File: //lib/python3/dist-packages/twisted/cred/test/__pycache__/test_strcred.cpython-310.pyc
o
�be � @ s6 d Z ddlZddlmZ ddlmZmZ ddlmZ ddl m
Z
ddl m Z ddl
mZmZmZmZ dd lmZmZmZ dd
lmZ dd lmZ dd lmZ dd
l m Z ddl m Z e d�Z e d�Z!e d�Z"dd� Z#G dd� de �Z$G dd� de �Z%G dd� de �Z&G dd� de �Z'ee! d �ee d �ee" d �G d d � d e ����Z(ee d!�G d"d#� d#e ��Z)G d$d%� d%e �Z*ee d&� d'�ee d(� d)�G d*d+� d+e ���Z+G d,d-� d-ej,ej-�Z.G d.d/� d/e �Z/G d0d1� d1ej,ej-�Z0G d2d3� d3ej,ej-�Z1G d4d5� d5ej,ej-�Z2G d6d7� d7ej,ej-�Z3G d8d9� d9e �Z4dS ):z
L{twisted.cred.strcred}.
� N)�StringIO)�Sequence�Type)�skipIf)� Interface)�plugin)�checkers� credentials�error�strcred)�cred_anonymous� cred_file� cred_unix)�usage)� UserDatabase)�FilePath)�
requireModule)�TestCase�crypt�pwd�spwdc C s< d} | dd� t �� D �v r | d7 } | dd� t �� D �v s
| S )zC
Helper method to produce an auth type that doesn't exist.
�ThisPluginDoesNotExistc S s g | ]}|j �qS � )�authType)�.0�factoryr r �@/usr/lib/python3/dist-packages/twisted/cred/test/test_strcred.py�
<listcomp># s �z&getInvalidAuthType.<locals>.<listcomp>�_)r �findCheckerFactories)�invalidAuthTyper r r �getInvalidAuthType s ���r! c @ � e Zd Zdd� Zdd� ZdS )�PublicAPITestsc C �. t � }| �tjtj|� | �tjtj|� dS )z9
The description string cannot be empty.
N�r! � assertRaisesr �InvalidAuthType� makeChecker�findCheckerFactory��self�iatr r r �test_emptyDescription+ � z$PublicAPITests.test_emptyDescriptionc C r$ )z@
An unrecognized auth type raises an exception.
Nr% r* r r r �test_invalidAuthType3 r. z#PublicAPITests.test_invalidAuthTypeN)�__name__�
__module__� __qualname__r- r/ r r r r r# * � r# c @ r" )�StrcredFunctionsTestsc C s. t t�� �}t�tj�D ]}| �||� q dS )zP
L{strcred.findCheckerFactories} returns all available plugins.
N)�listr r r �
getPlugins�ICheckerFactory�assertIn)r+ �availablePlugins�plgr r r �test_findCheckerFactories= s �z/StrcredFunctionsTests.test_findCheckerFactoriesc C s | � t�d�tj� dS )z{
L{strcred.findCheckerFactory} returns the first plugin
available for a given authentication type.
�fileN)�assertIdenticalr r) r
�theFileCheckerFactory�r+ r r r �test_findCheckerFactoryE s �z-StrcredFunctionsTests.test_findCheckerFactoryN)r0 r1 r2 r; r@ r r r r r4 < r3 r4 c @ s< e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
S )�MemoryCheckerTestsc C sH t �dd�| _t �dd�| _t �dd�| _t �dd�| _t�d�| _d S ) N�admin�asdf�alice�foo�foobar�x�yzzmemory:admin:asdf:alice:foo) r �UsernamePasswordrB rD �badPass�badUserr r( �checkerr? r r r �setUpP s
zMemoryCheckerTests.setUpc C �* | � tj�| j�� | �tj| jj� dS �z�
Verifies that strcred.makeChecker('memory') returns an object
that implements the L{ICredentialsChecker} interface.
