def test_rebuilding_access_tokens(app, models_fixture):
"""Test rebuilding access tokens with random new SECRET_KEY."""
old_secret_key = app.secret_key
datastore = app.extensions['invenio-accounts'].datastore
existing_email = '*****@*****.**'
user = datastore.find_user(email=existing_email)
# Creating a new remote token and commiting to the db
test_token = 'mytoken'
token_type = 'testing'
with db.session.begin_nested():
rt = RemoteToken.create(user.id, 'testkey', test_token, app.secret_key,
token_type)
db.session.add(rt)
db.session.commit()
# Changing application SECRET_KEY
app.secret_key = 'NEW_SECRET_KEY'
db.session.expunge_all()
# Asserting the decoding error occurs with the stale SECRET_KEY
if sys.version_info[0] < 3: # python 2
remote_token = RemoteToken.query.first()
assert remote_token.access_token != test_token
else: # python 3
with pytest.raises(ValueError):
RemoteToken.query.first()
db.session.expunge_all()
rebuild_access_tokens(old_secret_key)
remote_token = RemoteToken.query.filter_by(token_type=token_type).first()
# Asserting the access_token is not changed after rebuilding
assert remote_token.access_token == test_token
def test_rebuilding_access_tokens(models_fixture):
"""Test rebuilding access tokens with random new SECRET_KEY."""
app = models_fixture
old_secret_key = app.secret_key
datastore = app.extensions['invenio-accounts'].datastore
existing_email = '*****@*****.**'
user = datastore.find_user(email=existing_email)
# Creating a new remote token and commiting to the db
test_token = 'mytoken'
token_type = 'testing'
with db.session.begin_nested():
rt = RemoteToken.create(user.id, 'testkey', test_token,
app.secret_key, token_type)
db.session.add(rt)
db.session.commit()
# Changing application SECRET_KEY
app.secret_key = 'NEW_SECRET_KEY'
db.session.expunge_all()
# Asserting the decoding error occurs with the stale SECRET_KEY
if sys.version_info[0] < 3: # python 2
remote_token = RemoteToken.query.first()
assert remote_token.access_token != test_token
else: # python 3
with pytest.raises(UnicodeDecodeError):
RemoteToken.query.first()
db.session.expunge_all()
rebuild_access_tokens(old_secret_key)
remote_token = RemoteToken.query.filter_by(token_type=token_type).first()
# Asserting the access_token is not changed after rebuilding
assert remote_token.access_token == test_token