wutta/wuttaweb
3
0
Fork 0
Code Issues Activity

fix: format all code with black

Browse source 
and from now on should not deviate from that...
This commit is contained in:
Lance Edgar 2025-08-31 12:26:43 -05:00
parent 8a09fb1a3c
commit 4d0693862d
68 changed files with 6693 additions and 5659 deletions
Download patch file Download diff file Expand all files Collapse all files

76
tests/test_auth.py
View file

@ -18,10 +18,11 @@ class TestLoginUser(TestCase):
app = config.get_app()
model = app.model
request = testing.DummyRequest(wutta_config=config)
user = model.User(username='barney')
user = model.User(username="barney")
headers = mod.login_user(request, user)
self.assertEqual(headers, [])
class TestLogoutUser(TestCase):
def test_basic(self):
@ -36,20 +37,25 @@ class TestLogoutUser(TestCase):
class TestWuttaSecurityPolicy(TestCase):
def setUp(self):
self.config = WuttaConfig(defaults={
'wutta.db.default.url': 'sqlite://',
})
self.config = WuttaConfig(
defaults={
"wutta.db.default.url": "sqlite://",
}
)
self.request = testing.DummyRequest()
self.pyramid_config = testing.setUp(request=self.request, settings={
'wutta_config': self.config,
})
self.pyramid_config = testing.setUp(
request=self.request,
settings={
"wutta_config": self.config,
},
)
self.app = self.config.get_app()
model = self.app.model
model.Base.metadata.create_all(bind=self.config.appdb_engine)
self.session = self.app.make_session()
self.user = model.User(username='barney')
self.user = model.User(username="barney")
self.session.add(self.user)
self.session.commit()
@ -66,12 +72,16 @@ class TestWuttaSecurityPolicy(TestCase):
self.assertIsNotNone(uuid)
self.assertIsNone(self.policy.session_helper.authenticated_userid(self.request))
self.policy.remember(self.request, uuid)
self.assertEqual(self.policy.session_helper.authenticated_userid(self.request), uuid)
self.assertEqual(
self.policy.session_helper.authenticated_userid(self.request), uuid
)
def test_forget(self):
uuid = self.user.uuid
self.policy.remember(self.request, uuid)
self.assertEqual(self.policy.session_helper.authenticated_userid(self.request), uuid)
self.assertEqual(
self.policy.session_helper.authenticated_userid(self.request), uuid
)
self.policy.forget(self.request)
self.assertIsNone(self.policy.session_helper.authenticated_userid(self.request))
@ -91,7 +101,7 @@ class TestWuttaSecurityPolicy(TestCase):
# invalid identity yields no user
self.policy = self.make_policy()
self.policy.remember(self.request, _uuid.uuid4()) # random uuid
self.policy.remember(self.request, _uuid.uuid4()) # random uuid
user = self.policy.identity(self.request)
self.assertIsNone(user)
@ -112,59 +122,59 @@ class TestWuttaSecurityPolicy(TestCase):
model = self.app.model
# anon has no perms
self.assertFalse(self.policy.permits(self.request, None, 'foo.bar'))
self.assertFalse(self.policy.permits(self.request, None, "foo.bar"))
# but we can grant it
anons = auth.get_role_anonymous(self.session)
self.user.roles.append(anons)
auth.grant_permission(anons, 'foo.bar')
auth.grant_permission(anons, "foo.bar")
self.session.commit()
# and then perm check is satisfied
self.assertTrue(self.policy.permits(self.request, None, 'foo.bar'))
self.assertTrue(self.policy.permits(self.request, None, "foo.bar"))
# now, create a separate role and grant another perm
# (but user does not yet belong to this role)
role = model.Role(name='whatever')
role = model.Role(name="whatever")
self.session.add(role)
auth.grant_permission(role, 'baz.edit')
auth.grant_permission(role, "baz.edit")
self.session.commit()
# so far then, user does not have the permission
self.policy = self.make_policy()
self.policy.remember(self.request, self.user.uuid)
self.assertFalse(self.policy.permits(self.request, None, 'baz.edit'))
self.assertFalse(self.policy.permits(self.request, None, "baz.edit"))
# but if we assign user to role, perm check should pass
self.user.roles.append(role)
self.session.commit()
self.assertTrue(self.policy.permits(self.request, None, 'baz.edit'))
self.assertTrue(self.policy.permits(self.request, None, "baz.edit"))
# now let's try another perm - we won't grant it, but will
# confirm user is denied access unless they become root
self.assertFalse(self.policy.permits(self.request, None, 'some-root-perm'))
self.assertFalse(self.policy.permits(self.request, None, "some-root-perm"))
self.request.is_root = True
self.assertTrue(self.policy.permits(self.request, None, 'some-root-perm'))
self.assertTrue(self.policy.permits(self.request, None, "some-root-perm"))
class TestAddPermissionGroup(WebTestCase):
def test_basic(self):
permissions = self.pyramid_config.get_settings().get('wutta_permissions', {})
self.assertNotIn('widgets', permissions)
self.pyramid_config.add_wutta_permission_group('widgets')
permissions = self.pyramid_config.get_settings().get('wutta_permissions', {})
self.assertIn('widgets', permissions)
self.assertEqual(permissions['widgets']['label'], "Widgets")
permissions = self.pyramid_config.get_settings().get("wutta_permissions", {})
self.assertNotIn("widgets", permissions)
self.pyramid_config.add_wutta_permission_group("widgets")
permissions = self.pyramid_config.get_settings().get("wutta_permissions", {})
self.assertIn("widgets", permissions)
self.assertEqual(permissions["widgets"]["label"], "Widgets")
class TestAddPermission(WebTestCase):
def test_basic(self):
permissions = self.pyramid_config.get_settings().get('wutta_permissions', {})
self.assertNotIn('widgets', permissions)
self.pyramid_config.add_wutta_permission('widgets', 'widgets.polish')
permissions = self.pyramid_config.get_settings().get('wutta_permissions', {})
self.assertIn('widgets', permissions)
self.assertEqual(permissions['widgets']['label'], "Widgets")
self.assertIn('widgets.polish', permissions['widgets']['perms'])
permissions = self.pyramid_config.get_settings().get("wutta_permissions", {})
self.assertNotIn("widgets", permissions)
self.pyramid_config.add_wutta_permission("widgets", "widgets.polish")
permissions = self.pyramid_config.get_settings().get("wutta_permissions", {})
self.assertIn("widgets", permissions)
self.assertEqual(permissions["widgets"]["label"], "Widgets")
self.assertIn("widgets.polish", permissions["widgets"]["perms"])