def setUp(self, **kwargs):
# first org, admin, user are already created
super().setUp()
org = setup_org()
setup_admin(org=org)
# User have already created its account
self.user = setup_user(org=org)
def setUp(self):
self.org_with_docs = setup_org()
setup_admin(self.org_with_docs)
self.user = setup_user(self.org_with_docs)
self.doc = setup_document(self.org_with_docs, self.user)
self.doc_bis = setup_document(self.org_with_docs,
self.user,
title=tv.DOCUMENT2_TITLE)
self.first_level_folder = setup_folder(self.org_with_docs,
name="First level folder")
self.doc_in_folder = setup_document(
self.org_with_docs,
self.user,
title="Document in folder",
ftl_folder=self.first_level_folder,
)
self.org_with_folders = setup_org(name=tv.ORG_NAME_2,
slug=tv.ORG_SLUG_2)
setup_folder(self.org_with_folders)
self.org_without_docs_1 = setup_org(name=tv.ORG_NAME_3,
slug=tv.ORG_SLUG_3)
self.org_without_docs_2 = setup_org(name=tv.ORG_NAME_4,
slug=tv.ORG_SLUG_4)
def test_mark_delete_document(self, mocked_send_task):
self.org = setup_org()
setup_admin(self.org)
self.user = setup_user(self.org)
binary_f = setup_temporary_file().name
thumbnail_f = setup_temporary_file().name
document_to_be_deleted = FTLDocument.objects.create(
org=self.org,
ftl_user=self.user,
title="Test document to be deleted",
binary=binary_f,
thumbnail_binary=thumbnail_f,
)
document_to_be_deleted.mark_delete()
self.assertTrue(document_to_be_deleted.deleted)
self.assertIsNone(document_to_be_deleted.ftl_folder)
mocked_send_task.assert_called_with(
"core.tasks.delete_document",
args=[
document_to_be_deleted.pid,
document_to_be_deleted.org.pk,
document_to_be_deleted.ftl_user.pk,
],
)
def setUp(self, **kwargs):
# first org, admin, user are already created, user is already logged on home page
super().setUp()
self.org = setup_org()
setup_admin(self.org)
self.visit(LoginPage.url)
self.log_user(email=tv.ADMIN1_EMAIL, password=tv.ADMIN1_PASS)
def test_delete_document(self):
self.org = setup_org()
setup_admin(self.org)
self.user = setup_user(self.org)
# Create a custom document and thumbnail specific to this test because we don't want to delete test files
binary_f = setup_temporary_file().name
thumbnail_f = setup_temporary_file().name
document_to_be_deleted = FTLDocument.objects.create(
org=self.org,
ftl_user=self.user,
title="Test document to be deleted",
binary=binary_f,
thumbnail_binary=thumbnail_f,
)
document_to_be_deleted.delete()
with self.assertRaises(core.models.FTLDocument.DoesNotExist):
FTLDocument.objects.get(pid=document_to_be_deleted.pid)
