1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
|
#
# Copyright (C) 2016, Red Hat, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
# implied.
# See the License for the specific language governing permissions and
# limitations under the License.
import six
import webob
from heat.common import noauth
from heat.tests import common
EXPECTED_ENV_RESPONSE = {
'HTTP_X_IDENTITY_STATUS': 'Confirmed',
'HTTP_X_PROJECT_ID': 'admin',
'HTTP_X_PROJECT_NAME': 'admin',
'HTTP_X_USER_ID': 'admin',
'HTTP_X_USER_NAME': 'admin',
'HTTP_X_ROLES': 'admin',
'HTTP_X_SERVICE_CATALOG': {},
'HTTP_X_AUTH_USER': 'admin',
'HTTP_X_AUTH_KEY': 'unset',
}
class FakeApp(object):
"""This represents a WSGI app protected by our auth middleware."""
def __init__(self, expected_env=None):
expected_env = expected_env or {}
self.expected_env = dict(EXPECTED_ENV_RESPONSE)
self.expected_env.update(expected_env)
def __call__(self, env, start_response):
"""Assert that expected environment is present when finally called."""
for k, v in self.expected_env.items():
assert env[k] == v, '%s != %s' % (env[k], v)
resp = webob.Response()
resp.body = six.b('SUCCESS')
return resp(env, start_response)
class KeystonePasswordAuthProtocolTest(common.HeatTestCase):
def setUp(self):
super(KeystonePasswordAuthProtocolTest, self).setUp()
self.config = {'auth_uri': 'http://keystone.test.com:5000'}
self.app = FakeApp()
self.middleware = noauth.NoAuthProtocol(
self.app, self.config)
def _start_fake_response(self, status, headers):
self.response_status = int(status.split(' ', 1)[0])
self.response_headers = dict(headers)
def test_request_with_bad_credentials(self):
req = webob.Request.blank('/tenant_id1/')
req.headers['X_AUTH_USER'] = 'admin'
req.headers['X_AUTH_KEY'] = 'blah'
req.headers['X_AUTH_URL'] = self.config['auth_uri']
self.middleware(req.environ, self._start_fake_response)
self.assertEqual(200, self.response_status)
def test_request_with_no_tenant_in_url_or_auth_headers(self):
req = webob.Request.blank('/')
self.middleware(req.environ, self._start_fake_response)
self.assertEqual(200, self.response_status)
|
