U
oajÝ ã @ s d Z ddlmZ ddlZddlZddlmZ ddlZddl Z ddl
Z
ddl m Z ddl
ZG dd„ de
jƒZG dd „ d e
jƒZed
krŒe
¡ dS ) z4Tests for the password-protected face viewer server.é )Ú annotationsN)ÚPath)Ú urlencodec @ sD e Zd Zddœdd„Zddœdd„Zddœdd„Zddœd d
„Zd S ) ÚPasswordHelpersTestÚNone©Úreturnc C s> t jddd}t j |¡}| | d¡¡ | | d¡¡ d S )Núcorrect horse batteryé † ©Z
iterationszwrong password)ÚviewerÚmake_password_hashÚPasswordVerifierÚ from_encodedÚ
assertTrueZverifyÚ assertFalse)ÚselfÚencodedÚverifier© r útest_face_viewer_server.pyÚ test_password_hash_round_trip s z1PasswordHelpersTest.test_password_hash_round_tripc C s& | t¡ tj d¡ W 5 Q R X d S )Nznot-a-valid-hash)Z assertRaisesÚ
ValueErrorr r r ©r r r r Ú test_invalid_hash_is_rejected s z1PasswordHelpersTest.test_invalid_hash_is_rejectedc C s> | t d¡tj¡ | t d¡tj¡ | t d¡d¡ d S )Nzhttps://evil.example/az//evil.example/az/tools/view.html?q=1)Ú assertEqualr Z safe_nextÚDEFAULT_TARGETr r r r Ú)test_safe_next_rejects_external_redirects s z=PasswordHelpersTest.test_safe_next_rejects_external_redirectsc C s` t jddd}| | d¡¡ | d¡ | d¡ | | d¡¡ | d¡ | | d¡¡ d S )Né é< )Z max_failuresZwindow_secondsz 203.0.113.10)r ZLoginRateLimiterr Z
is_limitedZrecord_failurer Úclear)r Zlimiterr r r Ú#test_rate_limiter_limits_and_clears! s
z7PasswordHelpersTest.test_rate_limiter_limits_and_clearsN)Ú__name__Ú
__module__Ú __qualname__r r r r! r r r r r s r c @ s¾ e Zd ZdZeddœdd„ƒZeddœdd„ƒZddd œd
d
d d d
dœdd„Zej dœd
ddœdd„Z
ddœdd„Z ddœdd„Z ddœdd„Z
ddœd d „Zddœd d „Zddœd d!„ZdS )"ÚServerIntegrationTestr r r c C sÖ t ¡ | _t| jjƒ| _| jd ¡ | jd ¡ | jd d jddd | jd d d¡ t j
| j d d
}t j
|¡}t j| j|d d }tj d
|¡| _d| j_| jjd | _tj| jjdd| _| j ¡ d S )NZtoolsZavatarz blendshape-player-natural.htmlz$viewerúutf-8)Úencodingz
sample.bins
0123456789r
r F)Z trust_proxy)ú 127.0.0.1r Té )ÚtargetZdaemon)ÚtempfileZTemporaryDirectoryÚtemp_dirr ÚnameÚrootÚmkdirZ
write_textZ write_bytesr r
Úpasswordr r Z
build_handlerÚhttpÚserverZThreadingHTTPServerZdaemon_threadsZserver_addressÚportÚ threadingZThreadZ
serve_foreverÚthreadÚstart)Úclsr r Zhandlerr r r Ú
setUpClass. s"
ÿ z ServerIntegrationTest.setUpClassc C s0 | j ¡ | j ¡ | jjdd | j ¡ d S )Nr ©Ztimeout)r2 ZshutdownZ server_closer5 Újoinr, Zcleanup)r7 r r r Ú
tearDownClassA s
z#ServerIntegrationTest.tearDownClassN©ÚbodyÚheadersÚstrz bytes | Nonezdict[str, str] | Nonez!tuple[int, dict[str, str], bytes])ÚmethodÚpathr= r> r c C s` t jjd| jdd}|j||||p$i d | ¡ }| ¡ }dd„ | ¡ D ƒ}| ¡ |j ||fS )Nr( é r9 r< c S s i | ]\}}| ¡ |“qS r )Úlower)Ú.0ÚkeyÚvaluer r r Ú
T s z1ServerIntegrationTest.request..)