N� �
assertTruer �ICredentialsChecker�
providedByrL r8 r �IUsernamePassword�credentialInterfacesr? r r r �test_isCheckerW � z!MemoryCheckerTests.test_isCheckerc C s | � tjtjd� dS )z�
An argument string which does not contain user:pass pairs
(i.e., an odd number of ':' characters) raises an exception.
z memory:a:b:cN)r& r �InvalidAuthArgumentStringr( r? r r r �test_badFormatArgString_ s
�z*MemoryCheckerTests.test_badFormatArgStringc � � fdd�}� j �� j��|�S )�;
The checker works with valid credentials.
c � � � | � jj� d S �N�� assertEqualrB �username�r` r? r r �
_gotAvatarm � zAMemoryCheckerTests.test_memoryCheckerSucceeds.<locals>._gotAvatar�rL �requestAvatarIdrB � addCallback�r+ rb r r? r �test_memoryCheckerSucceedsh � z-MemoryCheckerTests.test_memoryCheckerSucceedsc C � | � | j�| j�tj�S �z=
The checker fails with an invalid username.
��
assertFailurerL re rK r
�UnauthorizedLoginr? r r r � test_memoryCheckerFailsUsernamer � �z2MemoryCheckerTests.test_memoryCheckerFailsUsernamec C rj �z=
The checker fails with an invalid password.
�rm rL re rJ r
rn r? r r r � test_memoryCheckerFailsPasswordz rp z2MemoryCheckerTests.test_memoryCheckerFailsPasswordN) r0 r1 r2 rM rV rY rh ro rs r r r r rA O s
rA c @ r" )�AnonymousCheckerTestsc C �0 t �d�}| �tj�|�� | �tj|j � dS )z�
Verifies that strcred.makeChecker('anonymous') returns an object
that implements the L{ICredentialsChecker} interface.
� anonymousN)
r r( rQ r rR rS r8 r �
IAnonymousrU )r+ rL r r r rV � �
z$AnonymousCheckerTests.test_isCheckerc s. t �d�}|�t�� �}� fdd�}|�|�S )z?
We can log in anonymously using this checker.
rv c s � � tj| � d S r] )r= r � ANONYMOUS)�avatarr? r r rb � s zEAnonymousCheckerTests.testAnonymousAccessSucceeds.<locals>._gotAvatar)r r( re r � Anonymousrf )r+ rL �requestrb r r? r �testAnonymousAccessSucceeds� s
z1AnonymousCheckerTests.testAnonymousAccessSucceedsN)r0 r1 r2 rV r} r r r r rt � s rt z"Required module not available: pwdz$Required module not available: cryptz#Required module not available: spwdc @ s^ e Zd Zddd�Zdd� Zdd� Zdd � Zd
d � Zd d
� Zdd� Z dd� Z
dd� Z dd� Z dS )�UnixCheckerTestsrC rE )rB rD c C s* t �|t�| j| d�dddddddf �S )N�F/r i�� � ���)r � struct_spwdr �users)r+ r` r r r �_spwd_getspnam� s ��z UnixCheckerTests._spwd_getspnamc
C s� t �dd�| _t �dd�| _t �dd�| _t �dd�| _t�d�| _t �d d
�| _ t �d d �| _
t �d d
�| _ t �dd�| _ t�d�| _
trlt� }| j�� D ]\}}|�|t�|d�dd|d| d� qN| �td|j� trx| �td| j� d S d S )NrB rC rD rE rF rG rH �unix� admin� asdf� alice� foo� foobar� x� yzr i� z/home/z/bin/sh�getpwnam�getspnam)r rI rB rD rJ rK r r( rL �
adminBytes�
aliceBytes� badPassBytes� badUserBytes� checkerBytesr r r� �items�addUserr �patchr� r r� )r+ �databaser` �passwordr r r rM � s4
� �zUnixCheckerTests.setUpc C sP | � tj�| j�� | �tj| jj� | � tj�| j �� | �tj| j j� dS )z�
Verifies that strcred.makeChecker('unix') returns an object
that implements the L{ICredentialsChecker} interface.