# File has been deleted.
self.assertTrue(not os.path.exists(binary_f))
self.assertTrue(not os.path.exists(thumbnail_f))
def test_delete_folders(self, mock_send_task_delete_document):
org = setup_org()
setup_admin(org)
user = setup_user(org)
folder = setup_folder(org)
folder_sub = setup_folder(org, parent=folder)
document_1 = setup_document(org,
user,
binary=setup_temporary_file().name)
document_2 = setup_document(org,
user,
folder,
binary=setup_temporary_file().name)
document_3 = setup_document(org,
user,
folder_sub,
binary=setup_temporary_file().name)
self.assertEqual(FTLDocument.objects.filter(deleted=False).count(), 3)
self.assertEqual(FTLFolder.objects.count(), 2)
folder.delete()
self.assertEqual(FTLDocument.objects.filter(deleted=False).count(), 1)
self.assertEqual(FTLFolder.objects.count(), 0)
self.assertIsNotNone(FTLDocument.objects.get(pid=document_1.pid))
doc_marked_as_deleted_2 = FTLDocument.objects.get(pid=document_2.pid)
self.assertTrue(doc_marked_as_deleted_2.deleted)
doc_marked_as_deleted_3 = FTLDocument.objects.get(pid=document_3.pid)
self.assertTrue(doc_marked_as_deleted_3.deleted)
def test_second_org_setup(self):
# first org, admin, first user are already created
org1 = setup_org()
setup_admin(org=org1)
setup_user(org=org1)
# Admin user login to admin portal and create a new org
self.visit(LoginPage.admin_url)
self.log_admin()
self.get_elem(self.create_org_link).click()
org2_slug = self.create_org(tv.ORG_NAME_2, tv.ORG_SLUG_2)
# Admin close its browser
self.browser.quit()
# Second user display the app for the first time to create its account
self.setUp()
self.visit_signup_page(org2_slug)
# Second user fulfill the user creation form
email = self.create_user(user_num=2, activate_user=True)
# Second user login to the second organization
self.log_user(user_num=2)
# Second user is properly logged
self.assertIn("home", self.head_title)
self.assertIn(email, self.get_elem(self.profile_name).text)
def test_new_user_add_document_inside_folder(self, mock_apply_processing):
# first org, admin, are already created
org = setup_org()
setup_admin(org=org)
# First user create its account and login
self.visit_signup_page(org.slug)
self.create_user(activate_user=True)
self.log_user()
# First user add a folder, a document inside it and display document
self.create_folder()
self.get_elem(self.folders_list_buttons).click()
self.upload_documents()
self.get_elem(self.first_document_title).click()
# User can see the uploaded document inside the viewer
# User can see the pdf inside the pdf viewer
self.wait_for_elem_to_show(self.pdf_viewer_iframe)
pdf_viewer_iframe = self.get_elem(self.pdf_viewer_iframe)
self.browser.switch_to_frame(pdf_viewer_iframe)
pdf_viewer_iframe_title = self.get_elem(
"title", False).get_attribute("innerHTML")
self.assertEqual(pdf_viewer_iframe_title, "PDF.js viewer")
def setUp(self):
self.org = setup_org()
setup_admin(self.org)
self.user = setup_user(self.org)
self.doc = setup_document(
self.org,
self.user,
title=tv.DOCUMENT_DOCX_TITLE,
note=tv.DOCUMENT_DOCX_NOTE,
text_content=tv.DOCUMENT_DOCX_CONTENT,
binary=tv.DOCUMENT_DOCX_BINARY_PATH,
file_type=
"application/vnd.openxmlformats-officedocument.wordprocessingml.document",
)
self.first_level_folder = setup_folder(self.org,
name="First level folder")
self.doc_in_folder = setup_document(
self.org,
self.user,
title="Document in folder",
ftl_folder=self.first_level_folder,
)
self.client.login(request=HttpRequest(),
email=tv.USER1_EMAIL,
password=tv.USER1_PASS)
def setUp(self):
self.org = setup_org()
setup_admin(self.org)
self.user = setup_user(self.org)
self.client.login(
request=HttpRequest(), email=tv.USER1_EMAIL, password=tv.USER1_PASS
)
def setUp(self):
# Setup org, admin, user and user is logged
self.org = setup_org()
setup_admin(self.org)
self.user = setup_user(self.org)
setup_authenticated_session(self.client, self.org, self.user)
# reset mock
self.addCleanup(totp_time_setter.reset_mock, side_effect=True)
def test_create_first_org_and_admin_page_redirect_to_success_after_admin_creation(
self,
):
"""create_admin page redirect to success page once admin created"""
