add ssh tests
parent
d28846d6e7
commit
bda2a7c1f7
|
|
@ -4,6 +4,7 @@
|
|||
import strawberry
|
||||
from selfprivacy_api.graphql import IsAuthenticated
|
||||
from selfprivacy_api.graphql.mutations.api_mutations import ApiMutations
|
||||
from selfprivacy_api.graphql.mutations.ssh_mutations import SshMutations
|
||||
from selfprivacy_api.graphql.mutations.system_mutations import SystemMutations
|
||||
|
||||
from selfprivacy_api.graphql.queries.api_queries import Api
|
||||
|
|
@ -38,6 +39,7 @@ class Mutation(
|
|||
ApiMutations,
|
||||
SystemMutations,
|
||||
UserMutations,
|
||||
SshMutations,
|
||||
):
|
||||
"""Root schema for mutations"""
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,348 @@
|
|||
# pylint: disable=redefined-outer-name
|
||||
# pylint: disable=unused-argument
|
||||
import pytest
|
||||
|
||||
from tests.common import (
|
||||
read_json,
|
||||
)
|
||||
|
||||
|
||||
class ProcessMock:
|
||||
"""Mock subprocess.Popen"""
|
||||
|
||||
def __init__(self, args, **kwargs):
|
||||
self.args = args
|
||||
self.kwargs = kwargs
|
||||
|
||||
def communicate(): # pylint: disable=no-method-argument
|
||||
return (b"NEW_HASHED", None)
|
||||
|
||||
returncode = 0
|
||||
|
||||
|
||||
@pytest.fixture
|
||||
def mock_subprocess_popen(mocker):
|
||||
mock = mocker.patch("subprocess.Popen", autospec=True, return_value=ProcessMock)
|
||||
return mock
|
||||
|
||||
|
||||
@pytest.fixture
|
||||
def some_users(mocker, datadir):
|
||||
mocker.patch("selfprivacy_api.utils.USERDATA_FILE", new=datadir / "some_users.json")
|
||||
assert read_json(datadir / "some_users.json")["users"] == [
|
||||
{
|
||||
"username": "user1",
|
||||
"hashedPassword": "HASHED_PASSWORD_1",
|
||||
"sshKeys": ["ssh-rsa KEY user1@pc"],
|
||||
},
|
||||
{"username": "user2", "hashedPassword": "HASHED_PASSWORD_2", "sshKeys": []},
|
||||
{"username": "user3", "hashedPassword": "HASHED_PASSWORD_3"},
|
||||
]
|
||||
return datadir
|
||||
|
||||
|
||||
# TESTS ########################################################
|
||||
|
||||
|
||||
API_CREATE_SSH_MUTATION = """
|
||||
mutation createSsh($input: SshMutationsInput!) {
|
||||
createSsh(input: $input) {
|
||||
success
|
||||
message
|
||||
code
|
||||
user {
|
||||
username
|
||||
sshKeys
|
||||
}
|
||||
}
|
||||
}
|
||||
"""
|
||||
|
||||
|
||||
def test_graphql_add_ssh_unauthorized(client, some_users, mock_subprocess_popen):
|
||||
response = client.post(
|
||||
"/graphql",
|
||||
json={
|
||||
"query": API_CREATE_SSH_MUTATION,
|
||||
"variables": {
|
||||
"input": {
|
||||
"username": "user1",
|
||||
"sshKey": "ssh-rsa KEY test_key@pc",
|
||||
},
|
||||
},
|
||||
},
|
||||
)
|
||||
assert response.status_code == 200
|
||||
assert response.json.get("data") is None
|
||||
|
||||
|
||||
def test_graphql_add_ssh(authorized_client, some_users, mock_subprocess_popen):
|
||||
response = authorized_client.post(
|
||||
"/graphql",
|
||||
json={
|
||||
"query": API_CREATE_SSH_MUTATION,
|
||||
"variables": {
|
||||
"input": {
|
||||
"username": "user1",
|
||||
"sshKey": "ssh-rsa KEY test_key@pc",
|
||||
},
|
||||
},
|
||||
},
|
||||
)
|
||||
assert response.status_code == 200
|
||||
assert response.json.get("data") is not None
|
||||
|
||||
assert response.json["data"]["createSsh"]["code"] == 200
|
||||
assert response.json["data"]["createSsh"]["message"] is not None
|
||||
assert response.json["data"]["createSsh"]["success"] is True
|
||||
|
||||
assert response.json["data"]["createSsh"]["user"]["username"] == "user1"
|
||||
# assert response.json["data"]["createSsh"]["user"]["sshKeys"] == [ # i know
|
||||
# "ssh-rsa KEY test_key@pc"
|
||||
# ]
|
||||
|
||||
|
||||
def test_graphql_add_root_ssh(authorized_client, some_users, mock_subprocess_popen):
|
||||
response = authorized_client.post(
|
||||
"/graphql",
|
||||
json={
|
||||
"query": API_CREATE_SSH_MUTATION,
|
