1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
|
from tests import protocol
class ReflectionHandlerTest(protocol.BaseTestCase):
def test_config_is_not_allowed_across_the_network(self):
self.send_request("config")
self.assertEqualResponse(
'ACK [4@0] {config} you don\'t have permission for "config"'
)
def test_commands_returns_list_of_all_commands(self):
self.send_request("commands")
# Check if some random commands are included
self.assertInResponse("command: commands")
self.assertInResponse("command: play")
self.assertInResponse("command: status")
# Check if commands you do not have access to are not present
self.assertNotInResponse("command: config")
self.assertNotInResponse("command: kill")
# Check if the blacklisted commands are not present
self.assertNotInResponse("command: command_list_begin")
self.assertNotInResponse("command: command_list_ok_begin")
self.assertNotInResponse("command: command_list_end")
self.assertInResponse("command: idle")
self.assertNotInResponse("command: noidle")
self.assertNotInResponse("command: sticker")
self.assertInResponse("OK")
def test_decoders(self):
self.send_request("decoders")
self.assertInResponse("OK")
def test_notcommands_returns_only_config_and_kill_and_ok(self):
response = self.send_request("notcommands")
assert 3 == len(response)
self.assertInResponse("command: config")
self.assertInResponse("command: kill")
self.assertInResponse("OK")
def test_urlhandlers(self):
self.send_request("urlhandlers")
self.assertInResponse("OK")
self.assertInResponse("handler: dummy")
class ReflectionWhenNotAuthedTest(protocol.BaseTestCase):
def get_config(self):
config = super().get_config()
config["mpd"]["password"] = "topsecret"
return config
def test_commands_show_less_if_auth_required_and_not_authed(self):
self.send_request("commands")
# Not requiring auth
self.assertInResponse("command: close")
self.assertInResponse("command: commands")
self.assertInResponse("command: notcommands")
self.assertInResponse("command: password")
self.assertInResponse("command: ping")
# Requiring auth
self.assertNotInResponse("command: play")
self.assertNotInResponse("command: status")
def test_notcommands_returns_more_if_auth_required_and_not_authed(self):
self.send_request("notcommands")
# Not requiring auth
self.assertNotInResponse("command: close")
self.assertNotInResponse("command: commands")
self.assertNotInResponse("command: notcommands")
self.assertNotInResponse("command: password")
self.assertNotInResponse("command: ping")
# Requiring auth
self.assertInResponse("command: play")
self.assertInResponse("command: status")
|