setup_admin(setup_org())
response = self.client.get(reverse_lazy("setup:create_admin"))
self.assertRedirects(response, reverse_lazy("login"))
def setUp(self, **kwargs):
# first org, admin, user are already created, user is already logged on home page
super().setUp()
self.org = setup_org()
setup_admin(self.org)
self.user = setup_user(self.org)
self.visit(LoginPage.url)
self.log_user()
def setUp(self, **kwargs):
# first org, admin, user are already created, user is already logged on home page
super().setUp()
self.admin_org = setup_org(name="admin org 1", slug="admin-org-1")
setup_admin(self.admin_org)
self.user_org = setup_org()
self.user = setup_user(self.user_org)
self.visit(LoginPage.url)
def test_logout_call_proper_signal(self, mocked_signal):
# Setup org, admin, user and log the user
org = setup_org()
setup_admin(org)
user = setup_user(org)
setup_authenticated_session(self.client, org, user)
self.client.get("/logout/")
mocked_signal.assert_called_once()
def test_index_redirects(self):
"""Index redirect to correct page according to setup state"""
response = self.client.get("", follow=True)
self.assertRedirects(response, reverse_lazy("setup:create_admin"))
org = setup_org()
setup_admin(org)
response = self.client.get("", follow=True)
self.assertRedirects(
response, f"{reverse_lazy('login')}?next={reverse_lazy('home')}")
def setUp(self):
self.org = setup_org()
setup_admin(self.org)
self.user = setup_user(self.org)
self.doc = setup_document(self.org, self.user)
self.doc_bis = setup_document(self.org, self.user, title=tv.DOCUMENT2_TITLE)
self.client.login(
request=HttpRequest(), email=tv.USER1_EMAIL, password=tv.USER1_PASS
)
def test_admin_user_can_login_in_django_admin(self):
"""Admin user can login in Django admin"""
# Admin user have already setup org and admin
setup_admin(setup_org())
self.visit(LoginPage.admin_url)
# He log to admin portal
self.log_user(email=tv.ADMIN1_EMAIL, password=tv.ADMIN1_PASS)
# Django admin display properly
self.assertIn(
f"welcome, {tv.ADMIN1_EMAIL}",
self.get_elem(self.django_admin_success_message).text.lower(),
)
def setUp(self):
self.org = setup_org()
setup_admin(self.org)
self.user = setup_user(self.org)
self.folder_root = setup_folder(self.org, name="First level folder")
self.folder_root_subfolder = setup_folder(
self.org, name="Second level folder", parent=self.folder_root
)
self.client.login(
request=HttpRequest(), email=tv.USER1_EMAIL, password=tv.USER1_PASS
)
def test_js_i18n_are_working_with_user_lang(self):
# i18n lang is chosen by user setting in db
# first org, admin, user are already created, user is already logged on home page
self.org = setup_org()
setup_admin(self.org, lang="en")
self.user = setup_user(self.org, lang="en")
self.visit(LoginPage.url)
self.log_user()
self.visit(self.root_url)
self.assertIn(
"Add documents",
self.get_elem_text(self.add_documents_button),
'"Add documents" should not be translated',
)
def test_logout_signal_trigger_django_messages(self, messages_mocked):
# Setup org, admin, user and log the user
org = setup_org()
setup_admin(org)
user = setup_user(org)
setup_authenticated_session(self.client, org, user)
message_to_display_on_login_page = "bingo!"
messages_mocked.return_value = message_to_display_on_login_page
mocked_request = Mock()
mocked_request.GET = {}
mocked_request.axes_attempt_time = datetime.now()
user_logged_out.send(self.__class__, request=mocked_request, user=user)
messages_mocked.assert_called_once()
def test_js_i18n_are_working_no_user_lang(self):
# i18n lang is chosen by the browser accept-language header
# first org, admin, user are already created, user is already logged on home page
self.org = setup_org()
setup_admin(self.org, lang="")
self.user = setup_user(self.org, lang="")
self.visit(LoginPage.url)
self.log_user()
self.visit(self.root_url)
self.assertIn(
"Ajouter des documents",
self.get_elem_text(self.add_documents_button),
'"Add documents" should be translated as "Ajouter des documents"',
)
def setUp(self):
self.org = setup_org()
self.admin = setup_admin(self.org)
self.client.login(
