def test_initialize(): # setup httpsign.initialize(HTTPSIGN_KEY) # check assert_equal(httpsign._shared_key, '042DAD12E0BE4625AC0B2C3F7172DBA8') assert_not_equal(httpsign._nonce_cache, None)
def test_initialize(): # setup httpsign.initialize(HTTPSIGN_KEY) # check assert_equal(httpsign._shared_key, '042DAD12E0BE4625AC0B2C3F7172DBA8') assert_not_equal(httpsign._nonce_cache, None)
def test_check_nonce(tm): # setup httpsign.initialize(HTTPSIGN_KEY) # setup values we want to test, mock, and results auth_tests = [ { # havn't seen before, should not be in cache. "input": { "nonce": "0", "mock_time": 1330837567, }, "output": True }, { # seen before, should be in cache. "input": { "nonce": "0", "mock_time": 1330837567, }, "output": False }, { # different value, should not be in cache. "input": { "nonce": "1", "mock_time": 1330837567, }, "output": True }, { # aged off first value, should not be in cache. "input": { "nonce": "0", "mock_time": 1330837667, }, "output": True } ] # check for test in auth_tests: # mock time tm.return_value = test['input']['mock_time'] # check for exception is we expect the test to fail if test['output'] is False: assert_raises(httpsign.AuthenticationException, httpsign._nonce_in_cache, test['input']['nonce']) else: httpsign._nonce_in_cache(test['input']['nonce'])
def test_check_nonce(tm): # setup httpsign.initialize(HTTPSIGN_KEY) # setup values we want to test, mock, and results auth_tests = [ { # havn't seen before, should not be in cache. "input": { "nonce": "0", "mock_time": 1330837567, }, "output": True }, { # seen before, should be in cache. "input": { "nonce": "0", "mock_time": 1330837567, }, "output": False }, { # different value, should not be in cache. "input": { "nonce": "1", "mock_time": 1330837567, }, "output": True }, { # aged off first value, should not be in cache. "input": { "nonce": "0", "mock_time": 1330837667, }, "output": True }] # check for test in auth_tests: # mock time tm.return_value = test['input']['mock_time'] # check for exception is we expect the test to fail if test['output'] is False: assert_raises(httpsign.AuthenticationException, httpsign._nonce_in_cache, test['input']['nonce']) else: httpsign._nonce_in_cache(test['input']['nonce'])
def test_sign_request(gn, gt): # setup httpsign.initialize(HTTPSIGN_KEY) # mock _generate_nonce and _get_timestamp function return values gn.return_value = '000102030405060708090a0b0c0d0e0f' gt.return_value = '1330837567' # test got_timestamp, got_nonce, got_signature, got_signature_version = \ httpsign.sign_request('{"hello": "world"}') # check assert_equal('1330837567', got_timestamp) assert_equal('000102030405060708090a0b0c0d0e0f', got_nonce) assert_equal( '5a42c21371e8b3a2b50ca1ad72869dc7882aa83a6a2fb13db1bf108d92c6f05f', got_signature) assert_equal("2", got_signature_version)
def test_sign_request(gn, gt): # setup httpsign.initialize(HTTPSIGN_KEY) # mock _generate_nonce and _get_timestamp function return values gn.return_value = '000102030405060708090a0b0c0d0e0f' gt.return_value = '1330837567' # setup values we expect expected_timestamp = '1330837567' expected_nonce = '000102030405060708090a0b0c0d0e0f' expected_signature = \ '5a42c21371e8b3a2b50ca1ad72869dc7882aa83a6a2fb13db1bf108d92c6f05f' expected_signature_version = "2" # test got_timestamp, got_nonce, got_signature, got_signature_version = \ httpsign.sign_request('{"hello": "world"}') # check assert_equal(expected_timestamp, got_timestamp) assert_equal(expected_nonce, got_nonce) assert_equal(expected_signature, got_signature) assert_equal(expected_signature_version, got_signature_version)
def test_authenticate_request(gn, gt, tm): # setup httpsign.initialize(HTTPSIGN_KEY) # mock _generate_nonce and _get_timestamp function return values gn.return_value = '000102030405060708090a0b0c0d0e0f' gt.return_value = '1330837567' tm.return_value = 1330837567.0 # setup values we want to test and results, input is what we provide to the # authenticate_request function, while output is a boolean that represents # if the request is valid or not. auth_tests = [ { # valid request "input": { "timestamp": "1330837567", "nonce": "00000000000000000000000000000001", "signature": "23de59b61ad7317e7f4c75a55c0970ad706d688624f30b468ec9f9fe7e9903d7", "body": "{\"hello\": \"world\"}", "http_verb": None, "http_resource_uri": None, "headers": None, "key": None }, "output": True }, { # valid request (with headers) "input": { "timestamp": "1330837567", "nonce": "00000000000000000000000000000002", "signature": "9f8c2c6d44e54a4a2fe921a734af5083dff27429529d9af8b359d3b6181ca39c", "body": "{\"hello\": \"world\"}", "http_verb": None, "http_resource_uri": None, "headers": { "foo": "bar" }, "key": None }, "output": True }, { # valid request (with with http_verb and http_resource_uri) "input": { "timestamp": "1330837567", "nonce": "00000000000000000000000000000003", "signature": "4f6415b3dfd306470617c14abc487807ba8e5bf26e0b57858bbbc9bb19de2923", "body": "{\"hello\": \"world\"}", "http_verb": "GET", "http_resource_uri": "/path?key=value#fragment", "headers": None, "key": None }, "output": True }, { # valid request (with key) "input": { "timestamp": "1330837567", "nonce": "00000000000000000000000000000004", "signature": "c8c9a91f00427f95a165eec6a7ccb0ad68d2655decb39aa3c66515b01b86eab4", "body": "{\"hello\": \"world\"}", "http_verb": None, "http_resource_uri": None, "headers": None, "key": "abc" }, "output": True }, { # forged signature "input": { "timestamp": "1330837567", "nonce": "00000000000000000000000000000005", "signature": "0000000000000000000000000000000000000000000000000000000000000000", "body": "{\"hello\": \"world\"}", "http_verb": None, "http_resource_uri": None, "headers": None, "key": None }, "output": False }, { # missing param "input": { "timestamp": "1330837567", "nonce": "00000000000000000000000000000006", "signature": None, "body": "{\"hello\": \"world\"}", "http_verb": None, "http_resource_uri": None, "headers": None, "key": None }, "output": False } ] # check for i, test in enumerate(auth_tests): print('Testing Input {}: {}'.format(i, test['input'])) # if the request was invalid, expect an AuthenticationException, otherwise # we should have no problems. if test['output'] is False: assert_raises(httpsign.AuthenticationException, httpsign.authenticate_request, test['input']['timestamp'], test['input']['nonce'], test['input']['body'], test['input']['signature'], "2", test['input']['http_verb'], test['input']['http_resource_uri'], test['input']['headers'], test['input']['key'], None) else: httpsign.authenticate_request( test['input']['timestamp'], test['input']['nonce'], test['input']['body'], test['input']['signature'], "2", test['input']['http_verb'], test['input']['http_resource_uri'], test['input']['headers'], test['input']['key'], None)
def test_authenticate_request(gn, gt, tm): # setup httpsign.initialize(HTTPSIGN_KEY) # mock _generate_nonce and _get_timestamp function return values gn.return_value = '000102030405060708090a0b0c0d0e0f' gt.return_value = '1330837567' tm.return_value = 1330837567.0 # setup values we want to test and results, input is what we provide to the # authenticate_request function, while output is a boolean that represents # if the request is valid or not. auth_tests = [ { # valid request "input": { "timestamp": "1330837567", "nonce": "00000000000000000000000000000001", "signature": "23de59b61ad7317e7f4c75a55c0970ad706d688624f30b468ec9f9fe7e9903d7", "body": "{\"hello\": \"world\"}", "http_verb": None, "http_resource_uri": None, "headers": None, "key": None }, "output": True }, { # valid request (with headers) "input": { "timestamp": "1330837567", "nonce": "00000000000000000000000000000002", "signature": "9f8c2c6d44e54a4a2fe921a734af5083dff27429529d9af8b359d3b6181ca39c", "body": "{\"hello\": \"world\"}", "http_verb": None, "http_resource_uri": None, "headers": {"foo": "bar"}, "key": None }, "output": True }, { # valid request (with with http_verb and http_resource_uri) "input": { "timestamp": "1330837567", "nonce": "00000000000000000000000000000003", "signature": "4f6415b3dfd306470617c14abc487807ba8e5bf26e0b57858bbbc9bb19de2923", "body": "{\"hello\": \"world\"}", "http_verb": "GET", "http_resource_uri": "/path?key=value#fragment", "headers": None, "key": None }, "output": True }, { # valid request (with key) "input": { "timestamp": "1330837567", "nonce": "00000000000000000000000000000004", "signature": "c8c9a91f00427f95a165eec6a7ccb0ad68d2655decb39aa3c66515b01b86eab4", "body": "{\"hello\": \"world\"}", "http_verb": None, "http_resource_uri": None, "headers": None, "key": "abc" }, "output": True }, { # forged signature "input": { "timestamp": "1330837567", "nonce": "00000000000000000000000000000005", "signature": "0000000000000000000000000000000000000000000000000000000000000000", "body": "{\"hello\": \"world\"}", "http_verb": None, "http_resource_uri": None, "headers": None, "key": None }, "output": False }, { # missing param "input": { "timestamp": "1330837567", "nonce": "00000000000000000000000000000006", "signature": None, "body": "{\"hello\": \"world\"}", "http_verb": None, "http_resource_uri": None, "headers": None, "key": None }, "output": False }] # check for i, test in enumerate(auth_tests): print 'Testing Input {}: {}'.format(i, test['input']) # if the request was invalid, expect an AuthenticationException, otherwise # we should have no problems. if test['output'] is False: assert_raises(httpsign.AuthenticationException, httpsign.authenticate_request, test['input']['timestamp'], test['input']['nonce'], test['input']['body'], test['input']['signature'], "2", test['input']['http_verb'], test['input']['http_resource_uri'], test['input']['headers'], test['input']['key'], None) else: httpsign.authenticate_request(test['input']['timestamp'], test['input']['nonce'], test['input']['body'], test['input']['signature'], "2", test['input']['http_verb'], test['input']['http_resource_uri'], test['input']['headers'], test['input']['key'], None)