a challenge. example.comwww-authenticatesbasic realm="example.com"N)rrrenderrz responseCoderesponseHeaders getRawHeaders)r1r+rs r$_unauthorizedRenderTest1UnauthorizedResourceTests._unauthorizedRenderTestsb ()? )N(OPx  --s3   # # 1 12E F ) * r%cUR5nURU5 URSSRUR55 g)z L{UnauthorizedResource} renders with a 401 response code and a I{WWW-Authenticate} header and puts a simple unauthorized message into the response body. s Unauthorizedr%Nr*rrzrBwrittenr1r+s r$ test_render%UnauthorizedResourceTests.test_renders= ""$ $$W- #((7??*CDr%cURSS9nURU5 URSSRUR55 g)z The rendering behavior of L{UnauthorizedResource} for a I{HEAD} request is like its handling of a I{GET} request, but no response body is written. sHEAD)r7r%Nrrs r$test_renderHEAD)UnauthorizedResourceTests.test_renderHEADsB ""'"2 $$W- chhw78r%c[[S5/5nUR5nURU5 UR UR R S5S/5 g)z The realm value included in the I{WWW-Authenticate} header set in the response when L{UnauthorizedResounrce} is rendered has quotes and backslashes escaped. z example\"foorsbasic realm="example\\\"foo"N)rrr*rrzrr)r1rr+s r$test_renderQuotesRealm0UnauthorizedResourceTests.test_renderQuotesRealmsZ ()?)P(QR""$x    # # 1 12E F / 0 r%c [[R"SS5/5nUR5nUR U5 UR R S5SnURSU5 URSU5 g)z The digest value included in the I{WWW-Authenticate} header set in the response when L{UnauthorizedResource} is rendered has quotes and backslashes escaped. rts example\"foorrsrealm="example\\\"foo"shm="md5N)rrrvr*rrrr)r1rr+ authHeaders r$test_renderQuotesDigest1UnauthorizedResourceTests.test_renderQuotesDigestsx (  + +F4D E F ""$x ,,::;NOPQR  2J? j*-r%rbN) r\r]r^r_r`rrrrrrrarbr%r$rrs'R  E9   .r%rc*\rSrSrSrSrSrSrSrg)Realmi(a* A simple L{IRealm} implementation which gives out L{WebAvatar} for any avatarId. @type loggedIn: C{int} @ivar loggedIn: The number of times C{requestAvatar} has been invoked for L{IResource}. @type loggedOut: C{int} @ivar loggedOut: The number of times the logout callback has been invoked. c,SUlSUlXlg)Nr) loggedOutloggedIn avatarFactory)r1rs r$__init__Realm.__init__5s *r%c[U;a7U=RS- sl[URU5UR4$[ 5eN)rrrlogoutr5)r1avatarIdmind interfacess r$ requestAvatarRealm.requestAvatar:s=  " MMQ Md00:DKKG G!##r%c.U=RS- slgr)rr0s r$r Realm.logout@s !r%)rrrN) r\r]r^r_r`rrrrarbr%r$rr(s + $ r%rc\rSrSrSr\rSrSrSr Sr Sr Sr S r S rS rS rS rSrSrSrSrSrSrSrSrg)HTTPAuthHeaderTestsiDz& Tests for L{HTTPAuthSessionWrapper}. cSUlSUlSUlSUlSUl[ 5UlUR RURUR5 [URS5Ul URRUR[URS55 URUR0Ul [URR5Ul[R "URUR /5Ul/Ul[%URUR"5Ulg)zL Create a realm, portal, and L{HTTPAuthSessionWrapper} to use in the tests. sfoo barsbar bazs&contents of the avatar resource itselfs foo-childs'contents of the foo child of the avatar text/plainN)r-r. avatarContent childName childContentr checkeraddUserravatarputChildavatarsrgetr,rPortalcredentialFactoriesrwrapperr0s r$r2HTTPAuthHeaderTests.setUpKs# " F%F>@  T]]DMM:4--|<  T^^T$2C2C\-RS t{{3 4<<++, mmDJJ? #% -dkk4;S;ST r%c[URS-UR-5nURR SSU-5 [ UR U5$)z Add an I{basic authorization} header to the given request and then dispatch it, starting from C{self.wrapper} and returning the resulting L{IResource}. rA authorizationBasic )r!r-r.requestHeaders addRawHeaderrr)r1r+ authorizations r$_authorizedBasicLogin)HTTPAuthHeaderTests._authorizedBasicLogin^sM "$--$"6"FG ++,WX!