File: //usr/lib/python3/dist-packages/twisted/cred/test/__pycache__/test_strcred.cpython-38.pyc
U
W[�f � @ s> d Z ddlmZmZ ddlZddlmZ ddlmZ ddl m
Z
m Z m Z m
Z
ddlmZmZmZ ddlmZ dd lmZ dd
lmZ dd lmZ dd lmZ z ddl Z W n e k
r� dZ Y nX z ddl Z W n e k
r� dZ Y nX z ddl Z W n e k
�r dZ Y nX d
d� Z G dd� dej!�Z"G dd� dej!�Z#G dd� dej!�Z$G dd� dej!�Z%G dd� dej!�Z&G dd� dej!�Z'G dd � d ej!�Z(G d d � d ej!�Z)G d d � d ej*e
j+�Z,G d!d"� d"ej!�Z-G d#d$� d$ej*e
j+�Z.G d%d&� d&ej*e
j+�Z/G d'd(� d(ej*e
j+�Z0G d)d*� d*ej*e
j+�Z1G d+d,� d,ej!�Z2dS )-z
L{twisted.cred.strcred}.
� )�absolute_import�divisionN)�plugin)�unittest)� credentials�checkers�error�strcred)� cred_file�cred_anonymous� cred_unix)�usage)�NativeStringIO)�FilePath)� UserDatabase)�
requireModulec C s( d} | dd� t �� D �kr$| d7 } q| S )zC
Helper method to produce an auth type that doesn't exist.
ZThisPluginDoesNotExistc S s g | ]
}|j �qS � )�authType)�.0�factoryr r �@/usr/lib/python3/dist-packages/twisted/cred/test/test_strcred.py�
<listcomp>- s z&getInvalidAuthType.<locals>.<listcomp>�_)r �findCheckerFactories)ZinvalidAuthTyper r r �getInvalidAuthType' s �
r c @ s e Zd Zdd� Zdd� ZdS )�PublicAPITestsc C s. t � }| �tjtj|� | �tjtj|� dS )z9
The description string cannot be empty.
N�r � assertRaisesr ZInvalidAuthType� makeChecker�findCheckerFactory��selfZiatr r r �test_emptyDescription5 s �z$PublicAPITests.test_emptyDescriptionc C s. t � }| �tjtj|� | �tjtj|� dS )z@
An unrecognized auth type raises an exception.
Nr r r r r �test_invalidAuthType? s �z#PublicAPITests.test_invalidAuthTypeN)�__name__�
__module__� __qualname__r" r# r r r r r 3 s
r c @ s e Zd Zdd� Zdd� ZdS )�StrcredFunctionsTestsc C s. t t�� �}t�tj�D ]}| �||� qdS )zP
L{strcred.findCheckerFactories} returns all available plugins.
N)�listr r r Z
getPluginsZICheckerFactory�assertIn)r! ZavailablePluginsZplgr r r �test_findCheckerFactoriesL s z/StrcredFunctionsTests.test_findCheckerFactoriesc C s | � t�d�tj� dS )z{
L{strcred.findCheckerFactory} returns the first plugin
available for a given authentication type.
�fileN)�assertIdenticalr r r
�theFileCheckerFactory�r! r r r �test_findCheckerFactoryU s �z-StrcredFunctionsTests.test_findCheckerFactoryN)r$ r% r& r* r/ r r r r r' J s r' c @ s< e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
S )�MemoryCheckerTestsc C sH t �dd�| _t �dd�| _t �dd�| _t �dd�| _t�d�| _d S ) N�admin�asdf�alice�foo�foobar�x�yzzmemory:admin:asdf:alice:foo) r �UsernamePasswordr1 r3 �badPass�badUserr r �checkerr. r r r �setUpa s
zMemoryCheckerTests.setUpc C s* | � tj�| j�� | �tj| jj� dS �z�
Verifies that strcred.makeChecker('memory') returns an object
that implements the L{ICredentialsChecker} interface.