||||
"variables": {
|
||||
"input": {
|
||||
"username": "root",
|
||||
"sshKey": "ssh-rsa KEY test_key@pc",
|
||||
},
|
||||
},
|
||||
},
|
||||
)
|
||||
assert response.status_code == 200
|
||||
assert response.json.get("data") is not None
|
||||
|
||||
assert response.json["data"]["createSsh"]["code"] == 200
|
||||
assert response.json["data"]["createSsh"]["message"] is not None
|
||||
assert response.json["data"]["createSsh"]["success"] is True
|
||||
|
||||
assert response.json["data"]["createSsh"]["user"]["username"] == "root"
|
||||
# assert response.json["data"]["createSsh"]["user"]["sshKeys"] == [ # i know
|
||||
# "ssh-rsa KEY test_key@pc"
|
||||
# ]
|
||||
|
||||
|
||||
def test_graphql_add_main_ssh(authorized_client, some_users, mock_subprocess_popen):
|
||||
response = authorized_client.post(
|
||||
"/graphql",
|
||||
json={
|
||||
"query": API_CREATE_SSH_MUTATION,
|
||||
"variables": {
|
||||
"input": {
|
||||
"username": "tester",
|
||||
"sshKey": "ssh-rsa KEY test_key@pc",
|
||||
},
|
||||
},
|
||||
},
|
||||
)
|
||||
assert response.status_code == 200
|
||||
assert response.json.get("data") is not None
|
||||
|
||||
assert response.json["data"]["createSsh"]["code"] == 200
|
||||
assert response.json["data"]["createSsh"]["message"] is not None
|
||||
assert response.json["data"]["createSsh"]["success"] is True
|
||||
|
||||
assert response.json["data"]["createSsh"]["user"]["username"] == "tester"
|
||||
# assert response.json["data"]["createSsh"]["user"]["sshKeys"] == [ # i know
|
||||
# "ssh-rsa KEY test_key@pc"
|
||||
# ]
|
||||
|
||||
|
||||
def test_graphql_add_404ssh(authorized_client, some_users, mock_subprocess_popen):
|
||||
response = authorized_client.post(
|
||||
"/graphql",
|
||||
json={
|
||||
"query": API_CREATE_SSH_MUTATION,
|
||||
"variables": {
|
||||
"input": {
|
||||
"username": "user1",
|
||||
"sshKey": "trust me, this is the ssh key",
|
||||
},
|
||||
},
|
||||
},
|
||||
)
|
||||
assert response.status_code == 200
|
||||
assert response.json.get("data") is not None
|
||||
|
||||
assert response.json["data"]["createSsh"]["code"] == 400
|
||||
assert response.json["data"]["createSsh"]["message"] is not None
|
||||
assert response.json["data"]["createSsh"]["success"] is False
|
||||
|
||||
|
||||
def test_graphql_add_ssh_404user(authorized_client, some_users, mock_subprocess_popen):
|
||||
response = authorized_client.post(
|
||||
"/graphql",
|
||||
json={
|
||||
"query": API_CREATE_SSH_MUTATION,
|
||||
"variables": {
|
||||
"input": {
|
||||
"username": "user666",
|
||||
"sshKey": "ssh-rsa KEY test_key@pc",
|
||||
},
|
||||
},
|
||||
},
|
||||
)
|
||||
assert response.status_code == 200
|
||||
assert response.json.get("data") is not None
|
||||
|
||||
assert response.json["data"]["createSsh"]["code"] == 404
|
||||
assert response.json["data"]["createSsh"]["message"] is not None
|
||||
assert response.json["data"]["createSsh"]["success"] is False
|
||||
|
||||
|
||||
API_DELETE_SSH_MUTATION = """
|
||||
mutation deleteSsh($input: SshMutationsInput!) {
|
||||
deleteSsh(input: $input) {
|
||||
success
|
||||
message
|
||||
code
|
||||
user {
|
||||
username
|
||||
sshKeys
|
||||
}
|
||||
}
|
||||
}
|
||||
"""
|
||||
|
||||
|
||||
def test_graphql_dell_ssh_unauthorized(client, some_users, mock_subprocess_popen):
|
||||
response = client.post(
|
||||
"/graphql",
|
||||
json={
|
||||
"query": API_DELETE_SSH_MUTATION,
|
||||
"variables": {
|
||||
"input": {
|
||||
"username": "user1",
|
||||
"sshKey": "ssh-rsa KEY test_key@pc",
|
||||
},
|
||||
},
|
||||
},
|
||||
)
|
||||
assert response.status_code == 200
|
||||
assert response.json.get("data") is None
|
||||
|
||||
|
||||
def test_graphql_dell_ssh(authorized_client, some_users, mock_subprocess_popen):
|
||||
response = authorized_client.post(
|
||||
"/graphql",
|
||||
json={
|
||||
"query": API_DELETE_SSH_MUTATION,
