async def test_wsauth_unknown_session():
application = URLRouter([
re_path(r"^ws/notification/(?P<room_name>[^/]+)/$",
NotificationConsumer),
])
mut = SessionAuthMiddleware(application)
utm_source = "333333"
resource_link_id = "fake_url"
mock_scope = {
"type":
"websocket",
"path":
"/ws/notification/course--ad10b1d2--1/",
"query_string":
"utm_source={}&resource_link_id={}".format(
utm_source, resource_link_id).encode("utf-8"),
"headers": [],
"subprotocols": [],
}
inner_consumer = mut.__call__(scope=mock_scope)
assert "hxat_auth" in mock_scope
assert mock_scope["hxat_auth"] == "403: unknown session-id({})".format(
utm_source)
def test_wsauth_ok():
###
# prep to create lti session
instructor_name = "sylvia_plath"
instructor_edxid = "{}{}".format(randint(1000, 65534),
randint(1000, 65534))
course_id = "hx+FancierCourse+TermCode+Year"
clean_course_id = re.sub(r"[\W_]", "-", course_id)
target_path = reverse("hx_lti_initializer:launch_lti")
launch_url = "http://testserver{}".format(target_path)
resource_link_id = "some_string_to_be_THE_fake_resource_link_id"
consumer = ToolConsumer(
consumer_key=settings.CONSUMER_KEY,
consumer_secret=settings.LTI_SECRET,
launch_url=launch_url,
params={
"lti_message_type": "basic-lti-launch-request",
"lti_version": "LTI-1p0",
"resource_link_id": resource_link_id,
"lis_person_sourcedid": instructor_name,
"lis_outcome_service_url": "fake_url",
"user_id": instructor_edxid,
"roles": ["Instructor", "Administrator"],
"context_id": course_id,
"context_title": "{}+title".format(course_id),
},
)
params = consumer.generate_launch_data()
client = Client(enforce_csrf_checks=False)
response = client.post(
target_path,
data=params,
)
utm_source = response.cookies.get("sessionid").value
# prep to create lti session
###
application = URLRouter([
re_path(r"^ws/notification/(?P<room_name>[^/]+)/$",
NotificationConsumer),
])
mut = SessionAuthMiddleware(application)
mock_scope = {
"type":
"websocket",
"path":
"/ws/notification/{}--ad10b1d2--1/".format(clean_course_id),
"query_string":
"utm_source={}&resource_link_id={}".format(
utm_source, resource_link_id).encode("utf-8"),
"headers": [],
"subprotocols": [],
}
inner_consumer = mut.__call__(scope=mock_scope)
assert "hxat_auth" in mock_scope
assert mock_scope["hxat_auth"] == "authenticated"
async def test_wsauth_missing_querystring():
application = URLRouter([
re_path(r"^ws/notification/(?P<room_name>[^/]+)/$",
NotificationConsumer),
])
mut = SessionAuthMiddleware(application)
mock_scope = {
"type": "websocket",
"path": "/ws/notification/course--ad10b1d2--1/",
"query_string": b"",
"headers": [],
"subprotocols": [],
}
inner_consumer = mut.__call__(scope=mock_scope)
assert "hxat_auth" in mock_scope
assert mock_scope["hxat_auth"] == "403: missing querystring"