158 lines
4.8 KiB
Python
158 lines
4.8 KiB
Python
# This file is part of Tryton. The COPYRIGHT file at the top level of this
|
|
# repository contains the full copyright notices and license terms.
|
|
import os
|
|
import unittest
|
|
from trytond.tests.test_tryton import activate_module, with_transaction
|
|
from trytond.pool import Pool
|
|
from trytond.res.user import bcrypt
|
|
from trytond.config import config
|
|
from trytond.error import UserError
|
|
|
|
|
|
class UserTestCase(unittest.TestCase):
|
|
'Test User'
|
|
|
|
@classmethod
|
|
def setUpClass(cls):
|
|
activate_module('res')
|
|
|
|
def setUp(self):
|
|
methods = config.get('session', 'authentications')
|
|
config.set('session', 'authentications', 'password')
|
|
self.addCleanup(config.set, 'session', 'authentications', methods)
|
|
|
|
length = config.get('password', 'length')
|
|
config.set('password', 'length', 4)
|
|
self.addCleanup(config.set, 'password', 'length', length)
|
|
|
|
forbidden = config.get('password', 'forbidden', default='')
|
|
config.set(
|
|
'password', 'forbidden',
|
|
os.path.join(os.path.dirname(__file__), 'forbidden.txt'))
|
|
self.addCleanup(config.set, 'password', 'forbidden', forbidden)
|
|
|
|
entropy = config.get('password', 'entropy')
|
|
config.set('password', 'entropy', 0.9)
|
|
self.addCleanup(config.set, 'password', 'entropy', entropy)
|
|
|
|
def create_user(self, login, password, hash_method=None):
|
|
pool = Pool()
|
|
User = pool.get('res.user')
|
|
|
|
user, = User.create([{
|
|
'name': login,
|
|
'login': login,
|
|
}])
|
|
if hash_method:
|
|
hash = getattr(User, 'hash_' + hash_method)
|
|
User.write([user], {
|
|
'password_hash': hash(password),
|
|
})
|
|
else:
|
|
User.write([user], {
|
|
'password': password,
|
|
})
|
|
return user
|
|
|
|
def check_user(self, login, password):
|
|
pool = Pool()
|
|
User = pool.get('res.user')
|
|
|
|
user, = User.search([('login', '=', login)])
|
|
user_id = User.get_login(login, {
|
|
'password': password,
|
|
})
|
|
self.assertEqual(user_id, user.id)
|
|
|
|
bad_user_id = User.get_login(login, {
|
|
'password': password + 'wrong',
|
|
})
|
|
self.assertFalse(bad_user_id)
|
|
|
|
@with_transaction()
|
|
def test_test_hash(self):
|
|
'Test default hash password'
|
|
self.create_user('user', '12345')
|
|
self.check_user('user', '12345')
|
|
|
|
@with_transaction()
|
|
def test_test_sha1(self):
|
|
'Test sha1 password'
|
|
self.create_user('user', '12345', 'sha1')
|
|
self.check_user('user', '12345')
|
|
|
|
@unittest.skipIf(bcrypt is None, 'requires bcrypt')
|
|
@with_transaction()
|
|
def test_test_bcrypt(self):
|
|
'Test bcrypt password'
|
|
self.create_user('user', '12345', 'bcrypt')
|
|
self.check_user('user', '12345')
|
|
|
|
@with_transaction()
|
|
def test_read_password_hash(self):
|
|
"Test password_hash can not be read"
|
|
user = self.create_user('user', '12345')
|
|
self.assertIsNone(user.password_hash)
|
|
|
|
@with_transaction()
|
|
def test_validate_password_length(self):
|
|
"Test validate password length"
|
|
pool = Pool()
|
|
User = pool.get('res.user')
|
|
|
|
with self.assertRaises(UserError):
|
|
User.validate_password(u'123', [])
|
|
User.validate_password(u'1234', [])
|
|
|
|
@with_transaction()
|
|
def test_validate_password_forbidden(self):
|
|
"Test validate password forbidden"
|
|
pool = Pool()
|
|
User = pool.get('res.user')
|
|
|
|
with self.assertRaises(UserError):
|
|
User.validate_password(u'password', [])
|
|
|
|
@with_transaction()
|
|
def test_validate_password_entropy(self):
|
|
"Test validate password entropy"
|
|
pool = Pool()
|
|
User = pool.get('res.user')
|
|
|
|
with self.assertRaises(UserError):
|
|
User.validate_password('aaaaaa', [])
|
|
|
|
@with_transaction()
|
|
def test_validate_password_name(self):
|
|
"Test validate password name"
|
|
pool = Pool()
|
|
User = pool.get('res.user')
|
|
user = User(name='name')
|
|
|
|
with self.assertRaises(UserError):
|
|
User.validate_password('name', [user])
|
|
|
|
@with_transaction()
|
|
def test_validate_password_login(self):
|
|
"Test validate password login"
|
|
pool = Pool()
|
|
User = pool.get('res.user')
|
|
user = User(login='login')
|
|
|
|
with self.assertRaises(UserError):
|
|
User.validate_password('login', [user])
|
|
|
|
@with_transaction()
|
|
def test_validate_password_email(self):
|
|
"Test validate password email"
|
|
pool = Pool()
|
|
User = pool.get('res.user')
|
|
user = User(email='email')
|
|
|
|
with self.assertRaises(UserError):
|
|
User.validate_password('email', [user])
|
|
|
|
|
|
def suite():
|
|
return unittest.TestLoader().loadTestsFromTestCase(UserTestCase)
|