N� �
assertTruer �ICredentialsChecker�
providedByr; r) r �IUsernamePassword�credentialInterfacesr. r r r �test_isCheckeri s �z!MemoryCheckerTests.test_isCheckerc C s | � tjtjd� dS )z�
An argument string which does not contain user:pass pairs
(i.e., an odd number of ':' characters) raises an exception.
z memory:a:b:cN)r r ZInvalidAuthArgumentStringr r. r r r �test_badFormatArgStrings s �z*MemoryCheckerTests.test_badFormatArgStringc s � fdd�}� j �� j��|�S )�;
The checker works with valid credentials.
c s � � | � jj� d S �N�� assertEqualr1 �username�rJ r. r r �
_gotAvatar� s zAMemoryCheckerTests.test_memoryCheckerSucceeds.<locals>._gotAvatar�r; �requestAvatarIdr1 � addCallback�r! rL r r. r �test_memoryCheckerSucceeds| s ��z-MemoryCheckerTests.test_memoryCheckerSucceedsc C s | � | j�| j�tj�S �z=
The checker fails with an invalid username.
��
assertFailurer; rN r: r �UnauthorizedLoginr. r r r � test_memoryCheckerFailsUsername� s �z2MemoryCheckerTests.test_memoryCheckerFailsUsernamec C s | � | j�| j�tj�S �z=
The checker fails with an invalid password.
�rT r; rN r9 r rU r. r r r � test_memoryCheckerFailsPassword� s �z2MemoryCheckerTests.test_memoryCheckerFailsPasswordN) r$ r% r& r< rD rE rQ rV rY r r r r r0 _ s
r0 c @ s e Zd Zdd� Zdd� ZdS )�AnonymousCheckerTestsc C s0 t �d�}| �tj�|�� | �tj|j � dS )z�
Verifies that strcred.makeChecker('anonymous') returns an object
that implements the L{ICredentialsChecker} interface.
� anonymousN)
r r r? r r@ rA r) r �
IAnonymousrC )r! r; r r r rD � s
z$AnonymousCheckerTests.test_isCheckerc s. t �d�}|�t�� �}� fdd�}|�|�S )z?
We can log in anonymously using this checker.
r[ c s � � tj| � d S rG )r, r Z ANONYMOUS)Zavatarr. r r rL � s zEAnonymousCheckerTests.testAnonymousAccessSucceeds.<locals>._gotAvatar)r r rN r Z AnonymousrO )r! r; ZrequestrL r r. r �testAnonymousAccessSucceeds� s
z1AnonymousCheckerTests.testAnonymousAccessSucceedsN)r$ r% r& rD r] r r r r rZ � s
rZ c @ s� e Zd Zddd�Zdd� Zdd� Zdd � Zd
d � Zd d
� Zdd� Z dd� Z
dd� Z dd� Z de
eefkr�g Ze
dfedfedffD ]\ZZedkr�eeg7 Zq�eee e
e e fD ]Zdd�e� e_q�dS ) �UnixCheckerTestsr2 r4 )r1 r3 c C s* t �|t�| j| d�dddddddf �S )N�F/r i�� � ���)�spwdZ struct_spwd�crypt�users)r! rJ r r r �_spwd_getspnam� s �z UnixCheckerTests._spwd_getspnamc
C s� t �dd�| _t �dd�| _t �dd�| _t �dd�| _t�d�| _t �d d
�| _ t �d d �| _
t �d d
�| _ t �dd�| _ t�d�| _
tr�t� }| j�� D ]*\}}|�|t�|d�dd|d| d� q�| �td|j� tr�| �td| j� d S )Nr1 r2 r3 r4 r5 r6 r7 �unix� admin� asdf� alice� foo� foobar� x� yzr_ i� z/home/z/bin/sh�getpwnamZgetspnam)r r8 r1 r3 r9 r: r r r; �
adminBytesZ
aliceBytes� badPassBytes� badUserBytes� checkerBytes�pwdr rd �itemsZaddUserrc Zpatchrn rb re )r! ZdatabaserJ �passwordr r r r< � s2
�zUnixCheckerTests.setUpc C sP | � tj�| j�� | �tj| jj� | � tj�| j �� | �tj| j j� dS )z�
Verifies that strcred.makeChecker('unix') returns an object
that implements the L{ICredentialsChecker} interface.
