def test_delete_app_admin_404(test_client):
_, _ = setUp()
_, access_token = login(test_client)
response = test_client.put(
'/oauth/clients/abc',
headers=dict(Authorization='Bearer {}'.format(access_token)))
assert response.status_code == 404
def test_change_password_403_admin_token(test_client):
_, u_info = setUp()
_, access_token = login(test_client)
response = test_client.put(
'/oauth/users/change-password/{}'.format(str(u_info['_id'])),
json=dict(),
headers=dict(Authorization='Bearer {}'.format(access_token)))
assert response.status_code == 403
def test_change_password_400(test_client):
u_admin_info, _ = setUp()
_, access_token = login(test_client)
response = test_client.put(
'/oauth/users/change-password/{}'.format(str(u_admin_info['_id'])),
json=dict(old_password='******', confirm_password='******'),
headers=dict(Authorization='Bearer {}'.format(access_token)))
assert response.status_code == 400
def test_update_user_admin_404(test_client):
_, _ = setUp()
_, access_token = login(test_client)
response = test_client.put(
'/oauth/users/abc',
json=dict(institution='INPE BR', occupation='-'),
headers=dict(Authorization='Bearer {}'.format(access_token)))
assert response.status_code == 404
def test_update_user_403(test_client):
u_admin_info, _ = setUp()
_, access_token = login(test_client, username='******')
response = test_client.put(
'/oauth/users/{}'.format(str(u_admin_info['_id'])),
json=dict(institution='INPE BR', occupation='-'),
headers=dict(Authorization='Bearer {}'.format(access_token)))
assert response.status_code == 403
def test_update_app_403(test_client):
_, _ = setUp()
client_updated = dict(
client_name='app-test-2',
client_uri='http://localhost:8080/app-test',
redirect_uri='http://localhost:8080/app-test/redirect',
type_secret='string',
client_secret='abc-key'
)
response = test_client.put(
'/oauth/clients/{}'.format('5e59557579da4ec3ff04a682'),
json=client_updated)
assert response.status_code == 403
def test_update_app_400(test_client):
_, _ = setUp()
_, access_token = login(test_client)
client_updated = dict(
client_uri='http://localhost:8080/app-test',
redirect_uri='http://localhost:8080/app-test/redirect',
type_secret='string',
)
response = test_client.put(
'/oauth/clients/{}'.format('5e59557579da4ec3ff04a682'),
json=client_updated,
headers=dict(Authorization='Bearer {}'.format(access_token)))
assert response.status_code == 400
def test_update_app_admin_404(test_client):
_, _ = setUp()
_, access_token = login(test_client)
client_updated = dict(
client_name='app-test-2',
client_uri='http://localhost:8080/app-test',
redirect_uri='http://localhost:8080/app-test/redirect',
type_secret='string',
client_secret='abc-key'
)
response = test_client.put(
'/oauth/clients/abc',
json=client_updated,
headers=dict(Authorization='Bearer {}'.format(access_token)))
assert response.status_code == 404
def test_update_user_admin_token(test_client):
_, u_info = setUp()
_, access_token = login(test_client)
response = test_client.put(
'/oauth/users/{}'.format(str(u_info['_id'])),
json=dict(institution='INPE BR1', occupation='-'),
headers=dict(Authorization='Bearer {}'.format(access_token)))
r_json = json.loads(response.data)
assert response.status_code == 200
assert 'message' in r_json
response = test_client.get(
'/oauth/users/{}'.format(str(u_info['_id'])),
headers=dict(Authorization='Bearer {}'.format(access_token)))
r_json = json.loads(response.data)
assert response.status_code == 200
assert r_json['institution'] == 'INPE BR1'
def test_reset_password(test_client):
_, user_info = setUp()
response = test_client.post(
'/oauth/users/send-password',
json=dict(username=user_info['credential']['username']))
assert response.status_code == 200
model = mongo.db.recover_pass
recover = model.find_one({"user_id": user_info['_id']})
token = recover['token']
response = test_client.put('/oauth/users/reset-password',
json=dict(token=token,
password='******',
confirm_password='******'))
assert response.status_code == 200
response = test_client.post(
'/oauth/users/valid-token-password/{}'.format(token))
assert response.status_code != 200
def test_update_app(test_client):
_, _ = setUp()
_, access_token = login(test_client)
client_updated = dict(
client_name='app-test-2',
client_uri='http://localhost:8080/app-test',
redirect_uri='http://localhost:8080/app-test/redirect',
type_secret='string',
client_secret='abc-key'
)
response = test_client.put(
'/oauth/clients/{}'.format('5e59557579da4ec3ff04a682'),
json=client_updated,
headers=dict(Authorization='Bearer {}'.format(access_token)))
r_json = json.loads(response.data)
assert response.status_code == 200
response = test_client.get(
'/oauth/clients/{}'.format('5e59557579da4ec3ff04a682'),
headers=dict(Authorization='Bearer {}'.format(access_token)))
r_json = json.loads(response.data)
assert response.status_code == 200
assert r_json['client_name'] == 'app-test-2'