$,,88r%c^^TRTR/5m[TRT5nTR 5nUU4SjnUR U5 TR U5 U$)z Resource traversal which encounters an L{HTTPAuthSessionWrapper} results in an L{UnauthorizedResource} instance when the request does not have the required I{Authorization} headers. c>>TRTRS5 gNrrzrresultr+r1s r$ cbFinished@HTTPAuthHeaderTests.test_getChildWithDefault..cbFinishedr   W113 7r%)r*rrr notifyFinish addCallbackrr1childdrr+s` @r$r,HTTPAuthHeaderTests.test_getChildWithDefaulths^ ""DNN#34"4<<9  " 8 j!ur%c`^^TRR[S55 TRTR/5mTR R SU5 [TRT5nTR5nUU4SjnURU5 TRU5 U$)a Create a request with the given value as the value of an I{Authorization} header and perform resource traversal with it, starting at C{self.wrapper}. Assert that the result is a 401 response code. Return a L{Deferred} which fires when this is all done. rrc>>TRTRS5 grrrs r$rAHTTPAuthHeaderTests._invalidAuthorizationTest..cbFinishedrr%) rappendrr*rrrrrrrr)r1rHrrrr+s` @r$_invalidAuthorizationTest-HTTPAuthHeaderTests._invalidAuthorizationTestys   ''(>}(MN""DNN#34++,HTTPAuthHeaderTests.test_getChildWithDefaultUnrecognizedSchemes --.ABBr%c^^TRR[S55 TRTR/5mTR T5nTR 5nUU4SjnURU5 TRU5 U$)z Resource traversal which encounters an L{HTTPAuthSessionWrapper} results in an L{IResource} which renders the L{IResource} avatar retrieved from the portal when the request has a valid I{Authorization} header. rcT>TRTRTR/5 gr)rzrrignoredr+r1s r$rJHTTPAuthHeaderTests.test_getChildWithDefaultAuthorized..cbFinisheds   W__t/@/@.A Br%) rrrr*rrrrrrs` @r$"test_getChildWithDefaultAuthorized6HTTPAuthHeaderTests.test_getChildWithDefaultAuthorizedsy   ''(>}(MN""DNN#34**73  " C j!ur%c^^TRR[S55 TR/5mTR T5nTR 5nUU4SjnUR U5 TRU5 U$)z Resource traversal which terminates at an L{HTTPAuthSessionWrapper} and includes correct authentication headers results in the L{IResource} avatar (not one of its children) retrieved from the portal being rendered. rcT>TRTRTR/5 gr)rzrrr s r$r=HTTPAuthHeaderTests.test_renderAuthorized..cbFinisheds   W__t/A/A.B Cr%)rrrr*rrrrrs` @r$test_renderAuthorized)HTTPAuthHeaderTests.test_renderAuthorizedsr   ''(>}(MN""2&**73  " D j!ur%c`^^^[[5"SS55nU"5mTRRT5 TR TR /5m[ TRT5nTR5nUUU4SjnURU5 TRU5 U$)z When L{HTTPAuthSessionWrapper} finds an L{ICredentialFactory} to issue a challenge, it calls the C{getChallenge} method with the request as an argument. c$\rSrSrSrSrSrSrg)UHTTPAuthHeaderTests.test_getChallengeCalledWithRequest..DumbCredentialFactoryisdumbc/Ulgrrequestsr0s r$r^HTTPAuthHeaderTests.test_getChallengeCalledWithRequest..DumbCredentialFactory.__init__s " r%c<URRU5 0$r)rrrs r$rbHTTPAuthHeaderTests.test_getChallengeCalledWithRequest..DumbCredentialFactory.getChallenges $$W- r%rN)r\r]r^r_schemerrrarbr%r$DumbCredentialFactoryrsF # r%r c@>TRTRT/5 gr)rzr)r factoryr+r1s r$rJHTTPAuthHeaderTests.test_getChallengeCalledWithRequest..cbFinisheds   W--y 9r%) rrrrr*rrrrrr)r1r rrrr"r+s` @@r$"test_getChallengeCalledWithRequest6HTTPAuthHeaderTests.test_getChallengeCalledWithRequests ' (   ) ()   ''0""DNN#34"4<<9  " : j!ur%cURR[S55 "SS[5nURR UR U"55 URUR /5nURU5nURU5 URURRS5 U$)z Issue a request for an authentication-protected resource using valid credentials and then return the C{DummyRequest} instance which was used. This is a helper for tests about the behavior of the logout callback. rc\rSrSrSrSrg)7HTTPAuthHeaderTests._logoutTest..SlowerResourceic[$rrrs r$r>HTTPAuthHeaderTests._logoutTest..SlowerResource.renders##r%rbN)r\r]r^r_rrarbr%r$SlowerResourcer(s $r%r+r) rrrrrrrr*rrrzr,r)r1r+r+rs r$ _logoutTestHTTPAuthHeaderTests._logoutTests   ''(>}(MN $X $ T^^^-=>""DNN#34**73u --q1r%cUR5nUR5 URURRS5 g)zH The realm's logout callback is invoked after the resource is rendered. rN)r,finishrzr,rrs r$ test_logoutHTTPAuthHeaderTests.test_logouts6""$ --q1r%cUR5nUR[[S555 UR UR R S5 g)z The realm's logout callback is also invoked if there is an error generating the response (for example, if