1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
|
use strict;
use warnings;
use Test::More import => ['!pass'];
use t::lib::TestApp;
use Dancer ':syntax';
my $dancer_version;
BEGIN {
$dancer_version = (exists &dancer_version) ? int(dancer_version()) : 1;
require Dancer::Test;
if ($dancer_version == 1) {
Dancer::Test->import();
} else {
Dancer::Test->import('t::lib::TestApp');
}
}
diag sprintf "Testing DPAE version %s under Dancer %s",
$Dancer::Plugin::Auth::Extensible::VERSION,
$Dancer::VERSION;
# First, without being logged in, check we can access the index page, but not
# stuff we need to be logged in for:
response_content_is [ GET => '/' ], 'Index always accessible',
'Index accessible while not logged in';
response_redirect_location_is [ GET => '/loggedin' ],
'http://localhost/login?return_url=%2Floggedin',
'/loggedin redirected to login page when not logged in';
response_redirect_location_is [ GET => '/beer' ],
'http://localhost/login?return_url=%2Fbeer',
'/beer redirected to login page when not logged in';
response_redirect_location_is [ GET => '/regex/a' ],
'http://localhost/login?return_url=%2Fregex%2Fa',
'/regex/a redirected to login page when not logged in';
# OK, now check we can't log in with fake details
response_status_is [
POST => '/login', { body => { username => 'foo', password => 'bar' } }
], 401, 'Login with fake details fails';
# ... and that we can log in with real details
response_status_is [
POST => '/login', { body => { username => 'dave', password => 'beer' } }
], 302, 'Login with real details succeeds';
# Now we're logged in, check we can access stuff we should...
response_status_is [ GET => '/loggedin' ], 200,
'Can access /loggedin now we are logged in';
response_content_is [ GET => '/loggedin' ], 'You are logged in',
'Correct page content while logged in, too';;
response_content_is [ GET => '/name' ], 'Hello, David Precious',
'Logged in user details via logged_in_user work';
response_content_is [ GET => '/roles' ], 'BeerDrinker,Motorcyclist',
'Correct roles for logged in user';
response_content_is [ GET => '/roles/bob'], 'CiderDrinker', 'Correct roles for other user in current realm';
# Check we can request something which requires a role we have....
response_status_is [ GET => '/beer' ], 200,
'We can request a route (/beer) requiring a role we have...';
# Check we can request a route that requires any of a list of roles, one of
# which we have:
response_status_is [ GET => '/anyrole' ], 200,
"We can request a multi-role route requiring with any one role";
response_status_is [ GET => '/allroles' ], 200,
"We can request a multi-role route with all roles required";
# And also a route declared as a regex (this should be no different, but
# melmothX was seeing issues with routes not requiring login when they should...
response_status_is [ GET => '/regex/a' ], 200,
"We can request a regex route when logged in";
response_status_is [ GET => '/piss/regex' ], 200,
"We can request a route requiring a regex role we have";
# ... but can't request something requiring a role we don't have
response_redirect_location_is [ GET => '/piss' ],
'http://localhost/login/denied?return_url=%2Fpiss',
"We cannot request a route requiring a role we don't have";
# Check the realm we authenticated against is what we expect
response_content_is [ GET => '/realm' ], 'config1',
'Authenticated against expected realm';
# Now, log out
response_status_is [
POST => '/logout', {},
], 200, 'Logging out returns 200';
# Check we can't access protected pages now we logged out:
response_redirect_location_is [ GET => '/loggedin' ],
'http://localhost/login?return_url=%2Floggedin',
'/loggedin redirected to login page after logging out';
response_redirect_location_is [ GET => '/beer' ],
'http://localhost/login?return_url=%2Fbeer',
'/beer redirected to login page after logging out';
# OK, log back in, this time as a user from the second realm
response_status_is [
POST => '/login', { body => { username => 'burt', password => 'bacharach' } }
], 302, 'Login as user from second realm succeeds';
# And that now we're logged in again, we can access protected pages
response_status_is [ GET => '/loggedin' ], 200,
'Can access /loggedin now we are logged in again';
# And that the realm we authenticated against is what we expect
response_content_is [ GET => '/realm' ], 'config2',
'Authenticated against expected realm';
response_content_is [ GET => '/roles/bob/config1'], 'CiderDrinker', 'Correct roles for other user in current realm';
# Now, log out again
response_status_is [
POST => '/logout', {},
], 200, 'Logged out again';
# Now check we can log in as a user whose password is stored hashed:
response_status_is [
POST => '/login', {
body => { username => 'hashedpassword', password => 'password' }
}
], 302, 'Login as user with hashed password succeeds';
# And that now we're logged in again, we can access protected pages
response_status_is [ GET => '/loggedin' ], 200,
'Can access /loggedin now we are logged in again';
# Check that the redirect URL can be set when logging in
response_redirect_location_is(
[
POST => '/login', {
body => {
username => 'dave',
password => 'beer',
return_url => '/foobar',
},
},
],
'http://localhost/foobar',
'Redirect after login to given return_url works',
);
# Test that we are in fact caching fetches of user details, and that we do get
# the same details back from the cache. (The numbers are the number of times
# the provider was asked for the user's details, and we check the result from
# logged_in_user is usable both when initially fetched and when fetched from
# cache.)
response_content_is [ GET => '/testcaching' ], "0:dave:1:dave:1",
"Repeated calls to logged_in_user are cached";
done_testing();
|