N)
rQ r rR rS rL r8 r rT rU r� r? r r r rV � s
�z UnixCheckerTests.test_isCheckerc rZ )r[ c r\ r] r^ ra r? r r rb � rc z=UnixCheckerTests.test_unixCheckerSucceeds.<locals>._gotAvatarrd rg r r? r �test_unixCheckerSucceeds� ri z)UnixCheckerTests.test_unixCheckerSucceedsc rZ )zD
The checker works with valid L{bytes} credentials.
c s � � | � jj�d�� d S )N�utf-8)r_ r� r` �decodera r? r r rb � s zBUnixCheckerTests.test_unixCheckerSucceedsBytes.<locals>._gotAvatar)r� re r� rf rg r r? r � test_unixCheckerSucceedsBytes� s �z.UnixCheckerTests.test_unixCheckerSucceedsBytesc C rj rk rl r? r r r � test_unixCheckerFailsUsername� rp z.UnixCheckerTests.test_unixCheckerFailsUsernamec C rj )zF
The checker fails with an invalid L{bytes} username.
)rm r� re r� r
rn r? r r r �"test_unixCheckerFailsUsernameBytes� � �z3UnixCheckerTests.test_unixCheckerFailsUsernameBytesc C rj rq rr r? r r r � test_unixCheckerFailsPassword rp z.UnixCheckerTests.test_unixCheckerFailsPasswordc C rj )zF
The checker fails with an invalid L{bytes} password.
)rm r� re r� r
rn r? r r r �"test_unixCheckerFailsPasswordBytes r� z3UnixCheckerTests.test_unixCheckerFailsPasswordBytesN)
r0 r1 r2 r� r� rM rV r� r� r� r� r� r� r r r r r~ � s �
r~ z%Required module is unavailable: cryptc @ s e Zd ZdZdd� Zdd� ZdS )�
CryptTestsz9
L{crypt} has functions for encrypting password.
c
C s* d}dD ]2}zt � ||�}t|t�r|�d�}W n ty! Y qw d}| �t�||�� | �t�||�� qdD ]Y}t t |d�}|sDq9d}t � ||�}t|t�rV|�d�}|d }t�||�} | �| � t�|�
d�|�
d��} | �| � t�||�} | �| � t�|�
d�|�
d��} | �| � q9dS ) z4
L{cred_unix.verifyCryptedPassword}
�sample password ^%$)N�abr� z$1x1234)�
METHOD_SHA512�
METHOD_SHA256�
METHOD_MD5� METHOD_CRYPTNzinteresting password xyz�blahfooincorrect) r �
isinstance�bytesr� � TypeErrorrQ r �verifyCryptedPassword� assertFalse�getattr�encode)
r+ r� �salt�cryptedCorrect�cryptedIncorrect�method� cryptMethod�crypted�incorrectCrypted�resultr r r �test_verifyCryptedPassword sJ
� �
�
�
� �z%CryptTests.test_verifyCryptedPasswordc C s< dd� }d}t � |d�}| �t d|� | �t�||�� dS )zK
L{cred_unix.verifyCryptedPassword} when OSError is raised
c S s t d��)N� )�OSError)r� r� r r r � mockCryptQ s z?CryptTests.test_verifyCryptedPasswordOSError.<locals>.mockCryptr� r� r N)r r� r� r r� )r+ r� r� r� r r r �!test_verifyCryptedPasswordOSErrorL s
z,CryptTests.test_verifyCryptedPasswordOSErrorN)r0 r1 r2 �__doc__r� r� r r r r r� s 0r� c @ sP e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
dd� Z dS )�FileDBCheckerTestsz*
C{--auth=file:...} file checker.