N)
r? r r@ rA r; r) r rB rC rr r. r r r rD � s �
��z UnixCheckerTests.test_isCheckerc s � fdd�}� j �� j��|�S )rF c s � � | � jj� d S rG rH rK r. r r rL � s z=UnixCheckerTests.test_unixCheckerSucceeds.<locals>._gotAvatarrM rP r r. r �test_unixCheckerSucceeds� s ��z)UnixCheckerTests.test_unixCheckerSucceedsc s � fdd�}� j �� j��|�S )zD
The checker works with valid L{bytes} credentials.
c s � � | � jj�d�� d S )N�utf-8)rI ro rJ �decoderK r. r r rL � s �zBUnixCheckerTests.test_unixCheckerSucceedsBytes.<locals>._gotAvatar)rr rN ro rO rP r r. r � test_unixCheckerSucceedsBytes� s ��z.UnixCheckerTests.test_unixCheckerSucceedsBytesc C s | � | j�| j�tj�S rR rS r. r r r � test_unixCheckerFailsUsername� s �z.UnixCheckerTests.test_unixCheckerFailsUsernamec C s | � | j�| j�tj�S )zF
The checker fails with an invalid L{bytes} username.
)rT rr rN rq r rU r. r r r �"test_unixCheckerFailsUsernameBytes s
��z3UnixCheckerTests.test_unixCheckerFailsUsernameBytesc C s | � | j�| j�tj�S rW rX r. r r r � test_unixCheckerFailsPassword s �z.UnixCheckerTests.test_unixCheckerFailsPasswordc C s | � | j�| j�tj�S )zF
The checker fails with an invalid L{bytes} password.
)rT rr rN rp r rU r. r r r �"test_unixCheckerFailsPasswordBytes s
��z3UnixCheckerTests.test_unixCheckerFailsPasswordBytesNrs rb rc z$Required module(s) are unavailable: z, )r$ r% r& rd re r< rD rv ry rz r{ r| r} rs rb rc Z availability�module�name�method�join�skipr r r r r^ � s6 � ��r^ c @ s e Zd ZdZesdZdd� ZdS )�
CryptTestsz9
L{crypt} has functions for encrypting password.
z%Required module is unavailable: cryptc
C s d}dD ]V}zt � ||�}W n tk
r4 Y qY nX d}| �t�||�� | �t�||�� qdD ]�}tt |d�}|szqdd}t � ||�}|d }t�||�} | �| � t�|�d�|�d��} | �| � t�||�} | �| � t�|�d�|�d��} | �| � qddS ) z4
L{cred_unix.verifyCryptedPassword}
zsample password ^%$)NZabz$1x1234)Z
METHOD_SHA512Z
METHOD_SHA256Z
METHOD_MD5Z METHOD_CRYPTNzinteresting password xyzZblahfooincorrectrw )rc � TypeErrorr? r ZverifyCryptedPassword� assertFalse�getattr�encode)
r! ru ZsaltZcryptedCorrectZcryptedIncorrectr� Z cryptMethodZcryptedZincorrectCrypted�resultr r r �test_verifyCryptedPassword1 s@
�
�
�
�z%CryptTests.test_verifyCryptedPasswordN)r$ r% r& �__doc__rc r� r� r r r r r� * s r� c @ sP e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
dd� Z dS )�FileDBCheckerTestsz*
C{--auth=file:...} file checker.
