bundled/cherrypy/cherrypy/test/test_auth_basic.py @ 4e1fb853d9d2 webpy-sucks

# This file is part of CherryPy <http://www.cherrypy.org/>
# -*- coding: utf-8 -*-
# vim:ts=4:sw=4:expandtab:fileencoding=utf-8

from cherrypy.test import test
test.prefer_parent_path()

try:
    from hashlib import md5
except ImportError:
    # Python 2.4 and earlier
    from md5 import new as md5

import cherrypy
from cherrypy.lib import auth_basic

def setup_server():
    class Root:
        def index(self):
            return "This is public."
        index.exposed = True

    class BasicProtected:
        def index(self):
            return "Hello %s, you've been authorized." % cherrypy.request.login
        index.exposed = True

    class BasicProtected2:
        def index(self):
            return "Hello %s, you've been authorized." % cherrypy.request.login
        index.exposed = True

    userpassdict = {'xuser' : 'xpassword'}
    userhashdict = {'xuser' : md5('xpassword').hexdigest()}

    def checkpasshash(realm, user, password):
        p = userhashdict.get(user)
        return p and p == md5(password).hexdigest() or False

    conf = {'/basic': {'tools.auth_basic.on': True,
                       'tools.auth_basic.realm': 'wonderland',
                       'tools.auth_basic.checkpassword': auth_basic.checkpassword_dict(userpassdict)},
            '/basic2': {'tools.auth_basic.on': True,
                        'tools.auth_basic.realm': 'wonderland',
                        'tools.auth_basic.checkpassword': checkpasshash},
           }

    root = Root()
    root.basic = BasicProtected()
    root.basic2 = BasicProtected2()
    cherrypy.tree.mount(root, config=conf)

from cherrypy.test import helper

class BasicAuthTest(helper.CPWebCase):

    def testPublic(self):
        self.getPage("/")
        self.assertStatus('200 OK')
        self.assertHeader('Content-Type', 'text/html;charset=utf-8')
        self.assertBody('This is public.')

    def testBasic(self):
        self.getPage("/basic/")
        self.assertStatus(401)
        self.assertHeader('WWW-Authenticate', 'Basic realm="wonderland"')

        self.getPage('/basic/', [('Authorization', 'Basic eHVzZXI6eHBhc3N3b3JX')])
        self.assertStatus(401)

        self.getPage('/basic/', [('Authorization', 'Basic eHVzZXI6eHBhc3N3b3Jk')])
        self.assertStatus('200 OK')
        self.assertBody("Hello xuser, you've been authorized.")

    def testBasic2(self):
        self.getPage("/basic2/")
        self.assertStatus(401)
        self.assertHeader('WWW-Authenticate', 'Basic realm="wonderland"')

        self.getPage('/basic2/', [('Authorization', 'Basic eHVzZXI6eHBhc3N3b3JX')])
        self.assertStatus(401)

        self.getPage('/basic2/', [('Authorization', 'Basic eHVzZXI6eHBhc3N3b3Jk')])
        self.assertStatus('200 OK')
        self.assertBody("Hello xuser, you've been authorized.")


if __name__ == "__main__":
    helper.testmain()