def testAuthentication(self):
conf.use_test_db(True)
self.load_fixtures()
req = DummyReq('cartman', 'cartmans_pw', 'GET', '/storageauthtest/login/xmlrpc', '')
basic = BasicAccessControl(req)
self.assertTrue(basic.is_authentic())
req = DummyReq('cartman', 'cartmanspw', 'GET', '/storageauthtest/login/xmlrpc', '')
basic = BasicAccessControl(req)
self.assertFalse(basic.is_authentic())
req = DummyReq('*****@*****.**', 'nomailforme', 'GET', '/storageauthtest/login/xmlrpc', '')
basic = BasicAccessControl(req)
self.assertTrue(basic.is_authentic())
req = DummyReq('user%40nomail.box', 'nomailforme', 'GET', '/storageauthtest/login/xmlrpc', '')
basic = BasicAccessControl(req)
self.assertTrue(basic.is_authentic())
req = DummyReq('*****@*****.**', 'wrongpw', 'GET', '/storageauthtest/login/xmlrpc', '')
basic = BasicAccessControl(req)
self.assertFalse(basic.is_authentic())
req = DummyReq('user%40nomail.box', 'wrongpw', 'GET', '/storageauthtest/login/xmlrpc', '')
basic = BasicAccessControl(req)
self.assertFalse(basic.is_authentic())
def testAuthentication(self):
conf.use_test_db(True)
self.load_fixtures()
req = DummyReq('cartman', 'cartmans_pw', 'GET',
'/storageauthtest/login/xmlrpc', '')
basic = BasicAccessControl(req)
self.assertTrue(basic.is_authentic())
req = DummyReq('cartman', 'cartmanspw', 'GET',
'/storageauthtest/login/xmlrpc', '')
basic = BasicAccessControl(req)
self.assertFalse(basic.is_authentic())
req = DummyReq('*****@*****.**', 'nomailforme', 'GET',
'/storageauthtest/login/xmlrpc', '')
basic = BasicAccessControl(req)
self.assertTrue(basic.is_authentic())
req = DummyReq('user%40nomail.box', 'nomailforme', 'GET',
'/storageauthtest/login/xmlrpc', '')
basic = BasicAccessControl(req)
self.assertTrue(basic.is_authentic())
req = DummyReq('*****@*****.**', 'wrongpw', 'GET',
'/storageauthtest/login/xmlrpc', '')
basic = BasicAccessControl(req)
self.assertFalse(basic.is_authentic())
req = DummyReq('user%40nomail.box', 'wrongpw', 'GET',
'/storageauthtest/login/xmlrpc', '')
basic = BasicAccessControl(req)
self.assertFalse(basic.is_authentic())
def headerparserhandler(req):
from mod_python.apache import HTTP_UNAUTHORIZED, HTTP_FORBIDDEN, OK
control = BasicAccessControl(req)
# Check authentication
if not control.is_authentic():
req.err_headers_out['WWW-Authenticate'] = 'Basic realm="%s"' % control.options['realm']
return HTTP_UNAUTHORIZED
# Check if blocked or expired
if control.is_blocked():
return HTTP_FORBIDDEN
return OK
