def test_request_token_unsuccessful():
iam_url = "https://iam.cloud.ibm.com/identity/token"
response = """{
"context": {
"requestId": "38a0e9c226d94764820d92aa623eb0f6",
"requestType": "incoming.Identity_Token",
"userAgent": "ibm-python-sdk-core-1.0.0",
"url": "https://iam.cloud.ibm.com",
"instanceId": "iamid-4.5-6788-90b137c-75f48695b5-kl4wx",
"threadId": "169de5",
"host": "iamid-4.5-6788-90b137c-75f48695b5-kl4wx",
"startTime": "29.10.2019 12:31:00:300 GMT",
"endTime": "29.10.2019 12:31:00:381 GMT",
"elapsedTime": "81",
"locale": "en_US",
"clusterName": "iam-id-prdal12-8brn"
},
"errorCode": "BXNIM0415E",
"errorMessage": "Provided API key could not be found"
}
"""
responses.add(responses.POST, url=iam_url, body=response, status=400)
token_manager = IAMTokenManager("apikey")
with pytest.raises(ApiException):
token_manager.request_token()
assert len(responses.calls) == 1
assert responses.calls[0].request.url == iam_url
assert responses.calls[0].response.text == response
def test_request_token_auth_in_ctor_with_scope():
iam_url = "https://iam.cloud.ibm.com/identity/token"
response = """{
"access_token": "oAeisG8yqPY7sFR_x66Z15",
"token_type": "Bearer",
"expires_in": 3600,
"expiration": 1524167011,
"refresh_token": "jy4gl91BQ"
}"""
default_auth_header = 'Basic Yng6Yng='
responses.add(responses.POST, url=iam_url, body=response, status=200)
token_manager = IAMTokenManager("apikey",
url=iam_url,
client_id='foo',
client_secret='bar',
scope='john snow')
token_manager.request_token()
assert len(responses.calls) == 1
assert responses.calls[0].request.url == iam_url
assert responses.calls[0].request.headers[
'Authorization'] != default_auth_header
assert responses.calls[0].response.text == response
assert 'scope=john+snow' in responses.calls[0].response.request.body
def test_request_token():
iam_url = "https://iam.bluemix.net/identity/token"
response = """{
"access_token": "oAeisG8yqPY7sFR_x66Z15",
"token_type": "Bearer",
"expires_in": 3600,
"expiration": 1524167011,
"refresh_token": "jy4gl91BQ"
}"""
responses.add(responses.POST, url=iam_url, body=response, status=200)
token_manager = IAMTokenManager("iam_apikey", "iam_access_token", iam_url)
token_manager._request_token()
assert responses.calls[0].request.url == iam_url
assert responses.calls[0].response.text == response
assert len(responses.calls) == 1
def test_get_refresh_token():
iam_url = "https://iam.cloud.ibm.com/identity/token"
access_token_str = get_access_token()
response = """{
"access_token": "%s",
"token_type": "Bearer",
"expires_in": 3600,
"expiration": 1524167011,
"refresh_token": "jy4gl91BQ"
}""" % (access_token_str)
responses.add(responses.POST, url=iam_url, body=response, status=200)
token_manager = IAMTokenManager("iam_apikey")
token_manager.get_token()
assert len(responses.calls) == 2
assert token_manager.refresh_token == "jy4gl91BQ"
def test_request_token_auth_default():
iam_url = "https://iam.cloud.ibm.com/identity/token"
response = """{
"access_token": "oAeisG8yqPY7sFR_x66Z15",
"token_type": "Bearer",
"expires_in": 3600,
"expiration": 1524167011,
"refresh_token": "jy4gl91BQ"
}"""
responses.add(responses.POST, url=iam_url, body=response, status=200)
token_manager = IAMTokenManager("apikey")
token_manager.request_token()
assert len(responses.calls) == 1
assert responses.calls[0].request.url == iam_url
assert responses.calls[0].request.headers.get('Authorization') is None
assert responses.calls[0].response.text == response
def test_request_token_auth_in_ctor_secret_only():
iam_url = "https://iam.bluemix.net/identity/token"
response = """{
"access_token": "oAeisG8yqPY7sFR_x66Z15",
"token_type": "Bearer",
"expires_in": 3600,
"expiration": 1524167011,
"refresh_token": "jy4gl91BQ"
}"""
default_auth_header = 'Basic Yng6Yng='
responses.add(responses.POST, url=iam_url, body=response, status=200)
token_manager = IAMTokenManager("iam_apikey", "iam_access_token", iam_url,
None, 'bar')
token_manager._request_token()
assert len(responses.calls) == 1
assert responses.calls[0].request.url == iam_url
assert responses.calls[0].request.headers[
'Authorization'] == default_auth_header
assert responses.calls[0].response.text == response
def test_request_token_auth_in_setter_scope():
iam_url = "https://iam.cloud.ibm.com/identity/token"
response = """{
"access_token": "oAeisG8yqPY7sFR_x66Z15",
"token_type": "Bearer",
"expires_in": 3600,
"expiration": 1524167011,
"refresh_token": "jy4gl91BQ"
}"""
responses.add(responses.POST, url=iam_url, body=response, status=200)
token_manager = IAMTokenManager("iam_apikey")
token_manager.set_client_id_and_secret(None, 'bar')
token_manager.set_headers({'user': '******'})
token_manager.set_scope('john snow')
token_manager.request_token()
assert len(responses.calls) == 1
assert responses.calls[0].request.url == iam_url
assert responses.calls[0].request.headers.get('Authorization') is None
assert responses.calls[0].response.text == response
assert 'scope=john+snow' in responses.calls[0].response.request.body
def test_is_refresh_token_expired():
token_manager = IAMTokenManager("iam_apikey", "iam_access_token",
"iam_url")
token_manager.token_info = {
"access_token": "oAeisG8yqPY7sFR_x66Z15",
"token_type": "Bearer",
"expires_in": 3600,
"expiration": int(time.time()),
"refresh_token": "jy4gl91BQ"
}
assert token_manager._is_refresh_token_expired() is False
token_manager.token_info['expiration'] = int(time.time()) - (8 * 24 * 3600)
assert token_manager._is_token_expired()
def test_get_token():
iam_url = "https://iam.bluemix.net/identity/token"
token_manager = IAMTokenManager("iam_apikey", iam_url=iam_url)
token_manager.user_access_token = 'user_access_token'
# Case 1:
token = token_manager.get_token()
assert token == token_manager.user_access_token
# Case 2:
token_manager.user_access_token = ''
response = """{
"access_token": "hellohello",
"token_type": "Bearer",
"expires_in": 3600,
"expiration": 1524167011,
"refresh_token": "jy4gl91BQ"
}"""
responses.add(responses.POST, url=iam_url, body=response, status=200)
token = token_manager.get_token()
assert token == "hellohello"
# Case 3:
token_manager.token_info['expiration'] = int(
time.time()) - (20 * 24 * 3600)
token = token_manager.get_token()
assert "grant_type=urn" in responses.calls[1].request.body
token_manager.token_info['expiration'] = int(time.time()) - 4000
token = token_manager.get_token()
assert "grant_type=refresh_token" in responses.calls[2].request.body
# Case 4
token_manager.token_info = {
"access_token": "dummy",
"token_type": "Bearer",
"expires_in": 3600,
"expiration": int(time.time()) + 3600,
"refresh_token": "jy4gl91BQ"
}
token = token_manager.get_token()
assert token == 'dummy'
