1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
|
import pytest
def test_by_resource_server_lookups(oauth_token_response):
by_rs = oauth_token_response.by_resource_server
# things which should hold for all
for n in (1, 2, 3):
name = f"resource_server_{n}"
for attr in ("access_token", "refresh_token", "resource_server"):
assert by_rs[name][attr] == f"{attr}_{n}"
assert "expires_in" not in by_rs[name]
assert "expires_at_seconds" in by_rs[name]
assert by_rs[name]["token_type"] == "bearer"
assert by_rs["resource_server_1"]["scope"] == "scope1"
assert by_rs["resource_server_2"]["scope"] == "scope2 scope2:0 scope2:1"
assert by_rs["resource_server_3"]["scope"] == "scope3:0 scope3:1"
@pytest.mark.parametrize(
"scopestr, resource_server",
[
("scope1", "resource_server_1"),
("scope2 scope2:0 scope2:1", "resource_server_2"),
("scope3:0 scope3:1", "resource_server_3"),
],
)
def test_by_scopes_lookups_simple(scopestr, resource_server, oauth_token_response):
by_scopes = oauth_token_response.by_scopes
# containment
assert scopestr in by_scopes
for x in scopestr.split():
assert x in by_scopes
# maps correctly
assert by_scopes[scopestr]["resource_server"] == resource_server
def test_by_scopes_lookups_failures(oauth_token_response):
by_scopes = oauth_token_response.by_scopes
mixed_scopes = "scope1 scope2"
# containment
assert mixed_scopes not in by_scopes
assert "badscope" not in by_scopes
# try to actually do it, ensure KeyErrors have good messages
with pytest.raises(KeyError) as excinfo:
by_scopes[mixed_scopes]
assert "did not match exactly one token" in str(excinfo.value)
with pytest.raises(KeyError) as excinfo:
by_scopes["badscope"]
assert "was not found" in str(excinfo.value)
def test_by_scopes_lookups_fancy(oauth_token_response):
by_scopes = oauth_token_response.by_scopes
# repeated scope
assert by_scopes["scope3:0 scope3:0"]["resource_server"] == "resource_server_3"
# not matching order from original document
assert (
by_scopes["scope2:1 scope2 scope2:0"]["resource_server"] == "resource_server_2"
)
def test_stringify(oauth_token_response):
data = str(oauth_token_response)
# it starts the right way
assert data.startswith("OAuthTokenResponse:\n")
# it contains the id_token, but heavily truncated and annotated as such
assert " id_token: id_token_v... (truncated)\n" in data
# it contains the by_resource_server mapping (but we won't assert anything about
# that data other than that it starts with a '{')
assert " by_resource_server:\n {" in data
def test_stringify_dependent_tokens(oauth_dependent_token_response):
data = str(oauth_dependent_token_response)
# it starts the right way
assert data.startswith("OAuthDependentTokenResponse:\n")
# it does not contain the id_token, so this is indicated as None
assert " id_token: None\n" in data
# it contains the by_resource_server mapping (but we won't assert anything about
# that data other than that it starts with a '{')
assert " by_resource_server:\n {" in data
|