c C sh t �dd�| _t �dd�| _t �dd�| _t �dd�| _| �� | _t| j�� d� t
� d | j �| _ d S )
Nrg rh ri rj rk rl rm � admin:asdf
alice:foo
�file:)
r r8 r1 r3 r9 r: �mktemp�filenamer Z
setContentr r r; r. r r r r< d s
zFileDBCheckerTests.setUpc C s d}t j�|�r|d7 }q|S )Nz
/DoesNotExistr )�os�path�exists)r! r� r r r �
_fakeFilenamen s
z FileDBCheckerTests._fakeFilenamec C s* | � tj�| j�� | �tj| jj� dS r= r> r. r r r rD u s �z!FileDBCheckerTests.test_isCheckerc s � fdd�}� j �� j��|�S )rF c s � � | � jj� d S rG rH rK r. r r rL � s z?FileDBCheckerTests.test_fileCheckerSucceeds.<locals>._gotAvatarrM rP r r. r �test_fileCheckerSucceeds s ��z+FileDBCheckerTests.test_fileCheckerSucceedsc C s | � | j�| j�tj�S rR rS r. r r r � test_fileCheckerFailsUsername� s �z0FileDBCheckerTests.test_fileCheckerFailsUsernamec C s | � | j�| j�tj�S rW rX r. r r r � test_fileCheckerFailsPassword� s �z0FileDBCheckerTests.test_fileCheckerFailsPasswordc C s$ | � ttjd� | � ttjd� dS )z4
An empty filename raises an error.
r+ r� N)r �
ValueErrorr r r. r r r �test_failsWithEmptyFilename� s z.FileDBCheckerTests.test_failsWithEmptyFilenamec C sF t jj}t� }|t j_t�d| �� � |t j_| �t j|� � � dS )zt
When the file auth plugin is given a file that doesn't exist, it
should produce a warning.
r� N)
r
r- Z errorOutputr r r r� r) ZinvalidFileWarning�getvalue)r! Z oldOutputZ newOutputr r r �test_warnWithBadFilename� s z+FileDBCheckerTests.test_warnWithBadFilenameN) r$ r% r& r� r< r� rD r� r� r� r� r� r r r r r� _ s
r� c @ s< e Zd ZdZdZed�dkr dZed�dkr0dZdd� ZdS ) �SSHCheckerTestsz�
Tests for the C{--auth=sshkey:...} checker. The majority of the tests for the
ssh public key database checker are in
L{twisted.conch.test.test_checkers.SSHPublicKeyCheckerTestCase}.
NZ cryptographyz cryptography is not availableZpyasn1zpyasn1 is not availablec C s0 t �d�}| �tj�|�� | �tj|j � dS )z�
Verifies that strcred.makeChecker('sshkey') returns an object
that implements the L{ICredentialsChecker} interface.
ZsshkeyN)
r r r? r r@ rA r) r ZISSHPrivateKeyrC )r! Z
sshCheckerr r r rD � s
�z SSHCheckerTests.test_isChecker)r$ r% r& r� r� r rD r r r r r� � s r� c @ s e Zd ZdZdS )� DummyOptionsz@
Simple options for testing L{strcred.AuthOptionMixin}.
N)r$ r% r& r� r r r r r� � s r� c @ sL e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dS )�CheckerOptionsTestsc C sX t � }|�ddg� | �t|d �d� t � }|�ddddg� | �t|d �d� dS )zu
The C{--auth} command line creates a list in the
Options instance and appends values to it.
�--auth�memory� credCheckers� � N)r� � parseOptionsrI �len�r! �optionsr r r �test_createsList� s z$CheckerOptionsTests.test_createsListc C s< t � }t� }| �tj|jd|g� | �tj|jd|g� dS )zx
The C{--auth} command line raises an exception when it
gets a parameter it doesn't understand.
r� �--help-auth-typeN)r� r r r
�
UsageErrorr� )r! r� ZinvalidParameterr r r �test_invalidAuthError� s � �z)CheckerOptionsTests.test_invalidAuthErrorc C s� t � }|�ddddg� |d }| �t|tj �d� | �t|tj �d� |tj d }|tj d }| �tj �
|�� | �tj �
|�� | � tj|j � | � tj|j � dS )z�
The C{--auth} command line creates a dictionary mapping supported
interfaces to the list of credentials checkers that support it.
