1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
from tests import unittest
import logging
import sys
if not sys.platform.startswith("win"):
raise unittest.SkipTest("Currently, our broker supports Windows")
from msal.broker import ( # Import them after the platform check
_signin_silently, _signin_interactively, _acquire_token_silently, RedirectUriError,
_signout_silently, _read_account_by_id,
)
logging.basicConfig(level=logging.DEBUG)
class BrokerTestCase(unittest.TestCase):
"""These are the unit tests for the thin broker.py layer.
It currently hardcodes some test apps which might be changed/gone in the future.
The existing test_e2e.py is sophisticated to pull test configuration securely from lab.
"""
_client_id = "04f0c124-f2bc-4f59-8241-bf6df9866bbd" # Visual Studio
_authority = "https://login.microsoftonline.com/common"
_scopes = ["https://graph.microsoft.com/.default"]
def test_signin_interactive_then_acquire_token_silent_then_signout(self):
result = _signin_interactively(self._authority, self._client_id, self._scopes, None)
self.assertIsNotNone(result.get("access_token"), result)
account_id = result["_account_id"]
self.assertIsNotNone(_read_account_by_id(account_id, "correlation_id"))
result = _acquire_token_silently(
self._authority, self._client_id, account_id, self._scopes)
self.assertIsNotNone(result.get("access_token"), result)
signout_error = _signout_silently(self._client_id, account_id)
self.assertIsNone(signout_error, msg=signout_error)
account = _read_account_by_id(account_id, "correlation_id")
self.assertIsNotNone(account, msg="pymsalruntime still has this account")
result = _acquire_token_silently(
self._authority, self._client_id, account_id, self._scopes)
self.assertIn("Status_AccountUnusable", result.get("error_description", ""))
def test_unconfigured_app_should_raise_exception(self):
self.skipTest(
"After PyMsalRuntime 0.13.2, "
"AADSTS error codes were removed from error_context; "
"it is not in telemetry either.")
app_without_needed_redirect_uri = "f62c5ae3-bf3a-4af5-afa8-a68b800396e9" # This is the lab app. We repurpose it to be used here
with self.assertRaises(RedirectUriError):
result = _signin_interactively(
self._authority, app_without_needed_redirect_uri, self._scopes, None)
print(result)
# Note: _acquire_token_silently() would raise same exception,
# we skip its test here due to the lack of a valid account_id
def test_signin_interactively_and_select_account(self):
print("An account picker UI will pop up. See whether the auth result matches your account")
result = _signin_interactively(
self._authority, self._client_id, self._scopes, None, prompt="select_account")
self.assertIsNotNone(result.get("access_token"), result)
if "access_token" in result:
result["access_token"] = "********"
import pprint; pprint.pprint(result)
def test_signin_silently(self):
result = _signin_silently(self._authority, self._client_id, self._scopes)
self.assertIsNotNone(result.get("access_token"), result)
|
