From c7abdb61e889ed928efa0a917d56a1c4a8655f4f Mon Sep 17 00:00:00 2001
From: jonaswinkler <17569239+jonaswinkler@users.noreply.github.com>
Date: Tue, 2 Mar 2021 23:19:06 +0100
Subject: [PATCH] added remote user auth test
---
src/documents/tests/test_auth.py | 66 ++++++++++++++++++++++++++++++++
1 file changed, 66 insertions(+)
create mode 100644 src/documents/tests/test_auth.py
diff --git a/src/documents/tests/test_auth.py b/src/documents/tests/test_auth.py
new file mode 100644
index 000000000..82b586f7b
--- /dev/null
+++ b/src/documents/tests/test_auth.py
@@ -0,0 +1,66 @@
+from django.contrib.auth.models import User
+from django.test import override_settings, Client, modify_settings, TestCase
+
+
+class TestRemoteUserAuthentication(TestCase):
+
+ def test_no_remote_user_auth(self):
+ client = Client()
+
+ response = client.get("/api/documents/")
+ self.assertEqual(response.status_code, 401)
+
+ response = client.get("/api/documents/", HTTP_REMOTE_USER="someone")
+ self.assertEqual(response.status_code, 401)
+
+ response = client.get("/api/documents/", HTTP_X_FORWARDED_USER="someone")
+ self.assertEqual(response.status_code, 401)
+
+ @modify_settings(
+ MIDDLEWARE={
+ 'append': 'paperless.auth.HttpRemoteUserMiddleware'
+ },
+ AUTHENTICATION_BACKENDS={
+ 'prepend': 'django.contrib.auth.backends.RemoteUserBackend'
+ }
+ )
+ def test_standard_remote_user_auth(self):
+ client = Client()
+
+ response = client.get("/api/documents/")
+ self.assertEqual(response.status_code, 401)
+
+ response = client.get("/api/documents/", HTTP_X_FORWARDED_USER="someone")
+ self.assertEqual(response.status_code, 401)
+
+ self.assertFalse(User.objects.filter(username="someone").exists())
+
+ response = client.get("/api/documents/", HTTP_REMOTE_USER="someone")
+ self.assertEqual(response.status_code, 200)
+
+ self.assertTrue(User.objects.filter(username="someone").exists())
+
+ @modify_settings(
+ MIDDLEWARE={
+ 'append': 'paperless.auth.HttpRemoteUserMiddleware'
+ },
+ AUTHENTICATION_BACKENDS={
+ 'prepend': 'django.contrib.auth.backends.RemoteUserBackend'
+ }
+ )
+ @override_settings(HTTP_REMOTE_USER_HEADER_NAME="HTTP_X_FORWARDED_USER")
+ def test_custom_remote_user_auth(self):
+ client = Client()
+
+ response = client.get("/api/documents/")
+ self.assertEqual(response.status_code, 401)
+
+ response = client.get("/api/documents/", HTTP_REMOTE_USER="someone")
+ self.assertEqual(response.status_code, 401)
+
+ self.assertFalse(User.objects.filter(username="someone").exists())
+
+ response = client.get("/api/documents/", HTTP_X_FORWARDED_USER="someone")
+ self.assertEqual(response.status_code, 200)
+
+ self.assertTrue(User.objects.filter(username="someone").exists())