1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
# ------------------------------------
# Copyright (c) Microsoft Corporation.
# Licensed under the MIT License.
# ------------------------------------
import os
from azure.identity._credentials.app_service import AppServiceCredential
from azure.identity._constants import EnvironmentVariables
import pytest
from helpers import mock
from recorded_test_case import RecordedTestCase
from devtools_testutils import is_live, recorded_by_proxy
PLAYBACK_URL = "https://msi-endpoint/token"
class TestAppService(RecordedTestCase):
def load_settings(self):
if is_live():
url = os.environ.get(EnvironmentVariables.MSI_ENDPOINT)
if not (url and EnvironmentVariables.MSI_SECRET in os.environ):
pytest.skip("Recording requires values for $MSI_ENDPOINT and $MSI_SECRET")
self.patch = mock.MagicMock() # no need to patch anything when recording
else:
# in playback we need to set environment variables and clear any that would interfere
# (MSI_SECRET ends up in a header; vcr.py doesn't match headers, so the value doesn't matter)
env = {
EnvironmentVariables.IDENTITY_ENDPOINT: PLAYBACK_URL,
EnvironmentVariables.IDENTITY_HEADER: "redacted",
}
self.patch = mock.patch.dict(os.environ, env, clear=True)
@pytest.mark.manual
@recorded_by_proxy
def test_system_assigned(self):
self.load_settings()
with self.patch:
credential = AppServiceCredential()
token = credential.get_token(self.scope)
assert token.token
assert isinstance(token.expires_on, int)
@pytest.mark.manual
@recorded_by_proxy
def test_system_assigned_tenant_id(self):
with self.patch:
credential = AppServiceCredential()
token = credential.get_token(self.scope, tenant_id="tenant_id")
assert token.token
assert isinstance(token.expires_on, int)
@pytest.mark.manual
@pytest.mark.usefixtures("user_assigned_identity_client_id")
@recorded_by_proxy
def test_user_assigned(self):
self.load_settings()
with self.patch:
credential = AppServiceCredential(client_id=self.user_assigned_identity_client_id)
token = credential.get_token(self.scope)
assert token.token
assert isinstance(token.expires_on, int)
@pytest.mark.manual
@recorded_by_proxy
@pytest.mark.usefixtures("user_assigned_identity_client_id")
def test_user_assigned_tenant_id(self):
with self.patch:
credential = AppServiceCredential(client_id=self.user_assigned_identity_client_id)
token = credential.get_token(self.scope, tenant_id="tenant_id")
assert token.token
assert isinstance(token.expires_on, int)
|
