mirror of
https://github.com/zulip/zulip.git
synced 2025-11-04 05:53:43 +00:00
87 lines
3.3 KiB
Python
87 lines
3.3 KiB
Python
from __future__ import absolute_import
|
|
from typing import Any, Callable
|
|
|
|
from zerver.lib.sessions import (
|
|
user_sessions,
|
|
delete_session,
|
|
delete_user_sessions,
|
|
delete_realm_user_sessions,
|
|
delete_all_user_sessions,
|
|
delete_all_deactivated_user_sessions,
|
|
)
|
|
|
|
from zerver.models import (
|
|
UserProfile, get_user_profile_by_id,
|
|
get_user_profile_by_email, get_realm
|
|
)
|
|
|
|
from zerver.lib.test_classes import ZulipTestCase
|
|
|
|
|
|
class TestSessions(ZulipTestCase):
|
|
|
|
def do_test_session(self, user, action, expected_result):
|
|
# type: (str, Callable[[], Any], bool) -> None
|
|
self.login(user)
|
|
self.assertIn('_auth_user_id', self.client.session)
|
|
action()
|
|
if expected_result:
|
|
result = self.client_get('/')
|
|
self.assertEqual('/login', result.url)
|
|
else:
|
|
self.assertIn('_auth_user_id', self.client.session)
|
|
|
|
def test_delete_session(self):
|
|
# type: () -> None
|
|
self.login('hamlet@zulip.com')
|
|
self.assertIn('_auth_user_id', self.client.session)
|
|
user_profile = get_user_profile_by_email('hamlet@zulip.com')
|
|
for session in user_sessions(user_profile):
|
|
delete_session(session)
|
|
result = self.client_get("/")
|
|
self.assertEqual('/login', result.url)
|
|
|
|
def test_delete_user_sessions(self):
|
|
# type: () -> None
|
|
user_profile = get_user_profile_by_email('hamlet@zulip.com')
|
|
self.do_test_session('hamlet@zulip.com', lambda: delete_user_sessions(user_profile), True)
|
|
self.do_test_session('othello@zulip.com', lambda: delete_user_sessions(user_profile), False)
|
|
|
|
def test_delete_realm_user_sessions(self):
|
|
# type: () -> None
|
|
realm = get_realm('zulip')
|
|
self.do_test_session('hamlet@zulip.com', lambda: delete_realm_user_sessions(realm), True)
|
|
self.do_test_session('sipbtest@mit.edu', lambda: delete_realm_user_sessions(realm), False)
|
|
|
|
def test_delete_all_user_sessions(self):
|
|
# type: () -> None
|
|
self.do_test_session('hamlet@zulip.com', lambda: delete_all_user_sessions(), True)
|
|
self.do_test_session('sipbtest@mit.edu', lambda: delete_all_user_sessions(), True)
|
|
|
|
def test_delete_all_deactivated_user_sessions(self):
|
|
# type: () -> None
|
|
|
|
# Test that no exception is thrown with a logged-out session
|
|
self.login('hamlet@zulip.com')
|
|
self.assertIn('_auth_user_id', self.client.session)
|
|
self.client_post('/accounts/logout/')
|
|
delete_all_deactivated_user_sessions()
|
|
result = self.client_get("/")
|
|
self.assertEqual('/login', result.url)
|
|
|
|
# Test nothing happens to an active user's session
|
|
self.login('othello@zulip.com')
|
|
self.assertIn('_auth_user_id', self.client.session)
|
|
delete_all_deactivated_user_sessions()
|
|
self.assertIn('_auth_user_id', self.client.session)
|
|
|
|
# Test that a deactivated session gets logged out
|
|
self.login('cordelia@zulip.com')
|
|
self.assertIn('_auth_user_id', self.client.session)
|
|
user_profile_3 = get_user_profile_by_email('cordelia@zulip.com')
|
|
user_profile_3.is_active = False
|
|
user_profile_3.save()
|
|
delete_all_deactivated_user_sessions()
|
|
result = self.client_get("/")
|
|
self.assertEqual('/login', result.url)
|