def test_dump_and_load(logger, mongodb):
"""Test the dump and loading of the user 'universe'.
"""
assert user.count() == 0
assert user.dump() == []
username = u'andrés.bolívar'
display_name = u'Andrés Plácido Bolívar'
email = u'andrés.bolí[email protected]'
data = [
{
"username": "******",
"oauth_tokens": {
"googleauth": {
"request_token": "1234567890"
}
},
"display_name": "Bobby",
"phone": "12121212",
"cats": "big",
"teatime": 1,
"_id": "user-2719963b00964c01b42b5d81c998fd05",
"email": "*****@*****.**",
"password_hash": pwtools.hash_password('11amcoke')
},
{
"username": username.encode('utf-8'),
"display_name": display_name.encode('utf-8'),
"phone": "",
"_id": "user-38ed1d2903344702b30bb951916aaf1c",
"email": email.encode('utf-8'),
"password_hash": pwtools.hash_password('$admintime$')
}
]
user.load(data)
assert user.count() == 2
item2 = user.get('bob.sprocket')
user_dict = data[0]
assert item2['username'] == user_dict['username']
assert item2['display_name'] == user_dict['display_name']
assert item2['email'] == user_dict['email']
assert item2['phone'] == user_dict['phone']
assert item2['oauth_tokens'] == user_dict['oauth_tokens']
assert item2['cats'] == 'big'
assert item2['teatime'] == 1
# Test the unicode name as still good:
item1 = user.get(username)
user_dict = data[1]
assert item1['username'] == username
assert item1['display_name'] == display_name
assert item1['email'] == email
assert item1['phone'] == user_dict['phone']
def add_metadata(self, environ, identity):
"""
Recover the display name and other details for the given user name
See: (IMetadataProvider)
http://docs.repoze.org/who/narr.html#\
writing-a-metadata-provider-plugin
"""
from pp.user.model import user
userid = identity.get('repoze.who.userid')
#get_log().debug("add_metadata for userid <{!r}>".format(userid))
if not userid:
get_log().info(
"No userid to get details for <{!r}>".format(userid)
)
return
try:
result = user.get(userid)
except:
get_log().exception(
"user recovery failured for <{!r}>: ".format(userid)
)
else:
#get_log().debug("user metadata recovered: <{!r}>".format(result))
if result:
identity.update(result)
def test_change_password(logger, mongodb):
"""The the single call to change a users password.
"""
username = '******'
plain_pw = '1234567890'
confirm_plain_pw = '1234567890'
new_plain_pw = '0987654321'
assert user.count() == 0
assert user.find(username=username) == []
with pytest.raises(user.UserNotFoundError):
# The user isn't present to recover
user.change_password(
username,
plain_pw,
confirm_plain_pw,
new_plain_pw
)
# Add the user:
user_dict = dict(
username=username,
password=plain_pw,
display_name='Bob Sprocket',
email='*****@*****.**',
)
item1 = user.add(**user_dict)
is_valid = pwtools.validate_password(plain_pw, item1['password_hash'])
assert is_valid is True
# Now change the password
user.change_password(
username,
plain_pw,
confirm_plain_pw,
new_plain_pw
)
item2 = user.get(username)
# old password is not valid:
is_valid = pwtools.validate_password(plain_pw, item2['password_hash'])
assert is_valid is False
is_valid = pwtools.validate_password(
new_plain_pw, item2['password_hash']
)
assert is_valid is True
def user_get(request):
"""Recover a user based on the given username.
:returns: The user dict.
"""
log = get_log("user_get")
username = request.matchdict['username'].strip().lower()
log.debug("attempting to recover <{!r}>".format(username))
result = user.get(username)
log.debug("user <{!r}> recovered ok.".format((result['username'])))
return result
def user_auth(request):
"""Handle password verification.
The username is given along with the POSTed password_hash.
No plain text password is sent. The hashed version is given and needs to
verfied.
:returns: True, password hash is ok otherwise False.