r� r� r[ �credInterfacesr� r N)
r� r� rI r� r r\ rB r? r r@ rA r) rC )r! r� ZchdZ chdAnonymousZ chdUserPassr r r �test_createsDictionary� s ��z*CheckerOptionsTests.test_createsDictionaryc C s6 t � }|�ddddg� | �|d |d tj � dS )z�
When two C{--auth} arguments are passed along which support the same
interface, a list with both is created.
r� r� rf r� r� N)r� r� rI r rB r� r r r � test_credInterfacesProvidesLists s �z4CheckerOptionsTests.test_credInterfacesProvidesListsc C s6 g }t � }|�� D ] }| �|j|� |�|j� qdS )zG
The list for C{--help-auth} does not duplicate items.
N)r� � _checkerFactoriesForOptHelpAuthZ assertNotInr �append)r! Z authTypesr� Zcfr r r �!test_listDoesNotDisplayDuplicates s
z5CheckerOptionsTests.test_listDoesNotDisplayDuplicatesc C sH t � }t� }||_| �t|jdg� t�� D ]}| �|j |�
� � q,dS )zz
The C{--help-auth} argument correctly displays all
available authentication plugins, then exits.
z --help-authN) r r� �
authOutputr �
SystemExitr� r r r) r r� )r! � newStdoutr� ZcheckerFactoryr r r �test_displaysListCorrectly s z.CheckerOptionsTests.test_displaysListCorrectlyc C sT t � }t� }||_| �t|jddg� tjjD ] }|� � r.| �
|� � |� � � q.dS )z�
The C{--help-auth-for} argument will correctly display the help file for a
particular authentication plugin.
r� r+ N) r r� r� r r� r� r
r- ZauthHelp�stripr) r� )r! r� r� �liner r r �test_displaysHelpCorrectly+ s � z.CheckerOptionsTests.test_displaysHelpCorrectlyc C s0 t � }| �tj|jddg�}| �t|�d� dS )z�
When the checker specified by C{--auth} raises an unexpected error, it
should be caught and re-raised within a L{usage.UsageError}.
r� r+ z,Unexpected error: 'file' requires a filenameN)r� r r
r� r� rI �str)r! r� �errr r r �test_unexpectedException: s �
�z,CheckerOptionsTests.test_unexpectedExceptionN) r$ r% r& r� r� r� r� r� r� r� r� r r r r r� � s
r� c @ s e Zd ZejfZdS )�OptionsForUsernamePasswordN)r$ r% r& r rB �supportedInterfacesr r r r r� G s r� c @ s e Zd ZejfZdS )� OptionsForUsernameHashedPasswordN)r$ r% r& r ZIUsernameHashedPasswordr� r r r r r� L s r� c @ s e Zd ZdZdS )� OptionsSupportsAllInterfacesN�r$ r% r& r� r r r r r� Q s r� c @ s e Zd Zg ZdS )�OptionsSupportsNoInterfacesNr� r r r r r� V s r� c @ s` e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
dd� Z dd� Z dd� Z
dS )�LimitingInterfacesTestsa�
Tests functionality that allows an application to limit the
credential interfaces it can support. For the purposes of this
test, we use IUsernameHashedPassword, although this will never
really be used by the command line.
(I have, to date, not thought of a half-decent way for a user to
specify a hash algorithm via the command-line. Nor do I think it's
very useful.)
I should note that, at first, this test is counter-intuitive,
because we're using the checker with a pre-defined hash function
as the 'bad' checker. See the documentation for
L{twisted.cred.checkers.FilePasswordDB.hash} for more details.
c C s\ | � � | _t| jd��}|�d� W 5 Q R X t�| j�| _tj| j| jd�| _t� � | _
d S )N�wbr� )�hash) r� r� �open�writer ZFilePasswordDB� goodChecker�_hash�
badCheckerZAllowAnonymousAccess� anonChecker)r! �fr r r r< l s
�z LimitingInterfacesTests.setUpc C s |S )z>
A dumb hash that doesn't really do anything.
r )r! ZnetworkUsernameZnetworkPasswordZstoredPasswordr r r r� v s z LimitingInterfacesTests._hashc C sB t � }| �|�tj�� | �|�tj�� | �tj |j
| j � dS )zE
The supportsInterface method behaves appropriately.
