oajSrSSKJr SSKrSSKrSSKJr SSKrSSK r SSK r SSK J r SSK r"SS\ R5r"SS \ R5r\S :Xa\ R&"5 gg) z4Tests for the password-protected face viewer server.) annotationsN)Path) urlencodec<\rSrSrSSjrSSjrSSjrSSjrSrg) PasswordHelpersTestc[R"SSS9n[RRU5nUR UR S55 UR UR S55 g)Ncorrect horse battery順 iterationszwrong password)viewermake_password_hashPasswordVerifier from_encoded assertTrueverify assertFalse)selfencodedverifiers Apackage/face/animasync-face-v3/scripts/test_face_viewer_server.pytest_password_hash_round_trip1PasswordHelpersTest.test_password_hash_round_tripsZ++,CPWX**77@ (?@A )9:;cUR[5 [RR S5 SSS5 g!,(df  g=f)Nznot-a-valid-hash) assertRaises ValueErrorrrrrs rtest_invalid_hash_is_rejected1PasswordHelpersTest.test_invalid_hash_is_rejecteds1   z *  # # 0 01C D+ * *s ? A c UR[R"S5[R5 UR[R"S5[R5 UR[R"S5S5 g)Nzhttps://evil.example/az//evil.example/az/tools/view.html?q=1) assertEqualr safe_nextDEFAULT_TARGETrs r)test_safe_next_rejects_external_redirects=PasswordHelpersTest.test_safe_next_rejects_external_redirectssc ))*BCVEZEZ[ ))*<=v?T?TU ))*@ACYZrcT[R"SSS9nURURS55 UR S5 UR S5 UR URS55 UR S5 URURS55 g)N<) max_failureswindow_secondsz 203.0.113.10)rLoginRateLimiterr is_limitedrecord_failurerclear)rlimiters r#test_rate_limiter_limits_and_clears7PasswordHelpersTest.test_rate_limiter_limits_and_clears!s))qL ++N;<~.~. **>:; n% ++N;viewerutf-8)encodingz sample.bins 0123456789r r F) trust_proxy) 127.0.0.1rT)targetdaemon)tempfileTemporaryDirectorytemp_dirrnamerootmkdir write_text write_bytesrrpasswordrr build_handlerhttpserverThreadingHTTPServerdaemon_threadsserver_addressport threadingThread serve_foreverthreadstart)clsrrhandlers r setUpClass ServerIntegrationTest.setUpClass.sE224  ))* G ""$ H ##% G > >JJ 2W K  H | +88G++CLLWM**77@&&sxxuM[[445EwO $( !::,,Q/%%SZZ-E-EdS  rcURR5 URR5 URR SS9 UR R 5 g)Nr)timeout)rUshutdown server_closer]joinrLcleanup)r_s r tearDownClass#ServerIntegrationTest.tearDownClassAsD  ! " rNbodyheadersct[RRSURSS9nUR XX4=(d 0S9 UR 5nUR 5nUR5VV s0sHupUR5U _M n nn UR5 URX4$s sn nf)NrFrdrl) rTclientHTTPConnectionrYrequest getresponseread getheaderslowerclosestatus) rmethodpathrmrn connectionresponse response_bodykeyvalueresponse_headerss rrsServerIntegrationTest.requestHs[[// TYYPQ/R 6dMrJ))+  AIATATAVWAV:3CIIK.AVW 0??Xs6B4next_urlc ([URUS.5RS5nURSSUS[ [ U55S.S9up4nUR US5 US nURS S 5S RS S 5S nXt4$)NrRnextrCPOST /auth/login!application/x-www-form-urlencodedz Content-TypezContent-Lengthrl/ set-cookie;rGr=)rrRencodersstrlenr#split)rrrmryrn_ raw_cookietokens rloginServerIntegrationTest.loginXsdmmXFGNNwW!\\   C"%c$i. *  %\*   a(+11#q9!