request=HttpRequest(), email=tv.ADMIN1_EMAIL, password=tv.ADMIN1_PASS
)
def setUp(self, **kwargs):
# first org, admin, user are already created, user is already logged to 2FA account page
super().setUp()
self.org = setup_org()
setup_admin(self.org)
self.user = setup_user(self.org)
# mock OTPMiddleware._verify_user() to skip check page
self.middleware_patcher = patch.object(OTPMiddleware, "_verify_user",
mocked_verify_user)
self.middleware_patcher.start()
self.addCleanup(
patch.stopall
) # ensure mock is remove after each test, even if the test crash
self.addCleanup(totp_time_setter.reset_mock, side_effect=True)
self.visit(LoginPage.url)
self.log_user()
self.visit(AccountPages.two_factors_authentication_url)
def test_cant_share_not_owned_doc(self):
org_bis = setup_org(name=tv.ORG_NAME_2, slug=tv.ORG_SLUG_2)
admin_bis = setup_admin(org_bis, tv.ADMIN2_EMAIL)
doc_bis = setup_document(org_bis, admin_bis)
client_post = self.client.post(
f"/app/api/v1/documents/{doc_bis.pid}/share", format="json"
)
self.assertEqual(client_post.status_code, status.HTTP_404_NOT_FOUND)
def setUp(self, **kwargs):
# first org, admin, user, first 2fa device are already created, user is already logged on 2FA account page
super().setUp()
self.org = setup_org()
setup_admin(self.org)
self.user = setup_user(self.org)
self.visit(LoginPage.url)
self.log_user()
# setup the first device to access emergency codes feature
self.required_totp_device = setup_2fa_totp_device(self.user)
# mock OTPMiddleware._verify_user() to skip check page
self.middleware_patcher = patch.object(OTPMiddleware, "_verify_user",
mocked_verify_user)
self.middleware_patcher.start()
self.addCleanup(
patch.stopall
) # ensure mock is remove after each test, even if the test crash
self.visit(AccountPages.two_factors_authentication_url)
def setUp(self):
self.org = setup_org()
setup_admin(self.org)
self.user = setup_user(self.org)
self.doc = setup_document(self.org, self.user)
self.doc_bis = setup_document(self.org, self.user, title=tv.DOCUMENT2_TITLE)
self.first_level_folder = setup_folder(self.org, name="First level folder")
self.doc_in_folder = setup_document(
self.org,
self.user,
title="Document in folder",
ftl_folder=self.first_level_folder,
)
self.client.login(
request=HttpRequest(), email=tv.USER1_EMAIL, password=tv.USER1_PASS
)
def setUp(self):
self.org = setup_org()
self.admin = setup_admin(org=self.org)
self.application = Application.objects.create(
name="Test Application",
redirect_uris=("http://localhost:1123"),
user=self.admin,
client_type=Application.CLIENT_CONFIDENTIAL,
authorization_grant_type=Application.GRANT_AUTHORIZATION_CODE,
skip_authorization=False,
)
def test_set_password_revoke_oauth2_tokens(self):
org = setup_org()
setup_admin(org)
user = setup_user(org)
application_model = get_application_model()
application = application_model.objects.create(
name="Test app",
redirect_uris="http://example.org/redirect",
client_type=application_model.CLIENT_PUBLIC,
authorization_grant_type=application_model.
GRANT_AUTHORIZATION_CODE,
skip_authorization=False,
)
access_token_model = get_access_token_model()
access_token = access_token_model.objects.create(
user=user,
scope="read",
expires=timezone.now() + timedelta(seconds=3600),
token="ACCESS-TOKEN",
application=application,
)
refresh_token_model = get_refresh_token_model()
refresh_token = refresh_token_model.objects.create(
user=user,
token="REFRESH_TOKEN",
application=application,
access_token=access_token,
)
self.assertIsNone(refresh_token.revoked)
user.set_password("Changed password")
with self.assertRaises(access_token_model.DoesNotExist):
access_token.refresh_from_db()
refresh_token.refresh_from_db()
self.assertIsNotNone(refresh_token.revoked)
def setUp(self):
self.org = setup_org()
self.admin = setup_admin(org=self.org)
self.application = Application.objects.create(
name="Test Application EXPORT CLI",
redirect_uris=
f"https://pm-instance.example.org{reverse('authorization_code')}",
user=self.admin,
client_type=Application.CLIENT_PUBLIC,
authorization_grant_type=Application.GRANT_AUTHORIZATION_CODE,
skip_authorization=False,
)
