U  W[÷fã@s>dZddlmZmZddlZddlmZddlmZddl m Z m Z m Z m Z ddlmZmZmZddlmZdd lmZdd lmZdd lmZdd lmZz ddlZWnek rÀdZYnXz ddlZWnek rædZYnXz ddlZWnek rdZYnXd d„Z Gdd„dej!ƒZ"Gdd„dej!ƒZ#Gdd„dej!ƒZ$Gdd„dej!ƒZ%Gdd„dej!ƒZ&Gdd„dej!ƒZ'Gdd„dej!ƒZ(Gdd„dej!ƒZ)Gdd „d ej*e j+ƒZ,Gd!d"„d"ej!ƒZ-Gd#d$„d$ej*e j+ƒZ.Gd%d&„d&ej*e j+ƒZ/Gd'd(„d(ej*e j+ƒZ0Gd)d*„d*ej*e j+ƒZ1Gd+d,„d,ej!ƒZ2dS)-z L{twisted.cred.strcred}. é)Úabsolute_importÚdivisionN)Úplugin)Úunittest)Ú credentialsÚcheckersÚerrorÚstrcred)Ú cred_fileÚcred_anonymousÚ cred_unix)Úusage)ÚNativeStringIO)ÚFilePath)Ú UserDatabase)Ú requireModulecCs(d}|dd„t ¡Dƒkr$|d7}q|S)zC Helper method to produce an auth type that doesn't exist. ZThisPluginDoesNotExistcSsg|] }|j‘qS©)ÚauthType)Ú.0Úfactoryrrú@/usr/lib/python3/dist-packages/twisted/cred/test/test_strcred.pyÚ -sz&getInvalidAuthType..Ú_)r ÚfindCheckerFactories)ZinvalidAuthTyperrrÚgetInvalidAuthType's ÿ rc@seZdZdd„Zdd„ZdS)ÚPublicAPITestscCs.tƒ}| tjtj|¡| tjtj|¡dS)z9 The description string cannot be empty. N©rÚ assertRaisesr ZInvalidAuthTypeÚ makeCheckerÚfindCheckerFactory©ÚselfZiatrrrÚtest_emptyDescription5sÿz$PublicAPITests.test_emptyDescriptioncCs.tƒ}| tjtj|¡| tjtj|¡dS)z@ An unrecognized auth type raises an exception. Nrr rrrÚtest_invalidAuthType?sÿz#PublicAPITests.test_invalidAuthTypeN)Ú__name__Ú __module__Ú __qualname__r"r#rrrrr3s rc@seZdZdd„Zdd„ZdS)ÚStrcredFunctionsTestscCs.tt ¡ƒ}t tj¡D]}| ||¡qdS)zP L{strcred.findCheckerFactories} returns all available plugins. N)Úlistr rrZ getPluginsZICheckerFactoryÚassertIn)r!ZavailablePluginsZplgrrrÚtest_findCheckerFactoriesLs z/StrcredFunctionsTests.test_findCheckerFactoriescCs| t d¡tj¡dS)z{ L{strcred.findCheckerFactory} returns the first plugin available for a given authentication type. ÚfileN)ÚassertIdenticalr rr ÚtheFileCheckerFactory©r!rrrÚtest_findCheckerFactoryUs ÿz-StrcredFunctionsTests.test_findCheckerFactoryN)r$r%r&r*r/rrrrr'Js r'c@s<eZdZdd„Zdd„Zdd„Zdd„Zd d „Zd d „Zd S)ÚMemoryCheckerTestscCsHt dd¡|_t dd¡|_t dd¡|_t dd¡|_t d¡|_dS) NÚadminÚasdfÚaliceÚfooÚfoobarÚxÚyzzmemory:admin:asdf:alice:foo) rÚUsernamePasswordr1r3ÚbadPassÚbadUserr rÚcheckerr.rrrÚsetUpas zMemoryCheckerTests.setUpcCs*| tj |j¡¡| tj|jj¡dS©z Verifies that strcred.makeChecker('memory') returns an object that implements the L{ICredentialsChecker} interface. N© Ú assertTruerÚICredentialsCheckerÚ providedByr;r)rÚIUsernamePasswordÚcredentialInterfacesr.rrrÚtest_isCheckerisÿz!MemoryCheckerTests.test_isCheckercCs| tjtjd¡dS)z An argument string which does not contain user:pass pairs (i.e., an odd number of ':' characters) raises