mirror of
https://github.com/simple-login/app.git
synced 2024-11-16 08:58:30 +01:00
89 lines
2.6 KiB
Python
89 lines
2.6 KiB
Python
from time import time
|
|
|
|
from flask import url_for
|
|
|
|
from app.db import Session
|
|
from app.models import User, ApiKey
|
|
from tests.utils import login
|
|
|
|
|
|
def test_api_key_page_requires_password(flask_client):
|
|
r = flask_client.get(
|
|
url_for("dashboard.api_key"),
|
|
)
|
|
|
|
assert r.status_code == 302
|
|
|
|
|
|
def test_create_delete_api_key(flask_client):
|
|
user = login(flask_client)
|
|
nb_api_key = ApiKey.count()
|
|
|
|
# to bypass sudo mode
|
|
with flask_client.session_transaction() as session:
|
|
session["sudo_time"] = int(time())
|
|
|
|
# create api_key
|
|
create_r = flask_client.post(
|
|
url_for("dashboard.api_key"),
|
|
data={"form-name": "create", "name": "for test"},
|
|
follow_redirects=True,
|
|
)
|
|
assert create_r.status_code == 200
|
|
api_key = ApiKey.get_by(user_id=user.id)
|
|
assert ApiKey.filter(ApiKey.user_id == user.id).count() == 1
|
|
assert api_key.name == "for test"
|
|
|
|
# delete api_key
|
|
delete_r = flask_client.post(
|
|
url_for("dashboard.api_key"),
|
|
data={"form-name": "delete", "api-key-id": api_key.id},
|
|
follow_redirects=True,
|
|
)
|
|
assert delete_r.status_code == 200
|
|
assert ApiKey.count() == nb_api_key
|
|
|
|
|
|
def test_delete_all_api_keys(flask_client):
|
|
nb_api_keys = ApiKey.count()
|
|
|
|
# create two test users
|
|
user_1 = login(flask_client)
|
|
user_2 = User.create(
|
|
email="a2@b.c", password="password", name="Test User 2", activated=True
|
|
)
|
|
Session.commit()
|
|
|
|
# create api_key for both users
|
|
ApiKey.create(user_1.id, "for test")
|
|
ApiKey.create(user_1.id, "for test 2")
|
|
ApiKey.create(user_2.id, "for test")
|
|
Session.commit()
|
|
|
|
assert (
|
|
ApiKey.count() == nb_api_keys + 3
|
|
) # assert that the total number of API keys for all users is 3.
|
|
# assert that each user has the API keys created
|
|
assert ApiKey.filter(ApiKey.user_id == user_1.id).count() == 2
|
|
assert ApiKey.filter(ApiKey.user_id == user_2.id).count() == 1
|
|
|
|
# to bypass sudo mode
|
|
with flask_client.session_transaction() as session:
|
|
session["sudo_time"] = int(time())
|
|
|
|
# delete all of user 1's API keys
|
|
r = flask_client.post(
|
|
url_for("dashboard.api_key"),
|
|
data={"form-name": "delete-all"},
|
|
follow_redirects=True,
|
|
)
|
|
assert r.status_code == 200
|
|
assert (
|
|
ApiKey.count() == nb_api_keys + 1
|
|
) # assert that the total number of API keys for all users is now 1.
|
|
assert (
|
|
ApiKey.filter(ApiKey.user_id == user_1.id).count() == 0
|
|
) # assert that user 1 now has 0 API keys
|
|
assert (
|
|
ApiKey.filter(ApiKey.user_id == user_2.id).count() == 1
|
|
) # assert that user 2 still has 1 API key
|