Produits Entr'ouvert » Authentic 2

import django_webtest

from django.contrib.auth import get_user_model

from django_rbac.utils import get_ou_model

from authentic2_auth_fc.models import FcAccount

                       email='ecartman@southpark.org', ou=ou_southpark, federation=CARTMAN_FC_INFO)

class AllHook(object):

    def __init__(self):

        self.calls = {}

    def __call__(self, hook_name, *args, **kwargs):

        calls = self.calls.setdefault(hook_name, [])

import django_webtest

from django.contrib.auth import get_user_model

from django_rbac.utils import get_ou_model, get_role_model

from django.conf import settings

from django.utils.six.moves.urllib import parse as urlparse

from pytest_django.migrations import DisableMigrations

from authentic2.models import Service

from authentic2.a2_rbac.utils import get_default_ou

from authentic2_idp_oidc.models import OIDCClient

from authentic2.authentication import OIDCUser

    return locals().get(request.param)

class AllHook(object):

    def __init__(self):

        self.calls = {}

    def __call__(self, hook_name, *args, **kwargs):

        calls = self.calls.setdefault(hook_name, [])

        idtoken_algo=OIDCProvider._meta.get_field('idtoken_algo').default,

        jwkset=None,

        claims_parameter_supported=False):

    if jwkset is not None:

        jwkset = json.loads(jwkset.export())

def test_sso(app, caplog, code, oidc_provider, oidc_provider_jwkset, hooks):

    OU = get_ou_model()

    cassis = OU.objects.create(name='Cassis', slug='cassis')

    response = app.get('/admin/').maybe_follow()

    assert oidc_provider.name in response.text

def test_show_on_login_page(app, oidc_provider):

    response = app.get('/login/')

    assert 'oidc-a-oididp' in response.text

def test_strategy_find_uuid(app, caplog, code, oidc_provider, oidc_provider_jwkset, simple_user):

    # no mapping please

    OIDCClaimMapping.objects.all().delete()

    oidc_provider.strategy = oidc_provider.STRATEGY_FIND_UUID

def test_invalid_kid(app, caplog, code, oidc_provider_rsa,

                     oidc_provider_jwkset, simple_user):

    # no mapping please

    OIDCClaimMapping.objects.all().delete()

def test_templated_claim_mapping(app, caplog, code, oidc_provider, oidc_provider_jwkset):

    Attribute.objects.create(

        name='pro_phone',

import utils

from django.core.urlresolvers import reverse

from django.core.files import File

from django.db import connection

def test_credentials_grant(app, oidc_client, admin, simple_user):

    oidc_client.authorization_flow = OIDCClient.FLOW_RESOURCE_OWNER_CRED

    oidc_client.scope = 'openid'

    oidc_client.save()

        app, oidc_client, admin, simple_user, oidc_settings, freezer):

    freezer.move_to('2020-01-01')

    oidc_client.authorization_flow = OIDCClient.FLOW_RESOURCE_OWNER_CRED

    oidc_client.save()

    token_url = make_url('oidc-token')

        app, oidc_client, admin, simple_user, oidc_settings, freezer):

    freezer.move_to('2020-01-01')

    oidc_client.authorization_flow = OIDCClient.FLOW_RESOURCE_OWNER_CRED

    oidc_client.save()

    token_url = make_url('oidc-token')

        app, oidc_client, admin, simple_user, settings, freezer):

    freezer.move_to('2020-01-01')

    settings.A2_LOGIN_EXPONENTIAL_RETRY_TIMEOUT_DURATION = 2

    oidc_client.authorization_flow = OIDCClient.FLOW_RESOURCE_OWNER_CRED

    oidc_client.save()

def test_credentials_grant_invalid_flow(

        app, oidc_client, admin, simple_user, settings):

    params = {

        'client_id': oidc_client.client_id,

        'client_secret': oidc_client.client_secret,

def test_credentials_grant_invalid_client(

        app, oidc_client, admin, simple_user, settings):

    oidc_client.authorization_flow = OIDCClient.FLOW_RESOURCE_OWNER_CRED

    oidc_client.save()

    params = {

def test_credentials_grant_unauthz_client(

        app, oidc_client, admin, simple_user, settings):

    params = {

        'client_id': oidc_client.client_id,

        'client_secret': oidc_client.client_secret,

def test_credentials_grant_invalid_content_type(

        app, oidc_client, admin, simple_user, settings):

    oidc_client.authorization_flow = OIDCClient.FLOW_RESOURCE_OWNER_CRED

    oidc_client.save()

    params = {

def test_credentials_grant_ou_selection_simple(

        app, oidc_client, admin, user_ou1, user_ou2, ou1, ou2, settings):

    oidc_client.authorization_flow = OIDCClient.FLOW_RESOURCE_OWNER_CRED

    oidc_client.save()

    params = {

def test_credentials_grant_ou_selection_username_not_unique(

        app, oidc_client, admin, user_ou1, admin_ou2, ou1, ou2, settings):

    settings.A2_USERNAME_IS_UNIQUE = False

    oidc_client.authorization_flow = OIDCClient.FLOW_RESOURCE_OWNER_CRED

    oidc_client.save()

def test_credentials_grant_ou_selection_username_not_unique_wrong_ou(

        app, oidc_client, admin, user_ou1, admin_ou2, ou1, ou2, settings):

    settings.A2_USERNAME_IS_UNIQUE = False

    oidc_client.authorization_flow = OIDCClient.FLOW_RESOURCE_OWNER_CRED

    oidc_client.save()

def test_credentials_grant_ou_selection_invalid_ou(

        app, oidc_client, admin, user_ou1, settings):

    params = {

        'client_id': oidc_client.client_id,

        'client_secret': oidc_client.client_secret,

def test_manager_create_role(superuser_or_admin, app):

    non_admin_roles = Role.objects.exclude(slug__startswith='_')

    ou_add = login(app, superuser_or_admin, reverse('a2-manager-role-add'))

def test_manager_create_user(superuser_or_admin, app, settings):

    ou1 = OU.objects.create(name='OU1', slug='ou1')

    ou2 = OU.objects.create(name='OU2', slug='ou2', email_is_unique=True)