healthchecks/hc/accounts/tests/test_remote_user_header_login.py

from unittest.mock import patch

from django.contrib.auth.models import User
from django.test.utils import override_settings
from hc.test import BaseTestCase


@override_settings(
    REMOTE_USER_HEADER="AUTH_USER",
    AUTHENTICATION_BACKENDS=("hc.accounts.backends.CustomHeaderBackend",),
)
class RemoteUserHeaderTestCase(BaseTestCase):
    @override_settings(REMOTE_USER_HEADER=None)
    def test_it_does_nothing_when_not_configured(self):
        r = self.client.get("/accounts/profile/", AUTH_USER="[email protected]")
        self.assertRedirects(r, "/accounts/login/?next=/accounts/profile/")

    def test_it_logs_user_in(self):
        r = self.client.get("/accounts/profile/", AUTH_USER="[email protected]")
        self.assertContains(r, "[email protected]")

    def test_it_does_nothing_when_header_not_set(self):
        r = self.client.get("/accounts/profile/")
        self.assertRedirects(r, "/accounts/login/?next=/accounts/profile/")

    def test_it_does_nothing_when_header_is_empty_string(self):
        r = self.client.get("/accounts/profile/", AUTH_USER="")
        self.assertRedirects(r, "/accounts/login/?next=/accounts/profile/")

    def test_it_creates_user(self):
        r = self.client.get("/accounts/profile/", AUTH_USER="[email protected]")
        self.assertContains(r, "[email protected]")

        q = User.objects.filter(email="[email protected]")
        self.assertTrue(q.exists())

    def test_it_logs_out_another_user_when_header_is_empty_string(self):
        self.client.login(remote_user_email="[email protected]")

        r = self.client.get("/accounts/profile/", AUTH_USER="")
        self.assertRedirects(r, "/accounts/login/?next=/accounts/profile/")

    def test_it_logs_out_another_user(self):
        self.client.login(remote_user_email="[email protected]")

        r = self.client.get("/accounts/profile/", AUTH_USER="[email protected]")
        self.assertContains(r, "[email protected]")

    def test_it_handles_already_logged_in_user(self):
        self.client.login(remote_user_email="[email protected]")

        with patch("hc.accounts.middleware.auth") as mock_auth:
            r = self.client.get("/accounts/profile/", AUTH_USER="[email protected]")

            self.assertFalse(mock_auth.authenticate.called)
            self.assertContains(r, "[email protected]")