c C sh t �dd�| _t �dd�| _t �dd�| _t �dd�| _| �� | _t| j�� d� t
� d | j �| _ d S )
Nr� r� r� r� r� r� r� � admin:asdf
alice:foo
�file:)
r rI rB rD rJ rK �mktemp�filenamer �
setContentr r( rL r? r r r rM _ s
zFileDBCheckerTests.setUpc C s( d}t j�|�r|d7 }t j�|�s|S )Nz
/DoesNotExistr )�os�path�exists)r+ r� r r r �
_fakeFilenameh s
�z FileDBCheckerTests._fakeFilenamec C rN rO rP r? r r r rV n rW z!FileDBCheckerTests.test_isCheckerc rZ )r[ c r\ r] r^ ra r? r r rb { rc z?FileDBCheckerTests.test_fileCheckerSucceeds.<locals>._gotAvatarrd rg r r? r �test_fileCheckerSucceedsv ri z+FileDBCheckerTests.test_fileCheckerSucceedsc C rj rk rl r? r r r � test_fileCheckerFailsUsername� rp z0FileDBCheckerTests.test_fileCheckerFailsUsernamec C rj rq rr r? r r r � test_fileCheckerFailsPassword� rp z0FileDBCheckerTests.test_fileCheckerFailsPasswordc C s$ | � ttjd� | � ttjd� dS )z4
An empty filename raises an error.
r< r� N)r& �
ValueErrorr r( r? r r r �test_failsWithEmptyFilename� s z.FileDBCheckerTests.test_failsWithEmptyFilenamec C sF t jj}t� }|t j_t�d| �� � |t j_| �t j|� � � dS )zt
When the file auth plugin is given a file that doesn't exist, it
should produce a warning.
r� N)
r
r> � errorOutputr r r( r� r8 �invalidFileWarning�getvalue)r+ � oldOutput� newOutputr r r �test_warnWithBadFilename� s z+FileDBCheckerTests.test_warnWithBadFilenameN) r0 r1 r2 r� rM r� rV r� r� r� r� r� r r r r r� Z s
r� � cryptographyz cryptography is not available�pyasn1zpyasn1 is not availablec @ s e Zd ZdZdd� ZdS )�SSHCheckerTestsz�
Tests for the C{--auth=sshkey:...} checker. The majority of the
tests for the ssh public key database checker are in
L{twisted.conch.test.test_checkers.SSHPublicKeyCheckerTestCase}.
c C ru )z�
Verifies that strcred.makeChecker('sshkey') returns an object
that implements the L{ICredentialsChecker} interface.
�sshkeyN)
r r( rQ r rR rS r8 r �ISSHPrivateKeyrU )r+ �
sshCheckerr r r rV � rx z SSHCheckerTests.test_isCheckerN)r0 r1 r2 r� rV r r r r r� � s r� c @ s e Zd ZdZdS )� DummyOptionsz@
Simple options for testing L{strcred.AuthOptionMixin}.
N)r0 r1 r2 r� r r r r r� � � r� c @ sL e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dS )�CheckerOptionsTestsc C sT t � }|�ddg� | �t|d �d� t � }|�g d�� | �t|d �d� dS )zu
The C{--auth} command line creates a list in the
Options instance and appends values to it.
�--auth�memory� credCheckers� )r� r� r� r� � N)r� � parseOptionsr_ �len�r+ �optionsr r r �test_createsList� s z$CheckerOptionsTests.test_createsListc C s< t � }t� }| �tj|jd|g� | �tj|jd|g� dS )zx
The C{--auth} command line raises an exception when it
gets a parameter it doesn't understand.
r� �--help-auth-typeN)r� r! r& r �
UsageErrorr� )r+ r� �invalidParameterr r r �test_invalidAuthError� s ��z)CheckerOptionsTests.test_invalidAuthErrorc C s� t � }|�g d�� |d }| �t|tj �d� | �t|tj �d� |tj d }|tj d }| �tj �
|�� | �tj �
|�� | � tj|j � | � tj|j � dS )z�
The C{--auth} command line creates a dictionary mapping supported
interfaces to the list of credentials checkers that support it.
