|
from unittest.mock import patch
|
|
|
|
from django.contrib.auth.models import User
|
|
from django.test.utils import override_settings
|
|
from hc.test import BaseTestCase
|
|
|
|
|
|
@override_settings(
|
|
REMOTE_USER_HEADER="AUTH_USER",
|
|
AUTHENTICATION_BACKENDS=("hc.accounts.backends.CustomHeaderBackend",),
|
|
)
|
|
class RemoteUserHeaderTestCase(BaseTestCase):
|
|
@override_settings(REMOTE_USER_HEADER=None)
|
|
def test_it_does_nothing_when_not_configured(self):
|
|
r = self.client.get("/accounts/profile/", AUTH_USER="[email protected]")
|
|
self.assertRedirects(r, "/accounts/login/?next=/accounts/profile/")
|
|
|
|
def test_it_logs_user_in(self):
|
|
r = self.client.get("/accounts/profile/", AUTH_USER="[email protected]")
|
|
self.assertContains(r, "[email protected]")
|
|
|
|
def test_it_does_nothing_when_header_not_set(self):
|
|
r = self.client.get("/accounts/profile/")
|
|
self.assertRedirects(r, "/accounts/login/?next=/accounts/profile/")
|
|
|
|
def test_it_does_nothing_when_header_is_empty_string(self):
|
|
r = self.client.get("/accounts/profile/", AUTH_USER="")
|
|
self.assertRedirects(r, "/accounts/login/?next=/accounts/profile/")
|
|
|
|
def test_it_creates_user(self):
|
|
r = self.client.get("/accounts/profile/", AUTH_USER="[email protected]")
|
|
self.assertContains(r, "[email protected]")
|
|
|
|
q = User.objects.filter(email="[email protected]")
|
|
self.assertTrue(q.exists())
|
|
|
|
def test_it_logs_out_another_user_when_header_is_empty_string(self):
|
|
self.client.login(remote_user_email="[email protected]")
|
|
|
|
r = self.client.get("/accounts/profile/", AUTH_USER="")
|
|
self.assertRedirects(r, "/accounts/login/?next=/accounts/profile/")
|
|
|
|
def test_it_logs_out_another_user(self):
|
|
self.client.login(remote_user_email="[email protected]")
|
|
|
|
r = self.client.get("/accounts/profile/", AUTH_USER="[email protected]")
|
|
self.assertContains(r, "[email protected]")
|
|
|
|
def test_it_handles_already_logged_in_user(self):
|
|
self.client.login(remote_user_email="[email protected]")
|
|
|
|
with patch("hc.accounts.middleware.auth") as mock_auth:
|
|
r = self.client.get("/accounts/profile/", AUTH_USER="[email protected]")
|
|
|
|
self.assertFalse(mock_auth.authenticate.called)
|
|
self.assertContains(r, "[email protected]")
|