<~rcURS[R5upnURUS5 URUSS5 URUS5 UR SUS5 g)NGETrlocationz5/login?next=%2Ftools%2Fblendshape-player-natural.htmlrzno-storez cache-control)rsrr%r#assertIn)rryrnrms r/test_unauthenticated_request_redirects_to_loginEServerIntegrationTest.test_unauthenticated_request_redirects_to_loginhsk $ UF4I4I J %  J  C  s# j'/":;rc URSS5upnURUS5 URSU5 URSUS5 [S[R S.5R 5nURS S US [[U55S .S 9upnURUS5 URSU5 URSR S5U5 g)Nrz/loginsname="password"zdefault-src 'none'zcontent-security-policyzdefinitely wrongrrrrrrliru 올바르지rC) rsr#rrrr%rrr assertNotIn)rryrnrmforms r"test_login_page_and_wrong_password8ServerIntegrationTest.test_login_page_and_wrong_passwordrs $ UH = % ($/ *G4M,NO&8&BWBWXY``b $   C"%c$i. !-!  % w/ n++G4d;rcUR5upUSnURSU5 URSU5 URSU5 S[RSU30nUR S[R US9upVnUR US 5 URS U5 URS U5 0UES S 0EnUR SSUS9upVnUR US5 UR USS5 UR US5 UR SSUS9upVnUR US5 UR USS5 UR US5 g)NrSecureHttpOnlyz SameSite=LaxCookierrrnrsviewerzaccess-control-allow-originRangez bytes=2-5/avatar/sample.bin content-rangez bytes 2-5/10s2345HEADzcontent-length4r)rrr COOKIE_NAMErsr%r#r) rr login_headerscookie auth_headersryrnrm range_headerss r0test_login_cookie_allows_full_and_range_requestsFServerIntegrationTest.test_login_cookie_allows_full_and_range_requestssb#zz||, h' j&) nf- V%7%7$8%"AB $ UF4I4IS_ ` % .5 6@><>+> $ U4HR_ ` % 1>B w' $ V5IS` a % !12C8 s#rcURS[RS[RS30S9un nUR US5 UR 5up2S[RSU30nURSSUS9upnUR US5 UR S US 5 URS[RUS9un nUR US5 g) Nrrz =tamperedrrrrz /auth/logoutz Max-Age=0r)rsrr%rr#rr)rryrrrrns r;test_tampered_cookie_is_rejected_and_logout_revokes_sessionQServerIntegrationTest.test_tampered_cookie_is_rejected_and_logout_revokes_sessions||   ! !&"4"4!5Y?@$ 1 %::< V%7%7$8%"AB !\\&.,\W % k7<#89||E6+@+@,|W 1 %rclURSS9upURUS[R5 g)Nzhttps://evil.example/stealrr)rr#rr%)rrrns r*test_external_next_is_not_an_open_redirect@ServerIntegrationTest.test_external_next_is_not_an_open_redirects0ZZ)EZF  ,f.C.CDrcUR5up[RSU3SS.nURSSUS9upEnUR US5 UR USS 5 UR US 5 S US 'URSSUS9upEnUR US 5 UR USS5 UR US5 g)Nrzbytes=-3)rrrrrrrz bytes 7-9/10s789z bytes=20-30riz bytes */10r)rrrrsr#)rrrrryrnrms rtest_invalid_and_suffix_ranges4ServerIntegrationTest.test_invalid_and_suffix_rangess::<%+%7%7$8%"AJW $ U4HR^ _ % 1>B v& - W $ U4HR^ _ % 1<@ s#rr4r5) rzrr{rrmz bytes | Nonernzdict[str, str] | Noner6z!tuple[int, dict[str, str], bytes])rrr6ztuple[str, dict[str, str]])r8r9r:r;rR classmethodrarjrsrr%rrrrrrrr<r4rrr>r>+s&H$")- @@@  @ ' @ +@ (.'<'< <<($0& E $rr>__main__)__doc__ __future__r http.clientrT http.serverpathlibrrJrZunittest urllib.parserface_viewer_serverrTestCaserr>r8mainr4rrrsb:""#=(++=4S$H--S$l z MMOr