)r� r� r� rv �credInterfacesr� r N)
r� r� r_ r� r rw rT rQ r rR rS r8 rU )r+ r� �chd� chdAnonymous� chdUserPassr r r �test_createsDictionary� s z*CheckerOptionsTests.test_createsDictionaryc C s2 t � }|�g d�� | �|d |d tj � dS )z�
When two C{--auth} arguments are passed along which support the same
interface, a list with both is created.
)r� r� r� r� r� r� N)r� r� r_ r rT r� r r r � test_credInterfacesProvidesLists� s �z4CheckerOptionsTests.test_credInterfacesProvidesListsc C s6 g }t � }|�� D ]}| �|j|� |�|j� q dS )zG
The list for C{--help-auth} does not duplicate items.
N)r� � _checkerFactoriesForOptHelpAuth� assertNotInr �append)r+ � authTypesr� �cfr r r �!test_listDoesNotDisplayDuplicates� s �z5CheckerOptionsTests.test_listDoesNotDisplayDuplicatesc C sH t � }t� }||_| �t|jdg� t�� D ] }| �|j |�
� � qdS )zz
The C{--help-auth} argument correctly displays all
available authentication plugins, then exits.
z --help-authN) r r� �
authOutputr& �
SystemExitr� r r r8 r r� )r+ � newStdoutr� �checkerFactoryr r r �test_displaysListCorrectly s �z.CheckerOptionsTests.test_displaysListCorrectlyc C sT t � }t� }||_| �t|jddg� tjjD ]}|� � r'| �
|� � |� � � qdS )z�
The C{--help-auth-for} argument will correctly display the help file
for a particular authentication plugin.
r� r< N) r r� r� r& r� r� r
r> �authHelp�stripr8 r� )r+ r� r� �liner r r �test_displaysHelpCorrectly s � ��z.CheckerOptionsTests.test_displaysHelpCorrectlyc C s0 t � }| �tj|jddg�}| �t|�d� dS )z�
When the checker specified by C{--auth} raises an unexpected error, it
should be caught and re-raised within a L{usage.UsageError}.
r� r< z,Unexpected error: 'file' requires a filenameN)r� r& r r� r� r_ �str)r+ r� �errr r r �test_unexpectedException s
�z,CheckerOptionsTests.test_unexpectedExceptionN) r0 r1 r2 r� r� r� r� r� r� r� r r r r r r� � s
r� c @ � e Zd ZejfZdS )�OptionsForUsernamePasswordN)r0 r1 r2 r rT �supportedInterfacesr r r r r * � r c @ r )� OptionsForUsernameHashedPasswordN)r0 r1 r2 r �IUsernameHashedPasswordr r r r r r . r r c @ s e Zd ZdZdS )� OptionsSupportsAllInterfacesN)r0 r1 r2 r r r r r r 2 r� r c @ s" e Zd ZU g Zeee ed< dS )�OptionsSupportsNoInterfacesr N)r0 r1 r2 r r r r �__annotations__r r r r r
6 s
r
c @ s` e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dd� Z
dd� Z dd� Z dd� Z
dS )�LimitingInterfacesTestsa�
Tests functionality that allows an application to limit the
credential interfaces it can support. For the purposes of this
test, we use IUsernameHashedPassword, although this will never
really be used by the command line.
(I have, to date, not thought of a half-decent way for a user to
specify a hash algorithm via the command-line. Nor do I think it's
very useful.)