the client disconnects early). zSimulated disconnectrN)r,processingFailedrr rzr,rrs r$test_logoutOnError&HTTPAuthHeaderTests.test_logoutOnError sE ""$  8N)O!PQ --q1r%cURR[S55 URUR/5nUR R SS5 [URU5nURU[5 g)z Resource traversal which enouncters an L{HTTPAuthSessionWrapper} results in an L{UnauthorizedResource} when the request has a I{Basic Authorization} header which cannot be decoded using base64. rrsBasic decode should failN) rrrr*rrrrrassertIsInstancer)r1r+rs r$test_decodeRaises%HTTPAuthHeaderTests.test_decodeRaisessr   ''(>}(MN""DNN#34++ 9 #4<<9 e%9:r%cSnURURRU5S5 [S5nURR U5 URURRU5US45 g)z L{HTTPAuthSessionWrapper._selectParseHeader} returns a two-tuple giving the L{ICredentialFactory} to use to parse the header and a string containing the portion of the header which remains to be parsed. sBasic abcdef123456)NNrs abcdef123456N)rzr_selectParseHeaderrrr)r1basicAuthorizationr"s r$test_selectParseResponse,HTTPAuthHeaderTests.test_selectParseResponse$sv 3  LL + +,> ? )7   ''0  LL + +,> ? o & r%cx^[R"U[5n"SS[5m"U4SjS5nURR U"55 UR UR/5nURRSS5 [URU5nURU5 URURS5 URS[!U55 UR#US S R$T5 UR[!UR'T55S5 g ) z Any unexpected exception raised by the credential factory's C{decode} method results in a 500 response code and causes the exception to be logged. c\rSrSrSrg)KHTTPAuthHeaderTests.test_unexpectedDecodeError..UnexpectedExceptioni=rbNr\r]r^r_rarbr%r$UnexpectedExceptionrA= r%rCc,>\rSrSrSrSrU4SjrSrg)BHTTPAuthHeaderTests.test_unexpectedDecodeError..BadFactoryi@sbadc0$rrb)r1rjs r$rOHTTPAuthHeaderTests.test_unexpectedDecodeError..BadFactory.getChallengeCs r%c>T"5errb)r1rHr+rCs r$rCIHTTPAuthHeaderTests.test_unexpectedDecodeError..BadFactory.decodeF )++r%rbN)r\r]r^r_rrrCrarCsr$ BadFactoryrF@sF  , ,r%rMrsBad abcrr log_failureN)r createWithCleanupr Exceptionrrr*rrrrrrrzr assertEqualslenr7valueflushLoggedErrors)r1 logObserverrMr+rrCs @r$test_unexpectedDecodeError.HTTPAuthHeaderTests.test_unexpectedDecodeError5s +<.UnexpectedExceptioniZrbNrBrbr%r$rCr[ZrDr%rCc(>\rSrSr\4rU4SjrSrg)DHTTPAuthHeaderTests.test_unexpectedLoginError..BrokenCheckeri]c>T"5errb)r1 credentialsrCs r$requestAvatarIdTHTTPAuthHeaderTests.test_unexpectedLoginError..BrokenChecker.requestAvatarId`rKr%rbN)r\r]r^r_r credentialInterfacesr`rarLsr$ BrokenCheckerr]]s$5#7  , ,r%rcrrNrrrON)r rPrrQrregisterCheckerrrrr*rrrrzrrRrSr7rTrU)r1rVrcr+rrCs @r$test_unexpectedLoginError-HTTPAuthHeaderTests.test_unexpectedLoginErrorSs +<}(MN""DNN#34**73u --s3 !S-. k!n];AACVW T334GHI1Mr%c^^^Sm[5TR['TR[RTR[ TS55 TR R[55 TRR[S55 TRTR/5m[TRT5nTR5nUUU4SjnUR!U5 TR#U5 U$)zT Anonymous requests are allowed if a L{Portal} has an anonymous checker registered. s*contents of the unprotected child resourcerrc@>TRTRT/5 gr)rzr)r r+r1unprotectedContentss r$r.cbFinisheds   W__/B.C Dr%)rrrrrrrrdrrrrr*rrrrr)r1rrrr+ris` @@r$test_anonymousAccess(HTTPAuthHeaderTests.test_anonymousAccessms L"** Y Y(( NND!4lC  ##$8$:;   ''(>}(MN""DNN#34"4<<9  " E j!ur%) rrrrrrrr.rr,r-rN)r\r]r^r_r`rr*r2rrrrrrrrr$r,r0r4r8r=rWrerkrarbr%r$rrDsmKU&9"(Q  C&(>,22 ; "N<N4r%r)9r`r zope.interfacerzope.interface.verifyr twisted.credrrtwisted.cred.checkersrrr twisted.cred.credentialsr twisted.internet.addressr twisted.internet.errorr twisted.internet.testingr twisted.loggerrtwisted.python.failurer twisted.trialrtwisted.web._authrrtwisted.web._auth.basicrtwisted.web._auth.wrapperrrtwisted.web.iwebrtwisted.web.resourcerrrtwisted.web.serverrtwisted.web.staticrtwisted.web.test.test_webrr!r'rdTestCasermrprIRealmrrrbr%r$rs &.& 7019-*"+:R/HH+#2'M M `  \#68I8I H+lH$5$5H+VJ. h.?.?J.Z FMM8@(++@r%