144 lines
5.2 KiB
Python
144 lines
5.2 KiB
Python
|
"""test OAuth Source"""
|
||
|
from os.path import abspath
|
||
|
from time import sleep
|
||
|
|
||
|
from selenium.webdriver.common.by import By
|
||
|
from selenium.webdriver.common.keys import Keys
|
||
|
from selenium.webdriver.support import expected_conditions as ec
|
||
|
from yaml import safe_dump, safe_load
|
||
|
|
||
|
from docker import DockerClient, from_env
|
||
|
from docker.models.containers import Container
|
||
|
from docker.types import Healthcheck
|
||
|
from e2e.utils import SeleniumTestCase
|
||
|
from passbook.flows.models import Flow
|
||
|
from passbook.sources.oauth.models import OAuthSource
|
||
|
|
||
|
TOKEN_URL = "http://127.0.0.1:5556/dex/token"
|
||
|
OAUTH_TEST_SECRET = "ZXhhbXBsZS1hcHAtc2VjcmV0" # noqa
|
||
|
|
||
|
|
||
|
class TestSourceOAuth(SeleniumTestCase):
|
||
|
"""test OAuth Source flow"""
|
||
|
|
||
|
container: Container
|
||
|
|
||
|
def setUp(self):
|
||
|
super().setUp()
|
||
|
self.container = self.setup_client()
|
||
|
|
||
|
def prepare_dex_config(self):
|
||
|
"""Since Dex does not document which environment
|
||
|
variables can be used to configure clients"""
|
||
|
config_file = "./e2e/dex/config-dev.yaml"
|
||
|
with open(config_file, "r+") as _file:
|
||
|
config = safe_load(_file)
|
||
|
config.get("staticClients")[0]["redirectURIs"][0] = self.url(
|
||
|
"passbook_sources_oauth:oauth-client-callback", source_slug="dex"
|
||
|
)
|
||
|
with open(config_file, "w+") as _file:
|
||
|
safe_dump(config, _file)
|
||
|
|
||
|
def setup_client(self) -> Container:
|
||
|
"""Setup test Dex container"""
|
||
|
self.prepare_dex_config()
|
||
|
client: DockerClient = from_env()
|
||
|
container = client.containers.run(
|
||
|
image="quay.io/dexidp/dex:v2.24.0",
|
||
|
detach=True,
|
||
|
network_mode="host",
|
||
|
auto_remove=True,
|
||
|
command="serve /config.yml",
|
||
|
healthcheck=Healthcheck(
|
||
|
test=["CMD", "wget", "--spider", "http://localhost:5556/dex/healthz"],
|
||
|
interval=5 * 100 * 1000000,
|
||
|
start_period=1 * 100 * 1000000,
|
||
|
),
|
||
|
volumes={
|
||
|
abspath("./e2e/dex/config-dev.yaml"): {
|
||
|
"bind": "/config.yml",
|
||
|
"mode": "ro",
|
||
|
}
|
||
|
},
|
||
|
)
|
||
|
while True:
|
||
|
container.reload()
|
||
|
status = container.attrs.get("State", {}).get("Health", {}).get("Status")
|
||
|
if status == "healthy":
|
||
|
return container
|
||
|
sleep(1)
|
||
|
|
||
|
def tearDown(self):
|
||
|
self.container.kill()
|
||
|
super().tearDown()
|
||
|
|
||
|
def test_oauth_oidc(self):
|
||
|
"""test OAuth Source With With OIDC"""
|
||
|
sleep(1)
|
||
|
# Bootstrap all needed objects
|
||
|
authentication_flow = Flow.objects.get(slug="default-source-authentication")
|
||
|
enrollment_flow = Flow.objects.get(slug="default-source-enrollment")
|
||
|
|
||
|
OAuthSource.objects.create(
|
||
|
name="dex",
|
||
|
slug="dex",
|
||
|
authentication_flow=authentication_flow,
|
||
|
enrollment_flow=enrollment_flow,
|
||
|
provider_type="openid-connect",
|
||
|
authorization_url="http://127.0.0.1:5556/dex/auth",
|
||
|
access_token_url=TOKEN_URL,
|
||
|
profile_url="http://127.0.0.1:5556/dex/userinfo",
|
||
|
consumer_key="example-app",
|
||
|
consumer_secret=OAUTH_TEST_SECRET,
|
||
|
)
|
||
|
|
||
|
self.driver.get(self.live_server_url)
|
||
|
|
||
|
self.wait.until(
|
||
|
ec.presence_of_element_located(
|
||
|
(By.CLASS_NAME, "pf-c-login__main-footer-links-item-link")
|
||
|
)
|
||
|
)
|
||
|
self.driver.find_element(
|
||
|
By.CLASS_NAME, "pf-c-login__main-footer-links-item-link"
|
||
|
).click()
|
||
|
|
||
|
# Now we should be at the IDP, wait for the login field
|
||
|
self.wait.until(ec.presence_of_element_located((By.ID, "login")))
|
||
|
self.driver.find_element(By.ID, "login").send_keys("admin@example.com")
|
||
|
self.driver.find_element(By.ID, "password").send_keys("password")
|
||
|
self.driver.find_element(By.ID, "password").send_keys(Keys.ENTER)
|
||
|
|
||
|
# Wait until we're logged in
|
||
|
self.wait.until(
|
||
|
ec.presence_of_element_located((By.CSS_SELECTOR, "button[type=submit]"))
|
||
|
)
|
||
|
self.driver.find_element(By.CSS_SELECTOR, "button[type=submit]").click()
|
||
|
|
||
|
# At this point we've been redirected back
|
||
|
# and we're asked for the username
|
||
|
sleep(5000)
|
||
|
self.driver.find_element(By.NAME, "username").click()
|
||
|
self.driver.find_element(By.NAME, "username").send_keys("foo")
|
||
|
self.driver.find_element(By.NAME, "username").send_keys(Keys.ENTER)
|
||
|
|
||
|
# Wait until we've loaded the user info page
|
||
|
self.wait.until(ec.presence_of_element_located((By.LINK_TEXT, "foo")))
|
||
|
self.driver.find_element(By.LINK_TEXT, "foo").click()
|
||
|
|
||
|
self.wait_for_url(self.url("passbook_core:user-settings"))
|
||
|
self.assertEqual(
|
||
|
self.driver.find_element(By.XPATH, "//a[contains(@href, '/-/user/')]").text,
|
||
|
"foo",
|
||
|
)
|
||
|
self.assertEqual(
|
||
|
self.driver.find_element(By.ID, "id_username").get_attribute("value"), "foo"
|
||
|
)
|
||
|
self.assertEqual(
|
||
|
self.driver.find_element(By.ID, "id_name").get_attribute("value"), "admin",
|
||
|
)
|
||
|
self.assertEqual(
|
||
|
self.driver.find_element(By.ID, "id_email").get_attribute("value"),
|
||
|
"admin@example.com",
|
||
|
)
|