1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
|
import sys
sys.path.append("src")
import flask # noqa E402
import flask_session # noqa E402
import pytest # noqa E402
@pytest.fixture(scope="function")
def app_utils():
class Utils:
def create_app(self, config_dict=None):
app = flask.Flask(__name__)
if config_dict:
app.config.update(config_dict)
app.config["SESSION_SERIALIZATION_FORMAT"] = "json"
app.config["SESSION_PERMANENT"] = False
@app.route("/", methods=["GET"])
def app_hello():
return "hello world"
@app.route("/set", methods=["POST"])
def app_set():
flask.session["value"] = flask.request.form["value"]
return "value set"
@app.route("/modify", methods=["POST"])
def app_modify():
flask.session["value"] = flask.request.form["value"]
return "value set"
@app.route("/delete", methods=["POST"])
def app_del():
del flask.session["value"]
return "value deleted"
@app.route("/get")
def app_get():
return flask.session.get("value", "no value set")
flask_session.Session(app)
return app
def test_session(self, app):
client = app.test_client()
# Check no value is set from previous tests
assert client.get("/get").data not in [b"42", b"43", b"44"]
# Check if the Vary header is not set
rv = client.get("/")
assert "Vary" not in rv.headers
# Set a value and check it
assert client.post("/set", data={"value": "42"}).data == b"value set"
assert client.get("/get").data == b"42"
# Check if the Vary header is set
rv = client.get("/get")
assert rv.headers["Vary"] == "Cookie"
# Modify and delete the value
assert client.post("/modify", data={"value": "43"}).data == b"value set"
assert client.get("/get").data == b"43"
assert client.post("/delete").data == b"value deleted"
assert client.get("/get").data == b"no value set"
def test_session_with_cookie(self, app):
client = app.test_client()
# Access cookies from the response to cross check with the stored session
response = client.post("/set", data={"value": "44"})
session_cookie = None
for cookie in response.headers.getlist("Set-Cookie"):
if "session=" in cookie:
session_cookie = cookie
break
assert session_cookie is not None, "Session cookie was not set."
return session_cookie
return Utils()
|
