File: test_apache.py

package info (click to toggle)
python-passlib 1.9.3-1
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid
  • size: 3,184 kB
  • sloc: python: 26,132; makefile: 7
file content (327 lines) | stat: -rw-r--r-- 10,560 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
import os
import subprocess
import unittest

import pytest

from passlib import apache
from passlib._logging import logger
from passlib.utils.handlers import to_unicode_for_identify
from tests.utils import TestCase, get_file, set_file
from tests.utils_ import backdate_file_mtime

htpasswd_path = os.environ.get("PASSLIB_TEST_HTPASSWD_PATH") or "htpasswd"


def _call_htpasswd(args, stdin=None):
    """
    helper to run htpasswd cmd
    """
    if stdin is not None:
        stdin = stdin.encode("utf-8")
    proc = subprocess.Popen(
        [htpasswd_path] + args,
        stdout=subprocess.PIPE,
        stderr=subprocess.STDOUT,
        stdin=subprocess.PIPE if stdin else None,
    )
    out, err = proc.communicate(stdin)
    rc = proc.wait()
    out = to_unicode_for_identify(out or "")
    return out, rc


def _call_htpasswd_verify(path, user, password):
    """
    wrapper for htpasswd verify
    """
    out, rc = _call_htpasswd(["-vi", path, user], password)
    return not rc


def _detect_htpasswd():
    """
    helper to check if htpasswd is present
    """
    try:
        out, rc = _call_htpasswd([])
    except OSError:
        # TODO: under py3, could trap the more specific FileNotFoundError
        # cmd not found
        return False, False
    # when called w/o args, it should print usage to stderr & return rc=2
    if not rc:
        logger.warning("htpasswd test returned with rc=0")
    have_bcrypt = " -B " in out
    return True, have_bcrypt


HAVE_HTPASSWD, HAVE_HTPASSWD_BCRYPT = _detect_htpasswd()

requires_htpasswd_cmd = unittest.skipUnless(
    HAVE_HTPASSWD, "requires `htpasswd` cmdline tool"
)


class HtdigestFileTest(TestCase):
    """test HtdigestFile class"""

    descriptionPrefix = "HtdigestFile"

    # sample with 4 users
    sample_01 = (
        b"user2:realm:549d2a5f4659ab39a80dac99e159ab19\n"
        b"user3:realm:a500bb8c02f6a9170ae46af10c898744\n"
        b"user4:realm:ab7b5d5f28ccc7666315f508c7358519\n"
        b"user1:realm:2a6cf53e7d8f8cf39d946dc880b14128\n"
    )

    # sample 1 with user 1, 2 deleted; 4 changed
    sample_02 = (
        b"user3:realm:a500bb8c02f6a9170ae46af10c898744\n"
        b"user4:realm:ab7b5d5f28ccc7666315f508c7358519\n"
    )

    # sample 1 with user2 updated, user 1 first entry removed, and user 5 added
    sample_03 = (
        b"user2:realm:5ba6d8328943c23c64b50f8b29566059\n"
        b"user3:realm:a500bb8c02f6a9170ae46af10c898744\n"
        b"user4:realm:ab7b5d5f28ccc7666315f508c7358519\n"
        b"user1:realm:2a6cf53e7d8f8cf39d946dc880b14128\n"
        b"user5:realm:03c55fdc6bf71552356ad401bdb9af19\n"
    )

    # standalone sample with 8-bit username & realm
    sample_04_utf8 = b"user\xc3\xa6:realm\xc3\xa6:549d2a5f4659ab39a80dac99e159ab19\n"
    sample_04_latin1 = b"user\xe6:realm\xe6:549d2a5f4659ab39a80dac99e159ab19\n"

    def test_00_constructor_autoload(self):
        """test constructor autoload"""
        # check with existing file
        path = self.mktemp()
        set_file(path, self.sample_01)
        ht = apache.HtdigestFile(path)
        assert ht.to_string() == self.sample_01

        # check without autoload
        ht = apache.HtdigestFile(path, new=True)
        assert ht.to_string() == b""

        # check missing file
        os.remove(path)
        with pytest.raises(IOError):
            apache.HtdigestFile(path)

    def test_01_delete(self):
        """test delete()"""
        ht = apache.HtdigestFile.from_string(self.sample_01)
        assert ht.delete("user1", "realm")
        assert ht.delete("user2", "realm")
        assert not ht.delete("user5", "realm")
        assert not ht.delete("user3", "realm5")
        assert ht.to_string() == self.sample_02

        # invalid user
        with pytest.raises(ValueError):
            ht.delete("user:", "realm")

        # invalid realm
        with pytest.raises(ValueError):
            ht.delete("user", "realm:")

    def test_01_delete_autosave(self):
        path = self.mktemp()
        set_file(path, self.sample_01)

        ht = apache.HtdigestFile(path)
        assert ht.delete("user1", "realm")
        assert not ht.delete("user3", "realm5")
        assert not ht.delete("user5", "realm")
        assert get_file(path) == self.sample_01

        ht.autosave = True
        assert ht.delete("user2", "realm")
        assert get_file(path) == self.sample_02

    def test_02_set_password(self):
        """test update()"""
        ht = apache.HtdigestFile.from_string(self.sample_01)
        assert ht.set_password("user2", "realm", "pass2x")
        assert not ht.set_password("user5", "realm", "pass5")
        assert ht.to_string() == self.sample_03

        # default realm
        with pytest.raises(TypeError):
            ht.set_password("user2", "pass3")
        ht.default_realm = "realm2"
        ht.set_password("user2", "pass3")
        ht.check_password("user2", "realm2", "pass3")

