1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
|
from unittest.mock import Mock, patch
import pytest
from ninja import NinjaAPI
from ninja.testing import TestClient
def test_intro():
from docs.src.tutorial.authentication.code001 import api
client = TestClient(api)
assert client.get("/pets").status_code == 401
user = Mock()
user.is_authenticated = True
response = client.get("/pets", user=user)
assert response.status_code == 200
@pytest.mark.django_db
def test_examples():
from someapp.models import Client
api = NinjaAPI()
Client.objects.create(key="12345")
with patch("builtins.api", api, create=True):
import docs.src.tutorial.authentication.apikey01 # noqa: F401
import docs.src.tutorial.authentication.apikey02 # noqa: F401
import docs.src.tutorial.authentication.apikey03 # noqa: F401
import docs.src.tutorial.authentication.basic01 # noqa: F401
import docs.src.tutorial.authentication.bearer01 # noqa: F401
import docs.src.tutorial.authentication.code001 # noqa: F401
import docs.src.tutorial.authentication.code002 # noqa: F401
import docs.src.tutorial.authentication.multiple01 # noqa: F401
import docs.src.tutorial.authentication.schema01 # noqa: F401
client = TestClient(api)
response = client.get("/ipwhitelist", META={"REMOTE_ADDR": "127.0.0.1"})
assert response.status_code == 401
response = client.get("/ipwhitelist", META={"REMOTE_ADDR": "8.8.8.8"})
assert response.status_code == 200
# Api key --------------------------------
response = client.get("/apikey")
assert response.status_code == 401
response = client.get("/apikey?api_key=12345")
assert response.status_code == 200
response = client.get("/headerkey")
assert response.status_code == 401
response = client.get("/headerkey", headers={"X-API-Key": "supersecret"})
assert response.status_code == 200
response = client.get("/cookiekey")
assert response.status_code == 401
response = client.get("/cookiekey", COOKIES={"key": "supersecret"})
assert response.status_code == 200
# Basic http --------------------------------
response = client.get("/basic")
assert response.status_code == 401
response = client.get(
"/basic", headers={"Authorization": "Basic YWRtaW46c2VjcmV0"}
)
assert response.status_code == 200
assert response.json() == {"httpuser": "admin"}
# Bearer http --------------------------------
response = client.get("/bearer")
assert response.status_code == 401
response = client.get(
"/bearer", headers={"Authorization": "Bearer supersecret"}
)
assert response.status_code == 200
# Multiple ------------------------------------
assert client.get("/multiple").status_code == 401
assert client.get("/multiple?key=supersecret").status_code == 200
assert (
client.get("/multiple", headers={"key": "supersecret"}).status_code == 200
)
def test_global():
from docs.src.tutorial.authentication.global01 import api
@api.get("/somemethod")
def mustbeauthed(request):
return {"auth": request.auth}
client = TestClient(api)
assert client.get("/somemethod").status_code == 401
resp = client.post(
"/token", POST={"username": "admin", "password": "giraffethinnknslong"}
)
assert resp.status_code == 200
assert resp.json() == {"token": "supersecret"}
resp = client.get("/somemethod", headers={"Authorization": "Bearer supersecret"})
assert resp.status_code == 200
|