N) r� r? �supportsInterfacer rB r� r\ r r �UnsupportedInterfaces�
addCheckerr� r� r r r �test_supportsInterface} s
�
� �z.LimitingInterfacesTests.test_supportsInterfacec C s. t � }| �|�tj�� | �|�tj�� dS )z|
The supportsInterface method behaves appropriately
when the supportedInterfaces attribute is None.
N)r� r? r� r rB r\ r� r r r �test_supportsAllInterfaces� s
�
�z2LimitingInterfacesTests.test_supportsAllInterfacesc C s6 t � }tj}tj}| �|�|�� | �|�|�� dS )zJ
The supportsCheckerFactory method behaves appropriately.
N)r� r
r- r �theAnonymousCheckerFactoryr? �supportsCheckerFactoryr� )r! r� ZfileCFZanonCFr r r �test_supportsCheckerFactory� s
z3LimitingInterfacesTests.test_supportsCheckerFactoryc C s| t � }|�| j� |jd }| �|d | d | j� | �|d d | j� | �t|d | �d� | �t|d �d� dS )z�
When addChecker is called with a checker that implements at least one
of the interfaces our application supports, it is successful.
r r� r� r� N)r� r� r� r� r, rI r� )r! r� Zifacer r r �test_canAddSupportedChecker� s
�z3LimitingInterfacesTests.test_canAddSupportedCheckerc C s t � }| �tj|j| j� dS )z~
When addChecker is called with a checker that does not implement any
supported interfaces, it fails.
N)r� r r r� r� r� r� r r r �#test_failOnAddingUnsupportedChecker� s
�z;LimitingInterfacesTests.test_failOnAddingUnsupportedCheckerc C s( t � }tjj}| �tj|jd|g� dS )zq
The C{--auth} command line raises an exception when it
gets a checker we don't support.
r� N)r� r r� r r r
r� r� )r! r� r r r r � test_unsupportedInterfaceError� s �z6LimitingInterfacesTests.test_unsupportedInterfaceErrorc C sB t � }|�� D ].}d}|jD ]}|�|�r d}q |rt�� �qdS )z�
C{--help-auth} will only list checkers that purport to
supply at least one of the credential interfaces our
application can use.
TFN)r� r� rC r� r r� )r! r� r ZinvalidZ interfacer r r �test_helpAuthLimitsOutput� s
z1LimitingInterfacesTests.test_helpAuthLimitsOutputc C sl t � }d}t�� D ]}|�|�s|} q*q| �|d� t� }||_| �t|j ddg� | �
tj |� � � dS )z�
C{--help-auth-type} will display a warning if you get
help for an authType that does not supply at least one of the
credential interfaces our application can use.
Nr� r[ )
r� r r r� ZassertNotIdenticalr r� r r� r� r) ZnotSupportedWarningr� )r! r� ZinvalidFactoryr r� r r r � test_helpAuthTypeLimitsOutput� s
�z5LimitingInterfacesTests.test_helpAuthTypeLimitsOutputN)r$ r% r& r� r< r� r� r� r� r� r� r� r� r� r r r r r� [ s
r� )3r� Z
__future__r r r� Ztwistedr Z
twisted.trialr Z twisted.credr r r r Ztwisted.pluginsr
r r Ztwisted.pythonr
Ztwisted.python.compatr Ztwisted.python.filepathr Ztwisted.python.fakepwdr Ztwisted.python.reflectr rc � ImportErrorrs rb r ZTestCaser r' r0 rZ r^ r� r� r� ZOptionsZAuthOptionMixinr� r� r� r� r� r� r� r r r r �<module> sN
9z5Q t