mirror of
https://github.com/zulip/zulip.git
synced 2025-11-03 13:33:24 +00:00
365fe0b3d5
Fixes #2665. Regenerated by tabbott with `lint --fix` after a rebase and change in parameters. Note from tabbott: In a few cases, this converts technical debt in the form of unsorted imports into different technical debt in the form of our largest files having very long, ugly import sequences at the start. I expect this change will increase pressure for us to split those files, which isn't a bad thing. Signed-off-by: Anders Kaseorg <anders@zulip.com>
99 lines
3.4 KiB
Python
99 lines
3.4 KiB
Python
from typing import Any
|
|
from unittest.mock import patch
|
|
|
|
import ujson
|
|
from django.http import HttpResponse
|
|
|
|
from zerver.lib.test_classes import ZulipTestCase
|
|
from zerver.lib.users import get_api_key
|
|
from zerver.models import get_realm, get_user
|
|
|
|
|
|
class ZephyrTest(ZulipTestCase):
|
|
def test_webathena_kerberos_login(self) -> None:
|
|
user = self.example_user('hamlet')
|
|
self.login_user(user)
|
|
|
|
def post(subdomain: Any, **kwargs: Any) -> HttpResponse:
|
|
params = {k: ujson.dumps(v) for k, v in kwargs.items()}
|
|
return self.client_post('/accounts/webathena_kerberos_login/', params,
|
|
subdomain=subdomain)
|
|
|
|
result = post("zulip")
|
|
self.assert_json_error(result, 'Could not find Kerberos credential')
|
|
|
|
result = post("zulip", cred='whatever')
|
|
self.assert_json_error(result, 'Webathena login not enabled')
|
|
|
|
email = str(self.mit_email("starnine"))
|
|
realm = get_realm('zephyr')
|
|
user = get_user(email, realm)
|
|
api_key = get_api_key(user)
|
|
self.login_user(user)
|
|
|
|
def ccache_mock(**kwargs: Any) -> Any:
|
|
return patch('zerver.views.zephyr.make_ccache', **kwargs)
|
|
|
|
def ssh_mock(**kwargs: Any) -> Any:
|
|
return patch('zerver.views.zephyr.subprocess.check_call', **kwargs)
|
|
|
|
def mirror_mock() -> Any:
|
|
return self.settings(PERSONAL_ZMIRROR_SERVER='server')
|
|
|
|
def logging_mock() -> Any:
|
|
return patch('logging.exception')
|
|
|
|
cred = dict(cname=dict(nameString=['starnine']))
|
|
|
|
with ccache_mock(side_effect=KeyError('foo')):
|
|
result = post("zephyr", cred=cred)
|
|
self.assert_json_error(result, 'Invalid Kerberos cache')
|
|
|
|
with \
|
|
ccache_mock(return_value=b'1234'), \
|
|
ssh_mock(side_effect=KeyError('foo')), \
|
|
logging_mock() as log:
|
|
result = post("zephyr", cred=cred)
|
|
|
|
self.assert_json_error(result, 'We were unable to setup mirroring for you')
|
|
log.assert_called_with("Error updating the user's ccache")
|
|
|
|
with ccache_mock(return_value=b'1234'), mirror_mock(), ssh_mock() as ssh:
|
|
result = post("zephyr", cred=cred)
|
|
|
|
self.assert_json_success(result)
|
|
ssh.assert_called_with([
|
|
'ssh',
|
|
'server',
|
|
'--',
|
|
'/home/zulip/python-zulip-api/zulip/integrations/zephyr/process_ccache',
|
|
'starnine',
|
|
api_key,
|
|
'MTIzNA=='])
|
|
|
|
# Accounts whose Kerberos usernames are known not to match their
|
|
# zephyr accounts are hardcoded, and should be handled properly.
|
|
|
|
def kerberos_alter_egos_mock() -> Any:
|
|
return patch(
|
|
'zerver.views.zephyr.kerberos_alter_egos',
|
|
{'kerberos_alter_ego': 'starnine'})
|
|
|
|
cred = dict(cname=dict(nameString=['kerberos_alter_ego']))
|
|
with \
|
|
ccache_mock(return_value=b'1234'), \
|
|
mirror_mock(), \
|
|
ssh_mock() as ssh, \
|
|
kerberos_alter_egos_mock():
|
|
result = post("zephyr", cred=cred)
|
|
|
|
self.assert_json_success(result)
|
|
ssh.assert_called_with([
|
|
'ssh',
|
|
'server',
|
|
'--',
|
|
'/home/zulip/python-zulip-api/zulip/integrations/zephyr/process_ccache',
|
|
'starnine',
|
|
api_key,
|
|
'MTIzNA=='])
|