an exception. z memory:a:b:cN)rr ZInvalidAuthArgumentStringrr.rrrÚtest_badFormatArgStringssÿz*MemoryCheckerTests.test_badFormatArgStringcs ‡fdd„}ˆj ˆj¡ |¡S)ú; The checker works with valid credentials. csˆ |ˆjj¡dS©N©Ú assertEqualr1Úusername©rJr.rrÚ _gotAvatar€szAMemoryCheckerTests.test_memoryCheckerSucceeds.._gotAvatar©r;ÚrequestAvatarIdr1Ú addCallback©r!rLrr.rÚtest_memoryCheckerSucceeds|s  ÿþz-MemoryCheckerTests.test_memoryCheckerSucceedscCs| |j |j¡tj¡S©z= The checker fails with an invalid username. ©Ú assertFailurer;rNr:rÚUnauthorizedLoginr.rrrÚtest_memoryCheckerFailsUsername‡sÿz2MemoryCheckerTests.test_memoryCheckerFailsUsernamecCs| |j |j¡tj¡S©z= The checker fails with an invalid password. ©rTr;rNr9rrUr.rrrÚtest_memoryCheckerFailsPasswordsÿz2MemoryCheckerTests.test_memoryCheckerFailsPasswordN) r$r%r&r<rDrErQrVrYrrrrr0_s    r0c@seZdZdd„Zdd„ZdS)ÚAnonymousCheckerTestscCs0t d¡}| tj |¡¡| tj|j ¡dS)z Verifies that strcred.makeChecker('anonymous') returns an object that implements the L{ICredentialsChecker} interface. Ú anonymousN) r rr?rr@rAr)rÚ IAnonymousrC)r!r;rrrrDšs z$AnonymousCheckerTests.test_isCheckercs.t d¡}| t ¡¡}‡fdd„}| |¡S)z? We can log in anonymously using this checker. r[csˆ tj|¡dSrG)r,rZ ANONYMOUS)Zavatarr.rrrLªszEAnonymousCheckerTests.testAnonymousAccessSucceeds.._gotAvatar)r rrNrZ AnonymousrO)r!r;ZrequestrLrr.rÚtestAnonymousAccessSucceeds¤s  z1AnonymousCheckerTests.testAnonymousAccessSucceedsN)r$r%r&rDr]rrrrrZ˜s rZc@sÈeZdZdddœZdd„Zdd„Zdd „Zd d „Zd d „Zdd„Z dd„Z dd„Z dd„Z de eefkrÄgZe dfedfedffD]\ZZedkr‚eeg7Zq‚eee e e e fD]Zdd e¡e_q®dS)ÚUnixCheckerTestsr2r4)r1r3c Cs*t |t |j|d¡dddddddf ¡S)NúF/riŸ†ééÿÿÿÿ)ÚspwdZ struct_spwdÚcryptÚusers)r!rJrrrÚ_spwd_getspnam·sþzUnixCheckerTests._spwd_getspnamc Csðt dd¡|_t dd¡|_t dd¡|_t dd¡|_t d¡|_t d d ¡|_ t d d ¡|_ t d d ¡|_ t dd¡|_ t d¡|_ trØtƒ}|j ¡D]*\}}| |t |d¡dd|d|d¡qœ| td|j¡trì| td|j¡dS)Nr1r2r3r4r5r6r7Úunixóadminóasdfóaliceófooófoobaróxóyzr_ièz/home/z/bin/shÚgetpwnamZgetspnam)rr8r1r3r9r:r rr;Ú adminBytesZ aliceBytesÚ badPassBytesÚ badUserBytesÚ checkerBytesÚpwdrrdÚitemsZaddUserrcZpatchrnrbre)r!ZdatabaserJÚpasswordrrrr<½s2   þzUnixCheckerTests.setUpcCsP| tj |j¡¡| tj|jj¡| tj |j ¡¡| tj|j j¡dS)z‹ Verifies that strcred.makeChecker('unix') returns an object that implements the L{ICredentialsChecker} interface. N) r?rr@rAr;r)rrBrCrrr.rrrrDÖsÿ ÿÿzUnixCheckerTests.test_isCheckercs ‡fdd„}ˆj ˆj¡ |¡S)rFcsˆ |ˆjj¡dSrGrHrKr.rrrLèsz=UnixCheckerTests.test_unixCheckerSucceeds.._gotAvatarrMrPrr.rÚtest_unixCheckerSucceedsäs  ÿþz)UnixCheckerTests.test_unixCheckerSucceedscs ‡fdd„}ˆj ˆj¡ |¡S)zD The checker works with valid L{bytes} credentials. csˆ |ˆjj d¡¡dS)Núutf-8)rIrorJÚdecoderKr.rrrLós ÿzBUnixCheckerTests.test_unixCheckerSucceedsBytes.._gotAvatar)rrrNrorOrPrr.rÚtest_unixCheckerSucceedsBytesïs  ÿþz.UnixCheckerTests.test_unixCheckerSucceedsBytescCs| |j |j¡tj¡SrRrSr.rrrÚtest_unixCheckerFailsUsernameûsÿz.UnixCheckerTests.test_unixCheckerFailsUsernamecCs| |j |j¡tj¡S)zF The checker fails with an invalid L{bytes} username. )rTrrrNrqrrUr.rrrÚ"test_unixCheckerFailsUsernameBytess  ÿÿz3UnixCheckerTests.test_unixCheckerFailsUsernameBytescCs| |j |j¡tj¡SrWrXr.rrrÚtest_unixCheckerFailsPassword sÿz.UnixCheckerTests.test_unixCheckerFailsPasswordcCs| |j |j¡tj¡S)zF The checker fails with an invalid L{bytes} password. )rTrrrNrprrUr.rrrÚ"test_unixCheckerFailsPasswordBytess  ÿÿz3UnixCheckerTests.test_unixCheckerFailsPasswordBytesNrsrbrcz$Required module(s) are unavailable: z, )r$r%r&rdrer<rDrvryrzr{r|r}rsrbrcZ availabilityÚmoduleÚnameÚmethodÚjoinÚskiprrrrr^°s6þ   ûÿr^c@s eZdZdZesdZdd„ZdS)Ú CryptTestsz9 L{crypt} has functions for encrypting password. z%Required module is unavailable: cryptc Csd}dD]V}zt ||¡}Wntk r4YqYnXd}| t ||¡¡| t ||¡¡qdD]ž}tt|dƒ}|szqdd}t ||¡}|d}t ||¡} | | ¡t | d¡| d¡¡} | | ¡t ||¡} | | ¡t | d¡| d¡¡} | | ¡qddS) z4 L{cred_unix.verifyCryptedPassword} zsample password ^%$)NZabz$1x1234)Z METHOD_SHA512Z METHOD_SHA256Z METHOD_MD5Z METHOD_CRYPTNzinteresting password xyzZblahfooincorrectrw)rcÚ TypeErrorr?r ZverifyCryptedPasswordÚ assertFalseÚgetattrÚencode) r!ruZsaltZcryptedCorrectZcryptedIncorrectr€Z cryptMethodZcryptedZincorrectCryptedÚresultrrrÚtest_verifyCryptedPassword1s@  ÿ ÿ     ÿ    ÿz%CryptTests.test_verifyCryptedPasswordN)r$r%r&Ú__doc__rcr‚r‰rrrrrƒ*srƒc@sPeZdZdZdd„Zdd„Zdd„Zdd „Zd d „Zd d „Z dd„Z dd„Z dS)ÚFileDBCheckerTestsz* C{--auth=file:...} file checker. cCsht dd¡|_t dd¡|_t dd¡|_t dd¡|_| ¡|_t|jƒ  d¡t   d |j¡|_ dS) Nrgrhrirjrkrlrmóadmin:asdf alice:foo úfile:) rr8r1r3r9r:ÚmktempÚfilenamerZ setContentr rr;r.rrrr<ds zFileDBCheckerTests.setUpcCsd}tj |¡r|d7}q|S)Nz /DoesNotExistr)ÚosÚpathÚexists)r!rrrrÚ _fakeFilenamens  z FileDBCheckerTests._fakeFilenamecCs*| tj |j¡¡| tj|jj¡dSr=r>r.rrrrDusÿz!FileDBCheckerTests.test_isCheckercs ‡fdd„}ˆj ˆj¡ |¡S)rFcsˆ |ˆjj¡dSrGrHrKr.rrrLƒsz?FileDBCheckerTests.test_fileCheckerSucceeds.._gotAvatarrMrPrr.rÚtest_fileCheckerSucceedss  ÿþz+FileDBCheckerTests.test_fileCheckerSucceedscCs| |j |j¡tj¡SrRrSr.rrrÚtest_fileCheckerFailsUsernameŠsÿz0FileDBCheckerTests.test_fileCheckerFailsUsernamecCs| |j |j¡tj¡SrWrXr.rrrÚtest_fileCheckerFailsPassword’sÿz0FileDBCheckerTests.test_fileCheckerFailsPasswordcCs$| ttjd¡| ttjd¡dS)z4 An empty filename raises an error. r+rN)rÚ ValueErrorr rr.rrrÚtest_failsWithEmptyFilenamešsz.FileDBCheckerTests.test_failsWithEmptyFilenamecCsFtjj}tƒ}|tj_t d| ¡¡|tj_| tj|  ¡¡dS)zt When the file auth plugin is given a file that doesn't exist, it should produce a warning. rN) r r-Z errorOutputrr rr“r)ZinvalidFileWarningÚgetvalue)r!Z oldOutputZ newOutputrrrÚtest_warnWithBadFilename¢s z+FileDBCheckerTests.test_warnWithBadFilenameN) r$r%r&rŠr<r“rDr”r•r–r˜ršrrrrr‹_s   r‹c@s<eZdZdZdZedƒdkr dZedƒdkr0dZdd„ZdS) ÚSSHCheckerTestszÈ Tests for the C{--auth=sshkey:...} checker. The majority of the tests for the ssh public key database checker are in L{twisted.conch.test.test_checkers.SSHPublicKeyCheckerTestCase}. NZ cryptographyzcryptography is not availableZpyasn1zpyasn1 is not availablecCs0t d¡}| tj |¡¡| tj|j ¡dS)z Verifies that strcred.makeChecker('sshkey') returns an object that implements the L{ICredentialsChecker} interface. ZsshkeyN) r rr?rr@rAr)rZISSHPrivateKeyrC)r!Z sshCheckerrrrrDÀs  ÿzSSHCheckerTests.test_isChecker)r$r%r&rŠr‚rrDrrrrr›°s  r›c@seZdZdZdS)Ú DummyOptionsz@ Simple options for testing L{strcred.AuthOptionMixin}. N)r$r%r&rŠrrrrrœÌsrœc@sLeZdZdd„Zdd„Zdd„Zdd„Zd d „Zd d „Zd d„Z dd„Z dS)ÚCheckerOptionsTestscCsXtƒ}| ddg¡| t|dƒd¡tƒ}| ddddg¡| t|dƒd¡dS)zu The C{--auth} command line creates a list in the Options instance and appends values to it. ú--authÚmemoryÚ credCheckersééN)rœÚ parseOptionsrIÚlen©r!ÚoptionsrrrÚtest_createsListÕs z$CheckerOptionsTests.test_createsListcCs<tƒ}tƒ}| tj|jd|g¡| tj|jd|g¡dS)zx The C{--auth} command line raises an exception when it gets a parameter it doesn't understand. ržú--help-auth-typeN)rœrrr Ú UsageErrorr£)r!r¦ZinvalidParameterrrrÚtest_invalidAuthErrorâsþþz)CheckerOptionsTests.test_invalidAuthErrorcCs°tƒ}| ddddg¡|d}| t|tjƒd¡| t|tjƒd¡|tjd}|tjd}| tj   |¡¡| tj   |¡¡|  tj|j ¡|  tj|j ¡dS)z› The C{--auth} command line creates a dictionary mapping supported interfaces to the list of credentials checkers that support it. ržrŸr[ÚcredInterfacesr¡rN) rœr£rIr¤rr\rBr?rr@rAr)rC)r!r¦ZchdZ chdAnonymousZ chdUserPassrrrÚtest_createsDictionaryósÿÿz*CheckerOptionsTests.test_createsDictionarycCs6tƒ}| ddddg¡| |d|dtj¡dS)z† When two C{--auth} arguments are passed along which support the same interface, a list with both is created. ržrŸrfr r«N)rœr£rIrrBr¥rrrÚ test_credInterfacesProvidesListss  þz4CheckerOptionsTests.test_credInterfacesProvidesListscCs6g}tƒ}| ¡D]}| |j|¡| |j¡qdS)zG The list for