mirror of
https://github.com/fastapi-users/fastapi-users.git
synced 2025-08-15 03:04:27 +08:00
77d0077503
* Fix: LoginResponse is set to application/json, and should return response with status code 204 when body is empty. The database backend login response is a cookie header with empty body. This causes issues when integrating the openapi schema into openapi-generator. Because the code generator expects the response to be a JSON when the status code isn't 204. * Fix: Bump fastapi version to appropriate version for status code 204 handling. * Build a full response for CookieTransport login_response Co-authored-by: Can H. Tartanoglu <2947298-caniko@users.noreply.gitlab.com> Co-authored-by: François Voron <fvoron@gmail.com>
109 lines
2.9 KiB
Python
109 lines
2.9 KiB
Python
import re
|
|
|
|
import pytest
|
|
from fastapi import Response, status
|
|
|
|
from fastapi_users.authentication.transport import CookieTransport
|
|
|
|
COOKIE_MAX_AGE = 3600
|
|
COOKIE_NAME = "COOKIE_NAME"
|
|
|
|
|
|
@pytest.fixture(
|
|
params=[
|
|
("/", None, True, True),
|
|
("/arthur", None, True, True),
|
|
("/", "camelot.bt", True, True),
|
|
("/", None, False, True),
|
|
("/", None, True, False),
|
|
]
|
|
)
|
|
def cookie_transport(request) -> CookieTransport:
|
|
path, domain, secure, httponly = request.param
|
|
return CookieTransport(
|
|
cookie_name=COOKIE_NAME,
|
|
cookie_max_age=COOKIE_MAX_AGE,
|
|
cookie_path=path,
|
|
cookie_domain=domain,
|
|
cookie_secure=secure,
|
|
cookie_httponly=httponly,
|
|
)
|
|
|
|
|
|
@pytest.mark.authentication
|
|
@pytest.mark.asyncio
|
|
async def test_get_login_response(cookie_transport: CookieTransport):
|
|
path = cookie_transport.cookie_path
|
|
domain = cookie_transport.cookie_domain
|
|
secure = cookie_transport.cookie_secure
|
|
httponly = cookie_transport.cookie_httponly
|
|
|
|
response = await cookie_transport.get_login_response("TOKEN", Response())
|
|
|
|
assert isinstance(response, Response)
|
|
assert response.status_code == status.HTTP_204_NO_CONTENT
|
|
|
|
cookies = [header for header in response.raw_headers if header[0] == b"set-cookie"]
|
|
assert len(cookies) == 1
|
|
|
|
cookie = cookies[0][1].decode("latin-1")
|
|
|
|
assert f"Max-Age={COOKIE_MAX_AGE}" in cookie
|
|
assert f"Path={path}" in cookie
|
|
|
|
if domain:
|
|
assert f"Domain={domain}" in cookie
|
|
else:
|
|
assert "Domain=" not in cookie
|
|
|
|
if secure:
|
|
assert "Secure" in cookie
|
|
else:
|
|
assert "Secure" not in cookie
|
|
|
|
if httponly:
|
|
assert "HttpOnly" in cookie
|
|
else:
|
|
assert "HttpOnly" not in cookie
|
|
|
|
cookie_name_value = re.match(r"^(\w+)=([^;]+);", cookie)
|
|
assert cookie_name_value is not None
|
|
|
|
cookie_name = cookie_name_value[1]
|
|
assert cookie_name == COOKIE_NAME
|
|
|
|
cookie_value = cookie_name_value[2]
|
|
assert cookie_value == "TOKEN"
|
|
|
|
|
|
@pytest.mark.authentication
|
|
@pytest.mark.asyncio
|
|
async def test_get_logout_response(cookie_transport: CookieTransport):
|
|
response = Response()
|
|
logout_response = await cookie_transport.get_logout_response(response)
|
|
|
|
assert logout_response is None
|
|
|
|
cookies = [header for header in response.raw_headers if header[0] == b"set-cookie"]
|
|
assert len(cookies) == 1
|
|
|
|
cookie = cookies[0][1].decode("latin-1")
|
|
|
|
assert "Max-Age=0" in cookie
|
|
|
|
|
|
@pytest.mark.authentication
|
|
@pytest.mark.openapi
|
|
def test_get_openapi_login_responses_success(cookie_transport: CookieTransport):
|
|
assert cookie_transport.get_openapi_login_responses_success() == {
|
|
status.HTTP_204_NO_CONTENT: {"model": None}
|
|
}
|
|
|
|
|
|
@pytest.mark.authentication
|
|
@pytest.mark.openapi
|
|
def test_get_openapi_logout_responses_success(cookie_transport: CookieTransport):
|
|
assert cookie_transport.get_openapi_logout_responses_success() == {
|
|
status.HTTP_200_OK: {"model": None}
|
|
}
|