django-trench/testproject/tests/test_utils.py at 53f1e3fa579a1bd65cc240c2edecf4c4c5cf6648 · merixstudio/django-trench · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
import pytest

from trench.backends.application import ApplicationMessageDispatcher
from trench.backends.base import AbstractMessageDispatcher
from trench.backends.basic_mail import SendMailHotpMessageDispatcher
from trench.backends.provider import get_mfa_handler
from trench.models import MFAMethod
from trench.query.get_mfa_config_by_name import get_mfa_config_by_name_query
from trench.utils import UserTokenGenerator


@pytest.mark.django_db
def test_empty_token():
    token = UserTokenGenerator()
    assert token.check_token(user=None, token="") is None


@pytest.mark.django_db
def test_invalid_token():
    token = UserTokenGenerator()
    assert token.check_token(user=None, token="test") is None


@pytest.mark.django_db
def test_create_qr_link(active_user_with_many_otp_methods):
    user, _ = active_user_with_many_otp_methods
    mfa_method: MFAMethod = user.mfa_methods.filter(name="app").first()
    handler: ApplicationMessageDispatcher = get_mfa_handler(mfa_method)
    qr_link = handler._create_qr_link(user=user)
    assert type(qr_link) == str
    assert user.username in qr_link
    assert mfa_method.secret in qr_link


@pytest.mark.django_db
def test_innermost_object_test(active_user):
    with pytest.raises(AttributeError):
        AbstractMessageDispatcher._get_innermost_object(active_user, dotted_path="test")


@pytest.mark.django_db
def test_validate_code(active_user_with_email_otp):
    email_method = active_user_with_email_otp.mfa_methods.get()
    handler = get_mfa_handler(mfa_method=email_method)
    valid_code = handler.create_code()

    assert handler.validate_code(code="123456") is False
    assert handler.validate_code(code=valid_code) is True


@pytest.mark.django_db
def test_create_code_hotp(active_user_with_email_otp):
    email_method = active_user_with_email_otp.mfa_methods.get()
    conf = get_mfa_config_by_name_query(name=email_method.name)
    handler = SendMailHotpMessageDispatcher(email_method, conf)

    email_method.counter = 0
    email_method.code_generated_at = None
    email_method.save()

    handler.create_code()

    email_method.refresh_from_db()
    assert email_method.counter == 1
    assert email_method.code_generated_at is not None

    previous_code_genererated_at = email_method.code_generated_at

    handler.create_code()

    email_method.refresh_from_db()
    assert email_method.counter == 2
    assert email_method.code_generated_at > previous_code_genererated_at


@pytest.mark.django_db
def test_validate_code_hotp(active_user_with_email_otp):
    email_method = active_user_with_email_otp.mfa_methods.get()
    conf = get_mfa_config_by_name_query(name=email_method.name)
    handler = SendMailHotpMessageDispatcher(email_method, conf)

    email_method.counter = 0
    email_method.code_generated_at = None
    email_method.save()

    valid_code = handler.create_code()

    assert handler.validate_code(code="123456") is False
    email_method.refresh_from_db()
    assert email_method.code_generated_at is not None

    assert handler.validate_code(code=valid_code) is True
    email_method.refresh_from_db()
    assert email_method.code_generated_at is None

    assert handler.validate_code(code=valid_code) is False

    valid_code = handler.create_code()
    new_valid_code = handler.create_code()

    assert new_valid_code != valid_code
    assert handler.validate_code(code=valid_code) is False
    assert handler.validate_code(code=new_valid_code) is True


@pytest.mark.django_db
def test_validate_code_yubikey(active_user_with_many_otp_methods):
    active_user, _ = active_user_with_many_otp_methods
    yubi_method = active_user.mfa_methods.get(name="yubi")
    handler = get_mfa_handler(mfa_method=yubi_method)
    assert handler.validate_code("t" * 44) is False