C{--help-auth} does not duplicate items. N)rœÚ_checkerFactoriesForOptHelpAuthZ assertNotInrÚappend)r!Z authTypesr¦ZcfrrrÚ!test_listDoesNotDisplayDuplicatess  z5CheckerOptionsTests.test_listDoesNotDisplayDuplicatescCsHtƒ}tƒ}||_| t|jdg¡t ¡D]}| |j |  ¡¡q,dS)zz The C{--help-auth} argument correctly displays all available authentication plugins, then exits. z --help-authN) rrœÚ authOutputrÚ SystemExitr£r rr)rr™)r!Ú newStdoutr¦ZcheckerFactoryrrrÚtest_displaysListCorrectlys  z.CheckerOptionsTests.test_displaysListCorrectlycCsTtƒ}tƒ}||_| t|jddg¡tjjD] }|  ¡r.|  |  ¡|  ¡¡q.dS)z† The C{--help-auth-for} argument will correctly display the help file for a particular authentication plugin. r¨r+N) rrœr±rr²r£r r-ZauthHelpÚstripr)r™)r!r³r¦ÚlinerrrÚtest_displaysHelpCorrectly+sÿ z.CheckerOptionsTests.test_displaysHelpCorrectlycCs0tƒ}| tj|jddg¡}| t|ƒd¡dS)z When the checker specified by C{--auth} raises an unexpected error, it should be caught and re-raised within a L{usage.UsageError}. ržr+z,Unexpected error: 'file' requires a filenameN)rœrr r©r£rIÚstr)r!r¦ÚerrrrrÚtest_unexpectedException:s ÿ ÿz,CheckerOptionsTests.test_unexpectedExceptionN) r$r%r&r§rªr¬r­r°r´r·rºrrrrrÓs    rc@seZdZejfZdS)ÚOptionsForUsernamePasswordN)r$r%r&rrBÚsupportedInterfacesrrrrr»Gsr»c@seZdZejfZdS)Ú OptionsForUsernameHashedPasswordN)r$r%r&rZIUsernameHashedPasswordr¼rrrrr½Lsr½c@seZdZdZdS)ÚOptionsSupportsAllInterfacesN©r$r%r&r¼rrrrr¾Qsr¾c@seZdZgZdS)ÚOptionsSupportsNoInterfacesNr¿rrrrrÀVsrÀc@s`eZdZdZdd„Zdd„Zdd„Zdd „Zd d „Zd d „Z dd„Z dd„Z dd„Z dd„Z dS)ÚLimitingInterfacesTestsa‘ Tests functionality that allows an application to limit the credential interfaces it can support. For the purposes of this test, we use IUsernameHashedPassword, although this will never really be used by the command line. (I have, to date, not thought of a half-decent way for a user to specify a hash algorithm via the command-line. Nor do I think it's very useful.) I should note that, at first, this test is counter-intuitive, because we're using the checker with a pre-defined hash function as the 'bad' checker. See the documentation for L{twisted.cred.checkers.FilePasswordDB.hash} for more details. c Cs\| ¡|_t|jdƒ}| d¡W5QRXt |j¡|_tj|j|jd|_t  ¡|_ dS)NÚwbrŒ)Úhash) rŽrÚopenÚwriterZFilePasswordDBÚ goodCheckerÚ_hashÚ badCheckerZAllowAnonymousAccessÚ anonChecker)r!Úfrrrr<ls ÿzLimitingInterfacesTests.setUpcCs|S)z> A dumb hash that doesn't really do anything. r)r!ZnetworkUsernameZnetworkPasswordZstoredPasswordrrrrÇvszLimitingInterfacesTests._hashcCsBtƒ}| | tj¡¡| | tj¡¡| tj |j |j ¡dS)zE The supportsInterface method behaves appropriately. N) r»r?