mirror of
https://github.com/GSA/notifications-api.git
synced 2026-06-24 17:29:30 -04:00
99edc88197
This changeset pulls in all of the notification_utils code directly into the API and removes it as an external dependency. We are doing this to cut down on operational maintenance of the project and will begin removing parts of it no longer needed for the API. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
62 lines
1.9 KiB
Python
62 lines
1.9 KiB
Python
import pytest
|
|
from werkzeug.test import EnvironBuilder
|
|
|
|
from notifications_utils.request_helper import NotifyRequest, _check_proxy_header_secret
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
"header,secrets,expected",
|
|
[
|
|
(
|
|
{"X-Custom-Forwarder": "right_key"},
|
|
["right_key", "old_key"],
|
|
(True, "Key used: 1"),
|
|
),
|
|
({"X-Custom-Forwarder": "right_key"}, ["right_key"], (True, "Key used: 1")),
|
|
({"X-Custom-Forwarder": "right_key"}, ["right_key", ""], (True, "Key used: 1")),
|
|
({"My-New-Header": "right_key"}, ["right_key", ""], (True, "Key used: 1")),
|
|
({"X-Custom-Forwarder": "right_key"}, ["", "right_key"], (True, "Key used: 2")),
|
|
(
|
|
{"X-Custom-Forwarder": "right_key"},
|
|
["", "old_key", "right_key"],
|
|
(True, "Key used: 3"),
|
|
),
|
|
(
|
|
{"X-Custom-Forwarder": ""},
|
|
["right_key", "old_key"],
|
|
(False, "Header exists but is empty"),
|
|
),
|
|
(
|
|
{"X-Custom-Forwarder": "right_key"},
|
|
["", None],
|
|
(False, "Secrets are not configured"),
|
|
),
|
|
(
|
|
{"X-Custom-Forwarder": "wrong_key"},
|
|
["right_key", "old_key"],
|
|
(False, "Header didn't match any keys"),
|
|
),
|
|
],
|
|
)
|
|
def test_request_header_authorization(header, secrets, expected):
|
|
builder = EnvironBuilder()
|
|
builder.headers.extend(header)
|
|
request = NotifyRequest(builder.get_environ())
|
|
|
|
res = _check_proxy_header_secret(request, secrets, list(header.keys())[0])
|
|
assert res == expected
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
"secrets,expected",
|
|
[
|
|
(["old_key", "right_key"], (False, "Header missing")),
|
|
],
|
|
)
|
|
def test_request_header_authorization_missing_header(secrets, expected):
|
|
builder = EnvironBuilder()
|
|
request = NotifyRequest(builder.get_environ())
|
|
|
|
res = _check_proxy_header_secret(request, secrets)
|
|
assert res == expected
|