mirror of
https://github.com/simple-login/app.git
synced 2024-11-16 00:48:32 +01:00
25fde11a86
* Extract suffix generation and validation to a module * Updated tests * Make custom alias use signed suffixes * Added the signature check to the module * Fix invalid route * Move more suffix related stuff * Fix tests Co-authored-by: Adrià Casajús <adria.casajus@proton.ch>
146 lines
3.9 KiB
Python
146 lines
3.9 KiB
Python
import uuid
|
|
|
|
from flask import url_for, g
|
|
|
|
from app.config import EMAIL_DOMAIN, MAX_NB_EMAIL_FREE_PLAN
|
|
from app.db import Session
|
|
from app.models import Alias, CustomDomain, AliasUsedOn
|
|
from tests.utils import login, random_domain
|
|
|
|
|
|
def test_with_hostname(flask_client):
|
|
login(flask_client)
|
|
|
|
r = flask_client.post(
|
|
url_for("api.new_random_alias", hostname="www.test.com"),
|
|
)
|
|
|
|
assert r.status_code == 201
|
|
assert r.json["alias"].endswith("d1.test")
|
|
|
|
# make sure alias starts with the suggested prefix
|
|
assert r.json["alias"].startswith("test")
|
|
|
|
# assert returned field
|
|
res = r.json
|
|
assert "id" in res
|
|
assert "email" in res
|
|
assert "creation_date" in res
|
|
assert "creation_timestamp" in res
|
|
assert "nb_forward" in res
|
|
assert "nb_block" in res
|
|
assert "nb_reply" in res
|
|
assert "enabled" in res
|
|
assert "note" in res
|
|
|
|
alias_used_on: AliasUsedOn = AliasUsedOn.order_by(AliasUsedOn.id.desc()).first()
|
|
assert alias_used_on.hostname == "www.test.com"
|
|
assert alias_used_on.alias_id == res["id"]
|
|
|
|
|
|
def test_with_custom_domain(flask_client):
|
|
user = login(flask_client)
|
|
domain = random_domain()
|
|
CustomDomain.create(
|
|
user_id=user.id, domain=domain, ownership_verified=True, commit=True
|
|
)
|
|
|
|
r = flask_client.post(
|
|
url_for("api.new_random_alias", hostname="www.test.com"),
|
|
)
|
|
|
|
assert r.status_code == 201
|
|
assert r.json["alias"] == f"test@{domain}"
|
|
assert Alias.filter_by(user_id=user.id).count() == 2
|
|
|
|
# call the endpoint again, should return the same alias
|
|
r = flask_client.post(
|
|
url_for("api.new_random_alias", hostname="www.test.com"),
|
|
)
|
|
|
|
assert r.status_code == 201
|
|
assert r.json["alias"] == f"test@{domain}"
|
|
# no new alias is created
|
|
assert Alias.filter_by(user_id=user.id).count() == 2
|
|
|
|
|
|
def test_without_hostname(flask_client):
|
|
login(flask_client)
|
|
|
|
r = flask_client.post(
|
|
url_for("api.new_random_alias"),
|
|
)
|
|
|
|
assert r.status_code == 201
|
|
assert r.json["alias"].endswith(EMAIL_DOMAIN)
|
|
|
|
|
|
def test_custom_mode(flask_client):
|
|
login(flask_client)
|
|
|
|
# without note
|
|
r = flask_client.post(
|
|
url_for("api.new_random_alias", mode="uuid"),
|
|
)
|
|
|
|
assert r.status_code == 201
|
|
# extract the uuid part
|
|
alias = r.json["alias"]
|
|
uuid_part = alias[: len(alias) - len(EMAIL_DOMAIN) - 1]
|
|
assert is_valid_uuid(uuid_part)
|
|
|
|
# with note
|
|
r = flask_client.post(
|
|
url_for("api.new_random_alias", mode="uuid"),
|
|
json={"note": "test note"},
|
|
)
|
|
|
|
assert r.status_code == 201
|
|
alias = r.json["alias"]
|
|
ge = Alias.get_by(email=alias)
|
|
assert ge.note == "test note"
|
|
|
|
|
|
def test_out_of_quota(flask_client):
|
|
user = login(flask_client)
|
|
user.trial_end = None
|
|
Session.commit()
|
|
|
|
# create MAX_NB_EMAIL_FREE_PLAN random alias to run out of quota
|
|
for _ in range(MAX_NB_EMAIL_FREE_PLAN):
|
|
Alias.create_new(user, prefix="test1")
|
|
|
|
r = flask_client.post(
|
|
url_for("api.new_random_alias", hostname="www.test.com"),
|
|
)
|
|
|
|
assert r.status_code == 400
|
|
assert (
|
|
r.json["error"] == "You have reached the limitation of a free account with "
|
|
"the maximum of 3 aliases, please upgrade your plan to create more aliases"
|
|
)
|
|
|
|
|
|
def test_too_many_requests(flask_client):
|
|
login(flask_client)
|
|
|
|
# can't create more than 5 aliases in 1 minute
|
|
for _ in range(7):
|
|
r = flask_client.post(
|
|
url_for("api.new_random_alias", hostname="www.test.com", mode="uuid"),
|
|
)
|
|
# to make flask-limiter work with unit test
|
|
# https://github.com/alisaifee/flask-limiter/issues/147#issuecomment-642683820
|
|
g._rate_limiting_complete = False
|
|
else:
|
|
# last request
|
|
assert r.status_code == 429
|
|
assert r.json == {"error": "Rate limit exceeded"}
|
|
|
|
|
|
def is_valid_uuid(val):
|
|
try:
|
|
uuid.UUID(str(val))
|
|
return True
|
|
except ValueError:
|
|
return False
|