"""
log = get_log("user_auth")
username = request.matchdict['username'].strip().lower()
log.debug(
"attempting to verify user <{!r}> authentication".format(username)
)
user_data = request.json_body
log.debug("raw_auth data: {!r}".format(user_data))
# obuscate the password so its not immediately obvious:
# Need to convert to SSL or some other form of secure
# transport.
pw = user_data['password'].decode("base64")
found_user = user.get(username)
# log.error("\n\nSHOULD NOT BE SHOWN: user<%s> password <%s>\n\n" % (
# found_user, pw
# ))
result = pwtools.validate_password(
pw, found_user['password_hash']
)
log.debug("user <{!r}> password validated? {}".format(
found_user['username'], result
))
return result
def testBasicCRUD(logger, mongodb):
"""Test the basic add and get method
"""
username = '******'
assert user.count() == 0
assert user.find(username=username) == []
# Test I cannot add a user if I don't provide either a
# password or a password_hash
#
user_dict = dict(
username=username,
# Not provied password or password hash
#password='******',
)
with pytest.raises(user.UserAddError):
user.add(**user_dict)
plain_pw = '1234567890'
user_dict = dict(
username=username,
password=plain_pw,
display_name='Bob Sprocket',
email='*****@*****.**',
phone='9876543210'
)
item1 = user.add(**user_dict)
# The password is hashed and then stored as password_hash. The password
# it removed and never stored.
assert "password" not in item1
# Check the password is converted into a hashed password correctly:
is_validate = pwtools.validate_password(
plain_pw, item1['password_hash']
)
assert is_validate is True
# Make sure I cannot add the same username again:
with pytest.raises(user.UserPresentError):
user.add(**user_dict)
assert user.find(username=username) == [item1]
assert user.has(username) is True
assert user.count() == 1
item2 = user.get(username)
assert item2["username"] == user_dict['username']
assert item2['display_name'] == user_dict['display_name']
assert item2['email'] == user_dict['email']
assert item2['phone'] == user_dict['phone']
user.remove(item2['username'])
assert user.count() == 0
assert user.has(item2['username']) is False
with pytest.raises(user.UserRemoveError):
user.remove(item2['username'])
def testExtraField(logger, mongodb):
"""Test the arbitrary dic that can be used to store useful fields
per user.
"""
username = '******'
plain_pw = '1234567890'
assert user.count() == 0
assert user.find(username=username) == []
user_dict = dict(
username=username,
password=plain_pw,
display_name='Bob Sprocket',
email='*****@*****.**',
phone='9876543210'
)
item1 = user.add(**user_dict)
# Make sure I cannot add the same username again:
with pytest.raises(user.UserPresentError):
user.add(**user_dict)
assert user.find(username=username) == [item1]
assert user.has(username) is True
assert user.count() == 1
item2 = user.get(username)
assert item2['username'] == user_dict['username']
assert item2['display_name'] == user_dict['display_name']
is_validate = pwtools.validate_password(
plain_pw, item1['password_hash']
)
assert is_validate is True
is_validate = pwtools.validate_password(
"not the right one", item1['password_hash']
)
assert is_validate is False
assert item2['email'] == user_dict['email']
assert item2['phone'] == user_dict['phone']
# Now update all the user fields that can be changed
# and add some extra data to the arbitrary fields:
#
oauth_tokens = dict(
# Some pretend googleservice oauth data:
googleauth=dict(
request_token="1234567890",
)
)
user_dict = dict(
username=username,
# change the password. new_password will be hashed and
# its has stored as password_hash:
new_password="******",
display_name='Bobby',
email='*****@*****.**',
phone='12121212',
oauth_tokens=oauth_tokens,
cats='big',
teatime=1,
)
user.update(**user_dict)
item2 = user.get(username)
assert item2['username'] == user_dict['username']
assert item2['display_name'] == user_dict['display_name']
is_validate = pwtools.validate_password(
"ifidexmemwb", item2['password_hash']
)
assert is_validate is True
is_validate = pwtools.validate_password(
plain_pw, item2['password_hash']
)
assert is_validate is False
is_validate = pwtools.validate_password(
"not the right one", item1['password_hash']
)
assert is_validate is False
assert item2['email'] == user_dict['email']
assert item2['phone'] == user_dict['phone']
assert item2['oauth_tokens'] == oauth_tokens
assert item2['cats'] == 'big'
assert item2['teatime'] == 1
