def test_formData_integer(empty_swagger_spec, param_spec):
param_spec['in'] = 'formData'
param = Param(empty_swagger_spec, Mock(spec=Operation), param_spec)
request = {'headers': {}}
marshal_param(param, 34, request)
assert 34 == request['data']['petId']
def test_query_string(empty_swagger_spec, string_param_spec, request_dict):
param = Param(empty_swagger_spec, Mock(spec=Operation), string_param_spec)
expected = copy.deepcopy(request_dict)
expected['params']['username'] = '******'
marshal_param(param, 'darwin', request_dict)
assert expected == request_dict
def test_query_string(empty_swagger_spec, string_param_spec):
param = Param(empty_swagger_spec, Mock(spec=Operation), string_param_spec)
request = Mock(spec=IncomingRequest, query={'username': '******'})
assert 'darwin' == unmarshal_param(param, request)
def test_optional_query_string_with_no_default_and_value_is_None(
empty_swagger_spec, string_param_spec):
string_param_spec['required'] = False
param = Param(empty_swagger_spec, Mock(spec=Operation), string_param_spec)
request = Mock(spec=IncomingRequest, query={})
assert unmarshal_param(param, request) is None
def test_formData_integer(empty_swagger_spec, param_spec):
param_spec['in'] = 'formData'
param = Param(empty_swagger_spec, Mock(spec=Operation), param_spec)
request = Mock(spec=IncomingRequest, form={'petId': '34'})
assert 34 == unmarshal_param(param, request)
def test_path_string(empty_swagger_spec, param_spec):
param_spec['in'] = 'path'
param = Param(empty_swagger_spec, Mock(spec=Operation), param_spec)
request = Mock(spec=IncomingRequest, path={'petId': '34'})
assert 34 == unmarshal_param(param, request)
def test_query_array(empty_swagger_spec, array_param_spec):
param = Param(empty_swagger_spec, Mock(spec=Operation), array_param_spec)
request = Mock(spec=IncomingRequest,
query={'animals': ['cat', 'dog', 'mouse']})
assert ['cat', 'dog', 'mouse'] == unmarshal_param(param, request)
def test_query_string_boolean_values(empty_swagger_spec, boolean_param_spec):
param = Param(empty_swagger_spec, Mock(spec=Operation), boolean_param_spec)
request = Mock(spec=IncomingRequest, query={'isPet': True})
assert True is unmarshal_param(param, request)
def test_optional_query_string_with_default(empty_swagger_spec, string_param_spec):
string_param_spec['required'] = False
string_param_spec['default'] = 'bozo'
param = Param(empty_swagger_spec, Mock(spec=Operation), string_param_spec)
request = Mock(spec=IncomingRequest, query={})
assert 'bozo' == unmarshal_param(param, request)
def security_parameters(self):
return [
Param(self.swagger_spec, self, parameter_dict)
for security_requirement in self.security_requirements
for parameter_dict in security_requirement.parameters_representation_dict
]
def build_params_monkey_patch(op):
"""
This is the monkey-patched version of build_params [0] for w3af.
While parsing some open API specifications we found this error:
The document at "http://moth/swagger.yaml" is not a valid Open API specification.
The following exception was raised while parsing the dict into a specification object:
"'Authorization' security parameter is overriding a parameter defined in operation
or path object"
And identified that the root cause for this "issue" was in this method.
The problem was that we really needed to parse that specification, and we
did not care that much about the restriction imposed by bravado-core.
[0] https://github.com/Yelp/bravado-core/blob/1272d21b80800ad98d3f32c3aaa090e277466f69/bravado_core/operation.py#L153
The following is the documentation for the original function:
Builds up the list of this operation's parameters taking into account
parameters that may be available for this operation's path component.
:type op: :class:`bravado_core.operation.Operation`
:returns: dict where (k,v) is (param_name, Param)
"""
swagger_spec = op.swagger_spec
deref = swagger_spec.deref
op_spec = deref(op.op_spec)
op_params_spec = deref(op_spec.get('parameters', []))
spec_dict = deref(swagger_spec._internal_spec_dict)
paths_spec = deref(spec_dict.get('paths', {}))
path_spec = deref(paths_spec.get(op.path_name))
path_params_spec = deref(path_spec.get('parameters', []))
# Order of addition is *important* here. Since op_params are last in the
# list, they will replace any previously defined path_params with the
# same name when the final params dict is constructed in the loop below.
params_spec = path_params_spec + op_params_spec
params = AliasKeyDict()
for param_spec in params_spec:
param = Param(swagger_spec, op, deref(param_spec))
sanitized_name = sanitize_name(param.name)
params[sanitized_name] = param
params.add_alias(param.name, sanitized_name)
# Security parameters cannot override and been overridden by operation or path objects
new_params = {}
new_param_aliases = {}
for parameter in op.security_parameters:
param_name = sanitize_name(parameter.name)
"""
Removed this code:
if param_name in params:
raise SwaggerSchemaError(
"'{0}' security parameter is overriding a parameter defined in operation or path object".format(
parameter.name,
)
)
else:
# not directly in params because different security requirements could share parameters
new_params[param_name] = parameter
new_param_aliases[parameter.name] = param_name
And replaced it with:
"""
new_params[param_name] = parameter
new_param_aliases[parameter.name] = param_name
params.update(new_params)
for alias, name in iteritems(new_param_aliases):
params.add_alias(alias, name)
return params
def test_location_is_body(empty_swagger_spec, body_param_spec):
param = Param(empty_swagger_spec, Mock(spec=Operation), body_param_spec)
assert body_param_spec['schema'] == get_param_type_spec(param)
def test_ref(minimal_swagger_dict, body_param_spec):
minimal_swagger_dict['parameters'] = {'PetIdParam': body_param_spec}
param_ref_spec = {'$ref': '#/parameters/PetIdParam'}
swagger_spec = Spec(minimal_swagger_dict)
param = Param(swagger_spec, Mock(spec=Operation), param_ref_spec)
assert {'type': 'string'} == get_param_type_spec(param)