|
||||
"variables": {
|
||||
"input": {
|
||||
"username": "user1",
|
||||
"sshKey": "ssh-rsa KEY test_key@pc",
|
||||
},
|
||||
},
|
||||
},
|
||||
)
|
||||
assert response.status_code == 200
|
||||
assert response.json.get("data") is not None
|
||||
|
||||
assert response.json["data"]["deleteSsh"]["code"] == 200
|
||||
assert response.json["data"]["deleteSsh"]["message"] is not None
|
||||
assert response.json["data"]["deleteSsh"]["success"] is True
|
||||
|
||||
assert response.json["data"]["deleteSsh"]["user"]["username"] == "user1"
|
||||
# assert response.json["data"]["deleteSsh"]["user"]["sshKeys"] == [ # i know
|
||||
# "ssh-rsa KEY test_key@pc"
|
||||
# ]
|
||||
|
||||
|
||||
def test_graphql_dell_root_ssh(authorized_client, some_users, mock_subprocess_popen):
|
||||
response = authorized_client.post(
|
||||
"/graphql",
|
||||
json={
|
||||
"query": API_DELETE_SSH_MUTATION,
|
||||
"variables": {
|
||||
"input": {
|
||||
"username": "root",
|
||||
"sshKey": "ssh-rsa KEY root@pc",
|
||||
},
|
||||
},
|
||||
},
|
||||
)
|
||||
assert response.status_code == 200
|
||||
assert response.json.get("data") is not None
|
||||
|
||||
assert response.json["data"]["deleteSsh"]["code"] == 200
|
||||
assert response.json["data"]["deleteSsh"]["message"] is not None
|
||||
assert response.json["data"]["deleteSsh"]["success"] is True
|
||||
|
||||
assert response.json["data"]["deleteSsh"]["user"]["username"] == "root"
|
||||
# assert response.json["data"]["deleteSsh"]["user"]["sshKeys"] == [ # i know
|
||||
# "ssh-rsa KEY test_key@pc"
|
||||
# ]
|
||||
|
||||
|
||||
def test_graphql_dell_main_ssh(authorized_client, some_users, mock_subprocess_popen):
|
||||
response = authorized_client.post(
|
||||
"/graphql",
|
||||
json={
|
||||
"query": API_DELETE_SSH_MUTATION,
|
||||
"variables": {
|
||||
"input": {
|
||||
"username": "tester",
|
||||
"sshKey": "ssh-rsa KEY tester@pc",
|
||||
},
|
||||
},
|
||||
},
|
||||
)
|
||||
assert response.status_code == 200
|
||||
assert response.json.get("data") is not None
|
||||
|
||||
assert response.json["data"]["deleteSsh"]["code"] == 200
|
||||
assert response.json["data"]["deleteSsh"]["message"] is not None
|
||||
assert response.json["data"]["deleteSsh"]["success"] is True
|
||||
|
||||
assert response.json["data"]["deleteSsh"]["user"]["username"] == "tester"
|
||||
assert response.json["data"]["deleteSsh"]["user"]["sshKeys"] == [ # i know
|
||||
"ssh-rsa KEY test_key@pc"
|
||||
]
|
||||
|
||||
|
||||
def test_graphql_dell_404ssh(authorized_client, some_users, mock_subprocess_popen):
|
||||
response = authorized_client.post(
|
||||
"/graphql",
|
||||
json={
|
||||
"query": API_DELETE_SSH_MUTATION,
|
||||
"variables": {
|
||||
"input": {
|
||||
"username": "user1",
|
||||
"sshKey": "ssh-rsa KEY test_key@pc",
|
||||
},
|
||||
},
|
||||
},
|
||||
)
|
||||
assert response.status_code == 200
|
||||
assert response.json.get("data") is not None
|
||||
|
||||
assert response.json["data"]["deleteSsh"]["code"] == 404
|
||||
assert response.json["data"]["deleteSsh"]["message"] is not None
|
||||
assert response.json["data"]["deleteSsh"]["success"] is False
|
||||
|
||||
|
||||
def test_graphql_dell_ssh_404user(authorized_client, some_users, mock_subprocess_popen):
|
||||
response = authorized_client.post(
|
||||
"/graphql",
|
||||
json={
|
||||
"query": API_DELETE_SSH_MUTATION,
|
||||
"variables": {
|
||||
"input": {
|
||||
"username": "user666",
|
||||
"sshKey": "ssh-rsa KEY test_key@pc",
|
||||
},
|
||||
},
|
||||
},
|
||||
)
|
||||
assert response.status_code == 200
|
||||
assert response.json.get("data") is not None
|
||||
|
||||
assert response.json["data"]["deleteSsh"]["code"] == 404
|
||||
assert response.json["data"]["deleteSsh"]["message"] is not None
|
||||
assert response.json["data"]["deleteSsh"]["success"] is False
|
||||
Loading…
Reference in New Issue