        # invalid user
        with pytest.raises(ValueError):
            ht.set_password("user:", "realm", "pass")
        with pytest.raises(ValueError):
            ht.set_password("u" * 256, "realm", "pass")

        # invalid realm
        with pytest.raises(ValueError):
            ht.set_password("user", "realm:", "pass")
        with pytest.raises(ValueError):
            ht.set_password("user", "r" * 256, "pass")

    # TODO: test set_password autosave

    def test_03_users(self):
        """test users()"""
        ht = apache.HtdigestFile.from_string(self.sample_01)
        ht.set_password("user5", "realm", "pass5")
        ht.delete("user3", "realm")
        ht.set_password("user3", "realm", "pass3")
        assert sorted(ht.users("realm")) == [
            "user1",
            "user2",
            "user3",
            "user4",
            "user5",
        ]

        with pytest.raises(TypeError):
            ht.users(1)

    def test_04_check_password(self):
        """test check_password()"""
        ht = apache.HtdigestFile.from_string(self.sample_01)
        with pytest.raises(TypeError):
            ht.check_password(1, "realm", "pass5")
        with pytest.raises(TypeError):
            ht.check_password("user", 1, "pass5")
        assert ht.check_password("user5", "realm", "pass5") is None
        for i in range(1, 5):
            i = str(i)
            assert ht.check_password("user" + i, "realm", "pass" + i)
            assert ht.check_password("user" + i, "realm", "pass5") is False

        # default realm
        with pytest.raises(TypeError):
            ht.check_password("user5", "pass5")
        ht.default_realm = "realm"
        assert ht.check_password("user1", "pass1")
        assert ht.check_password("user5", "pass5") is None

        # invalid user
        with pytest.raises(ValueError):
            ht.check_password("user:", "realm", "pass")

    def test_05_load(self):
        """test load()"""
        # setup empty file
        path = self.mktemp()
        set_file(path, "")
        backdate_file_mtime(path, 5)
        ha = apache.HtdigestFile(path)
        assert ha.to_string() == b""

        # make changes, check load_if_changed() does nothing
        ha.set_password("user1", "realm", "pass1")
        ha.load_if_changed()
        assert ha.to_string() == b"user1:realm:2a6cf53e7d8f8cf39d946dc880b14128\n"

        # change file
        set_file(path, self.sample_01)
        ha.load_if_changed()
        assert ha.to_string() == self.sample_01

        # make changes, check load_if_changed overwrites them
        ha.set_password("user5", "realm", "pass5")
        ha.load()
        assert ha.to_string() == self.sample_01

        # test load w/ no path
        hb = apache.HtdigestFile()
        with pytest.raises(RuntimeError):
            hb.load()
        with pytest.raises(RuntimeError):
            hb.load_if_changed()

        # test load w/ explicit path
        hc = apache.HtdigestFile()
        hc.load(path)
        assert hc.to_string() == self.sample_01

    def test_06_save(self):
        """test save()"""
        # load from file
        path = self.mktemp()
        set_file(path, self.sample_01)
        ht = apache.HtdigestFile(path)

        # make changes, check they saved
        ht.delete("user1", "realm")
        ht.delete("user2", "realm")
        ht.save()
        assert get_file(path) == self.sample_02

        # test save w/ no path
        hb = apache.HtdigestFile()
        hb.set_password("user1", "realm", "pass1")
        with pytest.raises(RuntimeError):
            hb.save()

        # test save w/ explicit path
        hb.save(path)
        assert get_file(path) == hb.to_string()

    def test_07_realms(self):
        """test realms() & delete_realm()"""
        ht = apache.HtdigestFile.from_string(self.sample_01)

        assert ht.delete_realm("x") == 0
        assert ht.realms() == ["realm"]

        assert ht.delete_realm("realm") == 4
        assert ht.realms() == []
        assert ht.to_string() == b""

    def test_08_get_hash(self):
        """test get_hash()"""
        ht = apache.HtdigestFile.from_string(self.sample_01)
        assert ht.get_hash("user3", "realm") == "a500bb8c02f6a9170ae46af10c898744"
        assert ht.get_hash("user4", "realm") == "ab7b5d5f28ccc7666315f508c7358519"
        assert ht.get_hash("user5", "realm") is None

    def test_09_encodings(self):
        """test encoding parameter"""
        # test bad encodings cause failure in constructor
        with pytest.raises(ValueError):
            apache.HtdigestFile(encoding="utf-16")

        # check sample utf-8
        ht = apache.HtdigestFile.from_string(
            self.sample_04_utf8, encoding="utf-8", return_unicode=True
        )
        assert ht.realms() == ["realmæ"]
        assert ht.users("realmæ") == ["useræ"]

        # check sample latin-1
        ht = apache.HtdigestFile.from_string(
            self.sample_04_latin1, encoding="latin-1", return_unicode=True
        )
        assert ht.realms() == ["realmæ"]
        assert ht.users("realmæ") == ["useræ"]

    def test_10_to_string(self):
        """test to_string()"""

        # check sample
        ht = apache.HtdigestFile.from_string(self.sample_01)
        assert ht.to_string() == self.sample_01

        # check blank
        ht = apache.HtdigestFile()
        assert ht.to_string() == b""

    def test_11_malformed(self):
        with pytest.raises(ValueError):
            apache.HtdigestFile.from_string(b"realm:user1:pass1:other\n")
        with pytest.raises(ValueError):
            apache.HtdigestFile.from_string(b"user1:pass1\n")