You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
120 lines
4.0 KiB
120 lines
4.0 KiB
"""Test module for KeycloakUMA."""
|
|
import re
|
|
from typing import Tuple
|
|
|
|
import pytest
|
|
|
|
from keycloak import KeycloakOpenID
|
|
from keycloak.connection import ConnectionManager
|
|
from keycloak.exceptions import (
|
|
KeycloakDeleteError,
|
|
KeycloakGetError,
|
|
KeycloakPostError,
|
|
KeycloakPutError,
|
|
)
|
|
from keycloak.keycloak_uma import KeycloakUMA
|
|
|
|
|
|
def test_keycloak_uma_init(env):
|
|
"""Test KeycloakUMA's init method.
|
|
|
|
:param env: Environment fixture
|
|
:type env: KeycloakTestEnv
|
|
"""
|
|
uma = KeycloakUMA(
|
|
server_url=f"http://{env.KEYCLOAK_HOST}:{env.KEYCLOAK_PORT}", realm_name="master"
|
|
)
|
|
|
|
assert uma.realm_name == "master"
|
|
assert isinstance(uma.connection, ConnectionManager)
|
|
# should initially be empty
|
|
assert uma._well_known is None
|
|
assert uma.uma_well_known
|
|
# should be cached after first reference
|
|
assert uma._well_known is not None
|
|
|
|
|
|
def test_uma_well_known(uma: KeycloakUMA):
|
|
"""Test the well_known method.
|
|
|
|
:param uma: Keycloak UMA client
|
|
:type uma: KeycloakUMA
|
|
"""
|
|
res = uma.uma_well_known
|
|
assert res is not None
|
|
assert res != dict()
|
|
for key in ["resource_registration_endpoint"]:
|
|
assert key in res
|
|
|
|
|
|
def test_uma_resource_sets(
|
|
uma: KeycloakUMA, oid_with_credentials_authz: Tuple[KeycloakOpenID, str, str]
|
|
):
|
|
"""Test resource sets.
|
|
|
|
:param uma: Keycloak UMA client
|
|
:type uma: KeycloakUMA
|
|
:param oid_with_credentials_authz: Keycloak OpenID client with pre-configured user credentials
|
|
:type oid_with_credentials_authz: Tuple[KeycloakOpenID, str, str]
|
|
"""
|
|
oid, _, _ = oid_with_credentials_authz
|
|
|
|
token = oid.token(grant_type="client_credentials")
|
|
access_token = token["access_token"]
|
|
|
|
# Check that only the default resource is present
|
|
resource_sets = uma.resource_set_list(access_token)
|
|
resource_set_list = list(resource_sets)
|
|
assert len(resource_set_list) == 1, resource_set_list
|
|
assert resource_set_list[0]["name"] == "Default Resource", resource_set_list[0]["name"]
|
|
|
|
# Test create resource set
|
|
resource_to_create = {
|
|
"name": "mytest",
|
|
"scopes": ["test:read", "test:write"],
|
|
"type": "urn:test",
|
|
}
|
|
created_resource = uma.resource_set_create(access_token, resource_to_create)
|
|
assert created_resource
|
|
assert created_resource["_id"], created_resource
|
|
assert set(resource_to_create).issubset(set(created_resource)), created_resource
|
|
|
|
# Test create the same resource set
|
|
with pytest.raises(KeycloakPostError) as err:
|
|
uma.resource_set_create(access_token, resource_to_create)
|
|
assert err.match(
|
|
re.escape(
|
|
'409: b\'{"error":"invalid_request","error_description":'
|
|
'"Resource with name [mytest] already exists."}\''
|
|
)
|
|
)
|
|
|
|
# Test get resource set
|
|
latest_resource = uma.resource_set_read(access_token, created_resource["_id"])
|
|
assert latest_resource["name"] == created_resource["name"]
|
|
|
|
# Test update resource set
|
|
latest_resource["name"] = "New Resource Name"
|
|
res = uma.resource_set_update(access_token, created_resource["_id"], latest_resource)
|
|
assert res == dict(), res
|
|
updated_resource = uma.resource_set_read(access_token, created_resource["_id"])
|
|
assert updated_resource["name"] == "New Resource Name"
|
|
|
|
# Test update resource set fail
|
|
with pytest.raises(KeycloakPutError) as err:
|
|
uma.resource_set_update(
|
|
token=access_token, resource_id=created_resource["_id"], payload={"wrong": "payload"}
|
|
)
|
|
assert err.match('400: b\'{"error":"Unrecognized field')
|
|
|
|
# Test delete resource set
|
|
res = uma.resource_set_delete(token=access_token, resource_id=created_resource["_id"])
|
|
assert res == dict(), res
|
|
with pytest.raises(KeycloakGetError) as err:
|
|
uma.resource_set_read(access_token, created_resource["_id"])
|
|
err.match("404: b''")
|
|
|
|
# Test delete fail
|
|
with pytest.raises(KeycloakDeleteError) as err:
|
|
uma.resource_set_delete(token=access_token, resource_id=created_resource["_id"])
|
|
assert err.match("404: b''")
|