r1 ZclientZHTTPConnectionr3 ÚrequestZ getresponseÚreadZ
getheadersÚcloseÚstatus) r r@ rA r= r> Z
connectionZresponseZ
response_bodyZresponse_headersr r r rH H s z ServerIntegrationTest.request©Únext_urlztuple[str, dict[str, str]])rM r c C st t | j|dœƒ d¡}| jdd|dtt|ƒƒdœd\}}}| |d¡ |d }| d
d ¡d d
d ¡d }||fS )N©r0 Únextr& ÚPOSTú /auth/loginú!application/x-www-form-urlencoded©z Content-TypezContent-Lengthr< é/ ú
set-cookieú;r) r ú=)r r0 ÚencoderH r? Úlenr Úsplit)r rM r= rK r> Ú_Z
raw_cookieÚtokenr r r ÚloginX s
þü zServerIntegrationTest.loginc C sP | dtj¡\}}}| |d¡ | |d d¡ | |d¡ | d|d ¡ d S )NÚGETrT Úlocationz5/login?next=%2Ftools%2Fblendshape-player-natural.htmló zno-storez
cache-control)rH r r r ÚassertIn)r rK r> r= r r r Ú/test_unauthenticated_request_redirects_to_loginh s þ zEServerIntegrationTest.test_unauthenticated_request_redirects_to_loginc C s¢ | dd¡\}}}| |d¡ | d|¡ | d|d ¡ tdtjdœƒ ¡ }| j d d
|d tt|ƒƒd œd
\}}}| |d¡ | d|¡ | d d¡|¡ d S )Nr^ z/loginéÈ s name="password"zdefault-src 'none'zcontent-security-policyzdefinitely wrongrN rP rQ rR rS r< i‘ rU u 올바르지r& )
rH r ra r r r rX r? rY Ú assertNotIn)r rK r> r= Zformr r r Ú"test_login_page_and_wrong_passwordr s
þü z8ServerIntegrationTest.test_login_page_and_wrong_passwordc C s | ¡ \}}|d }| d|¡ | d|¡ | d|¡ dtj› d|› i}| jdtj|d\}}}| |d ¡ | d
|¡ | d |¡ |d d
i–}| jdd|d\}}}| |d¡ | |d d¡ | |d¡ | jdd|d\}}}| |d¡ | |d d¡ | |d¡ d S )NrU ZSecureZHttpOnlyz SameSite=LaxÚCookierW r^ ©r> rc s viewerzaccess-control-allow-originÚRangez bytes=2-5ú/avatar/sample.binéÎ ú
content-rangez bytes 2-5/10s 2345ZHEADzcontent-lengthÚ4r` )r] ra r Ú COOKIE_NAMErH r r rd ) r r\ Z
login_headersZcookieÚ auth_headersrK r> r= Z
range_headersr r r Ú0test_login_cookie_allows_full_and_range_requests† s& zFServerIntegrationTest.test_login_cookie_allows_full_and_range_requestsc C sª | j dtjdtj› did\}}}| |d¡ | ¡ \}}dtj› d|› i}| j dd|d\}}}| |d¡ | d |d
¡ | j dtj|d\}}}| |d¡ d S ) Nr^ rf z =tamperedrg rT rW rP z /auth/logoutz Max-Age=0rU )rH r r rm r r] ra )r rK r[ r\ rn r> r r r Ú;test_tampered_cookie_is_rejected_and_logout_revokes_sessionž s ý zQServerIntegrationTest.test_tampered_cookie_is_rejected_and_logout_revokes_sessionc C s& | j dd\}}| |d tj¡ d S )Nzhttps://evil.example/stealrL r_ )r] r r r )r r[ r> r r r Ú*test_external_next_is_not_an_open_redirect® s z@ServerIntegrationTest.test_external_next_is_not_an_open_redirectc C sª | ¡ \}}tj› d|› ddœ}| jdd|d\}}}| |d¡ | |d d ¡ | |d
¡ d |d < | jdd|d\}}}| |d
¡ | |d d¡ | |d¡ d S )NrW zbytes=-3)rf rh r^ ri rg rj rk z bytes 7-9/10s 789z bytes=20-30rh i z
bytes */10r` )r] r rm rH r )r r\ r[ rn rK r> r= r r r Ú test_invalid_and_suffix_ranges² s z4ServerIntegrationTest.test_invalid_and_suffix_ranges)r" r# r$ r0 Ú classmethodr8 r; rH r r r] rb re ro rp rq rr r r r r r% + s ú
r% Ú__main__)Ú__doc__Z
__future__r Z http.clientr1 Z http.serverÚpathlibr r+ r4 ZunittestZ urllib.parser Zface_viewer_serverr ZTestCaser r% r" Úmainr r r r Ú s