I should note that, at first, this test is counter-intuitive,
because we're using the checker with a pre-defined hash function
as the 'bad' checker. See the documentation for
L{twisted.cred.checkers.FilePasswordDB.hash} for more details.
c C sp | � � | _t| jd��
}|�d� W d � n1 sw Y t�| j�| _tj| j| jd�| _t� � | _
d S )N�wbr� )�hash) r� r� �open�writer �FilePasswordDB� goodChecker�_hash�
badChecker�AllowAnonymousAccess� anonChecker)r+ �fr r r rM K s
�z LimitingInterfacesTests.setUpc C s |S )z>
A dumb hash that doesn't really do anything.
r )r+ �networkUsername�networkPassword�storedPasswordr r r r S s z LimitingInterfacesTests._hashc C sB t � }| �|�tj�� | �|�tj�� | �tj |j
| j � dS )zE
The supportsInterface method behaves appropriately.
N) r rQ �supportsInterfacer rT r� rw r& r �UnsupportedInterfaces�
addCheckerr r� r r r �test_supportsInterfaceY s �z.LimitingInterfacesTests.test_supportsInterfacec C s. t � }| �|�tj�� | �|�tj�� dS )z|
The supportsInterface method behaves appropriately
when the supportedInterfaces attribute is None.
N)r rQ r r rT rw r� r r r �test_supportsAllInterfacesd s z2LimitingInterfacesTests.test_supportsAllInterfacesc C s6 t � }tj}tj}| �|�|�� | �|�|�� dS )zJ
The supportsCheckerFactory method behaves appropriately.
N)r r
r> r �theAnonymousCheckerFactoryrQ �supportsCheckerFactoryr� )r+ r� �fileCF�anonCFr r r �test_supportsCheckerFactorym s
z3LimitingInterfacesTests.test_supportsCheckerFactoryc C s| t � }|�| j� |jd }| �|d | d | j� | �|d d | j� | �t|d | �d� | �t|d �d� dS )z�
When addChecker is called with a checker that implements at least one
of the interfaces our application supports, it is successful.
r r� r� r� N)r r r r r= r_ r� )r+ r� �ifacer r r �test_canAddSupportedCheckerw s
z3LimitingInterfacesTests.test_canAddSupportedCheckerc C s t � }| �tj|j| j� dS )z~
When addChecker is called with a checker that does not implement any
supported interfaces, it fails.
N)r r& r r r r r� r r r �#test_failOnAddingUnsupportedChecker� s �z;LimitingInterfacesTests.test_failOnAddingUnsupportedCheckerc C s( t � }tjj}| �tj|jd|g� dS )zq
The C{--auth} command line raises an exception when it
gets a checker we don't support.
r� N)r
r r r r& r r� r� )r+ r� r r r r � test_unsupportedInterfaceError� s z6LimitingInterfacesTests.test_unsupportedInterfaceErrorc C sB t � }|�� D ]}d}|jD ] }|�|�rd}q|r t�� �qdS )z�
C{--help-auth} will only list checkers that purport to
supply at least one of the credential interfaces our
application can use.
TFN)r r� rU r r r )r+ r� r �invalid� interfacer r r �test_helpAuthLimitsOutput� s
���z1LimitingInterfacesTests.test_helpAuthLimitsOutputc C sl t � }d}t�� D ] }|�|�s|} nq | �|d� t� }||_| �t|j ddg� | �
tj |� � � dS )z�
C{--help-auth-type} will display a warning if you get
help for an authType that does not supply at least one of the
credential interfaces our application can use.
Nr� rv )
r r r r! �assertNotIdenticalr r� r& r� r� r8 �notSupportedWarningr� )r+ r� �invalidFactoryr r� r r r � test_helpAuthTypeLimitsOutput� s
� �z5LimitingInterfacesTests.test_helpAuthTypeLimitsOutputN)r0 r1 r2 r� rM r r r r$ r& r' r( r+ r/ r r r r r : s
r )5r� r� �ior �typingr r �unittestr �zope.interfacer �twistedr � twisted.credr r r
r �twisted.pluginsr r
r �twisted.pythonr �twisted.python.fakepwdr �twisted.python.filepathr �twisted.python.reflectr �twisted.trial.unittestr r r r r! r# r4 rA rt r~ r� r� r� �Options�AuthOptionMixinr� r� r r r r
r r r r r �<module> sN 4
yCJm