1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77
|
# Copyright 2024 Amazon.com, Inc. or its affiliates. All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License"). You
# may not use this file except in compliance with the License. A copy of
# the License is located at
#
# http://aws.amazon.com/apache2.0/
#
# or in the "license" file accompanying this file. This file is
# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
# ANY KIND, either express or implied. See the License for the specific
# language governing permissions and limitations under the License.
import pytest
from botocore.auth import (
BaseSigner,
resolve_auth_scheme_preference,
resolve_auth_type,
)
from botocore.exceptions import (
UnknownSignatureVersionError,
UnsupportedSignatureVersionError,
)
from tests import mock, unittest
class TestAuthTraitResolution(unittest.TestCase):
def test_auth_resolves_first_available(self):
auth = ['aws.auth#foo', 'aws.auth#bar']
# Don't declare a signer for "foo"
auth_types = {'bar': mock.Mock(spec=BaseSigner)}
auth_type_conversions = {'aws.auth#foo': 'foo', 'aws.auth#bar': 'bar'}
with mock.patch('botocore.auth.AUTH_TYPE_MAPS', auth_types):
with mock.patch(
'botocore.auth.AUTH_TYPE_TO_SIGNATURE_VERSION',
auth_type_conversions,
):
assert resolve_auth_type(auth) == 'bar'
def test_invalid_auth_type_error(self):
with self.assertRaises(UnknownSignatureVersionError):
resolve_auth_type(['aws.auth#invalidAuth'])
def test_no_known_auth_type(self):
with self.assertRaises(UnsupportedSignatureVersionError):
resolve_auth_type([])
@pytest.mark.parametrize(
"preference_list, auth_options, expected",
[
(['sigv4', 'httpBearerAuth'], ['smithy.api#httpBearerAuth'], 'bearer'),
(['noAuth', 'sigv4'], ['aws.auth#sigv4'], 'v4'),
(['foo', 'httpBearerAuth'], ['smithy.api#httpBearerAuth'], 'bearer'),
(['noAuth', 'sigv4'], ['smithy.api#noAuth'], 'none'),
(['foo'], ['aws.auth#sigv4', 'smithy.api#httpBearerAuth'], 'v4'),
],
)
def test_resolve_auth_scheme_preference(
preference_list, auth_options, expected
):
assert (
resolve_auth_scheme_preference(preference_list, auth_options)
== expected
)
@pytest.mark.parametrize(
"preference_list, auth_options",
[(['foo'], ['aws.auth#invalidAuth']), (['foo'], [])],
)
def test_resolve_auth_scheme_preference_unsupported(
preference_list, auth_options
):
with pytest.raises(UnsupportedSignatureVersionError):
resolve_auth_scheme_preference(preference_list, auth_options)
|