ÚsupportsInterfacerrBr…r\rr ÚUnsupportedInterfacesÚ addCheckerrÉr¥rrrÚtest_supportsInterface}s ÿ ÿþz.LimitingInterfacesTests.test_supportsInterfacecCs.tƒ}| | tj¡¡| | tj¡¡dS)z| The supportsInterface method behaves appropriately when the supportedInterfaces attribute is None. N)r¾r?rËrrBr\r¥rrrÚtest_supportsAllInterfaces‹s ÿ ÿz2LimitingInterfacesTests.test_supportsAllInterfacescCs6tƒ}tj}tj}| | |¡¡| | |¡¡dS)zJ The supportsCheckerFactory method behaves appropriately. N)r»r r-r ÚtheAnonymousCheckerFactoryr?ÚsupportsCheckerFactoryr…)r!r¦ZfileCFZanonCFrrrÚtest_supportsCheckerFactory—s z3LimitingInterfacesTests.test_supportsCheckerFactorycCs|tƒ}| |j¡|jd}| |d|d|j¡| |dd|j¡| t|d|ƒd¡| t|dƒd¡dS)z When addChecker is called with a checker that implements at least one of the interfaces our application supports, it is successful. rr«r r¡N)r»rÍrÆr¼r,rIr¤)r!r¦ZifacerrrÚtest_canAddSupportedChecker¢s  ÿz3LimitingInterfacesTests.test_canAddSupportedCheckercCstƒ}| tj|j|j¡dS)z~ When addChecker is called with a checker that does not implement any supported interfaces, it fails. N)r½rr rÌrÍrÈr¥rrrÚ#test_failOnAddingUnsupportedChecker³s ÿz;LimitingInterfacesTests.test_failOnAddingUnsupportedCheckercCs(tƒ}tjj}| tj|jd|g¡dS)zq The C{--auth} command line raises an exception when it gets a checker we don't support. ržN)rÀr rÐrrr r©r£)r!r¦rrrrÚtest_unsupportedInterfaceError½sþz6LimitingInterfacesTests.test_unsupportedInterfaceErrorcCsBtƒ}| ¡D].}d}|jD]}| |¡rd}q|rt ¡‚qdS)z¢ C{--help-auth} will only list checkers that purport to supply at least one of the credential interfaces our application can use. TFN)r»r®rCrËr rÌ)r!r¦rZinvalidZ interfacerrrÚtest_helpAuthLimitsOutputÉs   z1LimitingInterfacesTests.test_helpAuthLimitsOutputcCsltƒ}d}t ¡D]}| |¡s|}q*q| |d¡tƒ}||_| t|j ddg¡|  tj |  ¡¡dS)zÄ C{--help-auth-type} will display a warning if you get help for an authType that does not supply at least one of the credential interfaces our application can use. Nr¨r[) r»r rrÑZassertNotIdenticalrr±rr²r£r)ZnotSupportedWarningr™)r!r¦ZinvalidFactoryrr³rrrÚtest_helpAuthTypeLimitsOutputÙs    ÿz5LimitingInterfacesTests.test_helpAuthTypeLimitsOutputN)r$r%r&rŠr<rÇrÎrÏrÒrÓrÔrÕrÖr×rrrrrÁ[s     rÁ)3rŠZ __future__rrrZtwistedrZ twisted.trialrZ twisted.credrrrr Ztwisted.pluginsr r r Ztwisted.pythonr Ztwisted.python.compatrZtwisted.python.filepathrZtwisted.python.fakepwdrZtwisted.python.reflectrrcÚ ImportErrorrsrbrZTestCaserr'r0rZr^rƒr‹r›ZOptionsZAuthOptionMixinrœrr»r½r¾rÀrÁrrrrÚsN              9z5Qt