darkhelm/notifications-api
1
0
Fork 0
mirror of https://github.com/GSA/notifications-api.git synced 2026-07-19 14:04:20 -04:00
Code Issues Packages Projects Releases Wiki Activity

Removed one more utils reference in the README and fixed directory name

Browse Source 
Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This commit is contained in:
Carlo Costino
2024-05-16 10:41:49 -04:00
parent 99edc88197
commit ac4ebacfeb
40 changed files with 0 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

61
tests/notifications_utils/test_request_header_authentication.py Normal file
View File

@@ -0,0 +1,61 @@
import pytest
from werkzeug.test import EnvironBuilder
from notifications_utils.request_helper import NotifyRequest, _check_proxy_header_secret
@pytest.mark.parametrize(
"header,secrets,expected",
[
(
{"X-Custom-Forwarder": "right_key"},
["right_key", "old_key"],
(True, "Key used: 1"),
),
({"X-Custom-Forwarder": "right_key"}, ["right_key"], (True, "Key used: 1")),
({"X-Custom-Forwarder": "right_key"}, ["right_key", ""], (True, "Key used: 1")),
({"My-New-Header": "right_key"}, ["right_key", ""], (True, "Key used: 1")),
({"X-Custom-Forwarder": "right_key"}, ["", "right_key"], (True, "Key used: 2")),
(
{"X-Custom-Forwarder": "right_key"},
["", "old_key", "right_key"],
(True, "Key used: 3"),
),
(
{"X-Custom-Forwarder": ""},
["right_key", "old_key"],
(False, "Header exists but is empty"),
),
(
{"X-Custom-Forwarder": "right_key"},
["", None],
(False, "Secrets are not configured"),
),
(
{"X-Custom-Forwarder": "wrong_key"},
["right_key", "old_key"],
(False, "Header didn't match any keys"),
),
],
)
def test_request_header_authorization(header, secrets, expected):
builder = EnvironBuilder()
builder.headers.extend(header)
request = NotifyRequest(builder.get_environ())
res = _check_proxy_header_secret(request, secrets, list(header.keys())[0])
assert res == expected
@pytest.mark.parametrize(
"secrets,expected",
[
(["old_key", "right_key"], (False, "Header missing")),
],
)
def test_request_header_authorization_missing_header(secrets, expected):
builder = EnvironBuilder()
request = NotifyRequest(builder.get_environ())
res = _check_proxy_header_secret(request, secrets)
assert res == expected