106 lines
4.7 KiB
Python
106 lines
4.7 KiB
Python
import mock
|
|
from twisted.internet import defer, reactor
|
|
from twisted.trial import unittest
|
|
from lbrynet import conf
|
|
from lbrynet.daemon.auth import server
|
|
|
|
from tests.mocks import mock_conf_settings
|
|
|
|
|
|
class AuthJSONRPCServerTest(unittest.TestCase):
|
|
# TODO: move to using a base class for tests
|
|
# and add useful general utilities like this
|
|
# onto it.
|
|
def setUp(self):
|
|
conf.initialize_settings(False)
|
|
self.server = server.AuthJSONRPCServer(True, use_authentication=False)
|
|
|
|
def test_listen_auth_https(self):
|
|
self.server._use_https = True
|
|
self.server._use_authentication = True
|
|
factory = self.server.get_server_factory()
|
|
listening_port = reactor.listenSSL(
|
|
conf.settings['api_port'], factory, factory.options, interface="localhost"
|
|
)
|
|
listening_port.stopListening()
|
|
|
|
def test_listen_no_auth_https(self):
|
|
self.server._use_https = True
|
|
self.server._use_authentication = False
|
|
factory = self.server.get_server_factory()
|
|
listening_port = reactor.listenSSL(
|
|
conf.settings['api_port'], factory, factory.options, interface="localhost"
|
|
)
|
|
listening_port.stopListening()
|
|
|
|
def test_listen_auth_http(self):
|
|
self.server._use_https = False
|
|
self.server._use_authentication = True
|
|
factory = self.server.get_server_factory()
|
|
listening_port = reactor.listenTCP(
|
|
conf.settings['api_port'], factory, interface="localhost"
|
|
)
|
|
listening_port.stopListening()
|
|
|
|
def test_listen_no_auth_http(self):
|
|
self.server._use_https = False
|
|
self.server._use_authentication = False
|
|
factory = self.server.get_server_factory()
|
|
listening_port = reactor.listenTCP(
|
|
conf.settings['api_port'], factory, interface="localhost"
|
|
)
|
|
listening_port.stopListening()
|
|
|
|
def test_get_server_port(self):
|
|
self.assertSequenceEqual(
|
|
('example.com', 80), self.server.get_server_port('http://example.com'))
|
|
self.assertSequenceEqual(
|
|
('example.com', 1234), self.server.get_server_port('http://example.com:1234'))
|
|
|
|
def test_foreign_origin_is_rejected(self):
|
|
mock_conf_settings(self) # have to call this to generate Config mock
|
|
request = mock.Mock(['getHeader'])
|
|
request.getHeader = mock.Mock(return_value='http://example.com')
|
|
self.assertFalse(self.server._check_header_source(request, 'Origin'))
|
|
|
|
def test_wrong_port_is_rejected(self):
|
|
mock_conf_settings(self, {'api_port': 1234})
|
|
request = mock.Mock(['getHeader'])
|
|
request.getHeader = mock.Mock(return_value='http://localhost:9999')
|
|
self.assertFalse(self.server._check_header_source(request, 'Origin'))
|
|
|
|
def test_matching_origin_is_allowed(self):
|
|
mock_conf_settings(self, {'api_host': 'example.com', 'api_port': 1234})
|
|
request = mock.Mock(['getHeader'])
|
|
request.getHeader = mock.Mock(return_value='http://example.com:1234')
|
|
self.assertTrue(self.server._check_header_source(request, 'Origin'))
|
|
|
|
def test_any_origin_is_allowed(self):
|
|
mock_conf_settings(self, {'api_host': '0.0.0.0', 'api_port': 80})
|
|
request = mock.Mock(['getHeader'])
|
|
request.getHeader = mock.Mock(return_value='http://example.com')
|
|
self.assertTrue(self.server._check_header_source(request, 'Origin'))
|
|
request = mock.Mock(['getHeader'])
|
|
request.getHeader = mock.Mock(return_value='http://another-example.com')
|
|
self.assertTrue(self.server._check_header_source(request, 'Origin'))
|
|
|
|
def test_matching_referer_is_allowed(self):
|
|
mock_conf_settings(self, {'api_host': 'the_api', 'api_port': 1111})
|
|
request = mock.Mock(['getHeader'])
|
|
request.getHeader = mock.Mock(return_value='http://the_api:1111?settings')
|
|
self.assertTrue(self.server._check_header_source(request, 'Referer'))
|
|
request.getHeader.assert_called_with('Referer')
|
|
|
|
def test_request_is_allowed_when_matching_allowed_origin_setting(self):
|
|
mock_conf_settings(self, {'allowed_origin': 'http://example.com:1234'})
|
|
request = mock.Mock(['getHeader'])
|
|
request.getHeader = mock.Mock(return_value='http://example.com:1234')
|
|
self.assertTrue(self.server._check_header_source(request, 'Origin'))
|
|
|
|
def test_request_is_rejected_when_not_matching_allowed_origin_setting(self):
|
|
mock_conf_settings(self, {'allowed_origin': 'http://example.com:1234'})
|
|
request = mock.Mock(['getHeader'])
|
|
# note the ports don't match
|
|
request.getHeader = mock.Mock(return_value='http://example.com:1235')
|
|
self.assertFalse(self.server._check_header_source(request, 'Origin'))
|