mirror of
https://github.com/getredash/redash.git
synced 2026-05-11 00:00:57 -04:00
7847cf7d63
* explicitly look for a False under details['is_invitation_pending'] and not any falsey result, to avoid locking out invitations which were created before the Pending Invitation feature was introduced. Solves https://github.com/getredash/redash/issues/3297 * test that old invites (that do not have any is_invitation_pending flag set in their details object) are still acceptable
91 lines
3.8 KiB
Python
91 lines
3.8 KiB
Python
import time
|
|
|
|
import mock
|
|
from tests import BaseTestCase
|
|
|
|
from redash import settings
|
|
from redash.authentication.account import invite_token
|
|
from redash.models import User
|
|
|
|
|
|
class TestInvite(BaseTestCase):
|
|
def test_expired_invite_token(self):
|
|
|
|
with mock.patch('time.time') as patched_time:
|
|
patched_time.return_value = time.time() - (7 * 24 * 3600) - 10
|
|
token = invite_token(self.factory.user)
|
|
|
|
response = self.get_request('/invite/{}'.format(token), org=self.factory.org)
|
|
self.assertEqual(response.status_code, 400)
|
|
|
|
def test_invalid_invite_token(self):
|
|
response = self.get_request('/invite/badtoken', org=self.factory.org)
|
|
self.assertEqual(response.status_code, 400)
|
|
|
|
def test_valid_token(self):
|
|
user = self.factory.create_user(is_invitation_pending=True)
|
|
token = invite_token(user)
|
|
response = self.get_request('/invite/{}'.format(token), org=self.factory.org)
|
|
self.assertEqual(response.status_code, 200)
|
|
|
|
def test_already_active_user(self):
|
|
token = invite_token(self.factory.user)
|
|
self.post_request('/invite/{}'.format(token), data={'password': 'test1234'}, org=self.factory.org)
|
|
response = self.get_request('/invite/{}'.format(token), org=self.factory.org)
|
|
self.assertEqual(response.status_code, 400)
|
|
|
|
|
|
class TestInvitePost(BaseTestCase):
|
|
def test_empty_password(self):
|
|
token = invite_token(self.factory.user)
|
|
response = self.post_request('/invite/{}'.format(token), data={'password': ''}, org=self.factory.org)
|
|
self.assertEqual(response.status_code, 400)
|
|
|
|
def test_invalid_password(self):
|
|
token = invite_token(self.factory.user)
|
|
response = self.post_request('/invite/{}'.format(token), data={'password': '1234'}, org=self.factory.org)
|
|
self.assertEqual(response.status_code, 400)
|
|
|
|
def test_bad_token(self):
|
|
response = self.post_request('/invite/{}'.format('jdsnfkjdsnfkj'), data={'password': '1234'}, org=self.factory.org)
|
|
self.assertEqual(response.status_code, 400)
|
|
|
|
def test_user_invited_before_invitation_pending_check(self):
|
|
user = self.factory.create_user(details={})
|
|
token = invite_token(user)
|
|
response = self.post_request('/invite/{}'.format(token), data={'password': 'test1234'}, org=self.factory.org)
|
|
self.assertEqual(response.status_code, 302)
|
|
|
|
def test_already_active_user(self):
|
|
token = invite_token(self.factory.user)
|
|
self.post_request('/invite/{}'.format(token), data={'password': 'test1234'}, org=self.factory.org)
|
|
response = self.post_request('/invite/{}'.format(token), data={'password': 'test1234'}, org=self.factory.org)
|
|
self.assertEqual(response.status_code, 400)
|
|
|
|
def test_valid_password(self):
|
|
user = self.factory.create_user(is_invitation_pending=True)
|
|
token = invite_token(user)
|
|
password = 'test1234'
|
|
response = self.post_request('/invite/{}'.format(token), data={'password': password}, org=self.factory.org)
|
|
self.assertEqual(response.status_code, 302)
|
|
user = User.query.get(user.id)
|
|
self.assertTrue(user.verify_password(password))
|
|
self.assertFalse(user.is_invitation_pending)
|
|
|
|
|
|
class TestLogin(BaseTestCase):
|
|
def test_throttle_login(self):
|
|
# Extract the limit from settings (ex: '50/day')
|
|
limit = settings.THROTTLE_LOGIN_PATTERN.split('/')[0]
|
|
for _ in range(0, int(limit)):
|
|
self.get_request('/login', org=self.factory.org)
|
|
|
|
response = self.get_request('/login', org=self.factory.org)
|
|
self.assertEqual(response.status_code, 429)
|
|
|
|
|
|
class TestSession(BaseTestCase):
|
|
# really simple test just to trigger this route
|
|
def test_get(self):
|
|
self.make_request('get', '/default/api/session', user=self.factory.user, org=False)
|