Yfd dZddlZddlmZddlmZmZddlmZddl m Z ddl m Z ddl mZmZmZmZdd lmZmZmZdd lmZdd lmZdd lmZdd lmZddlmZedZ edZ!edZ"dZ#GddeZ$GddeZ%GddeZ&GddeZ'ee! dee dee" dGddeZ(ee d Gd!d"eZ)Gd#d$eZ*ee! deed% d&Gd'd(eZ+Gd)d*ej,ej-Z.Gd+d,eZ/Gd-d.ej,ej-Z0Gd/d0ej,ej-Z1Gd1d2ej,ej-Z2Gd3d4ej,ej-Z3Gd5d6eZ4dS)7z L{twisted.cred.strcred}. N)StringIO)SequenceType)skipIf) Interface)plugin)checkers credentialserrorstrcred)cred_anonymous cred_file cred_unix)usage) UserDatabase)FilePath) requireModule)TestCasecryptpwdspwdcd}|dtjDvr$|dz }|dtjDv$|S)zC Helper method to produce an auth type that doesn't exist. ThisPluginDoesNotExistcg|] }|j S)authType).0factorys P/var/www/html/env/lib/python3.11/site-packages/twisted/cred/test/test_strcred.py z&getInvalidAuthType..#s($_)r findCheckerFactories)invalidAuthTypes rgetInvalidAuthTyper%s/O (/(D(F(F   3 (/(D(F(F   r!ceZdZdZdZdS)PublicAPITestsct}|tjtj||tjtj|dS)z9 The description string cannot be empty. Nr% assertRaisesr InvalidAuthType makeCheckerfindCheckerFactoryselfiats rtest_emptyDescriptionz$PublicAPITests.test_emptyDescription+Q!"" '173FLLL '173MsSSSSSr!ct}|tjtj||tjtj|dS)z@ An unrecognized auth type raises an exception. Nr)r.s rtest_invalidAuthTypez#PublicAPITests.test_invalidAuthType3r2r!N)__name__ __module__ __qualname__r1r4rr!rr'r'*s:TTTTTTTTr!r'ceZdZdZdZdS)StrcredFunctionsTestscttj}tjtjD]}|||dS)zP L{strcred.findCheckerFactories} returns all available plugins. N)listr r#r getPluginsICheckerFactoryassertIn)r/availablePluginsplgs rtest_findCheckerFactoriesz/StrcredFunctionsTests.test_findCheckerFactories=sZ  < > >??$W%<== 1 1C MM#/ 0 0 0 0 1 1r!cj|tjdtjdS)z{ L{strcred.findCheckerFactory} returns the first plugin available for a given authentication type. fileN)assertIdenticalr r-rtheFileCheckerFactoryr/s rtest_findCheckerFactoryz-StrcredFunctionsTests.test_findCheckerFactoryEs9   &v . . 0O     r!N)r5r6r7rArGrr!rr9r9<s2111     r!r9c2eZdZdZdZdZdZdZdZdS)MemoryCheckerTestsctjdd|_tjdd|_tjdd|_tjdd|_t jd|_dS) Nadminasdfalicefoofoobarxyzzmemory:admin:asdf:alice:foo) r UsernamePasswordrKrMbadPassbadUserr r,checkerrFs rsetUpzMemoryCheckerTests.setUpPsi 1'6BB  1'5AA "3GXFF "3C>> *+HII r!c|tj|j|t j|jjdSz Verifies that strcred.makeChecker('memory') returns an object that implements the L{ICredentialsChecker} interface. N assertTruer ICredentialsChecker providedByrUr>r IUsernamePasswordcredentialInterfacesrFs rtest_isCheckerz!MemoryCheckerTests.test_isCheckerWK 4?? MMNNN k3T\5VWWWWWr!c\|tjtjddS)z An argument string which does not contain user:pass pairs (i.e., an odd number of ':' characters) raises an exception. z memory:a:b:cN)r*r InvalidAuthArgumentStringr,rFs rtest_badFormatArgStringz*MemoryCheckerTests.test_badFormatArgString_s3   -w/BN     r!crfd}jj|S); The checker works with valid credentials. cH|jjdSN assertEqualrKusernamerjr/s r _gotAvatarzAMemoryCheckerTests.test_memoryCheckerSucceeds.._gotAvatarm$   Xtz': ; ; ; ; ;r!rUrequestAvatarIdrK addCallbackr/rls` rtest_memoryCheckerSucceedsz-MemoryCheckerTests.test_memoryCheckerSucceedshD  < < < < <|++DJ77CCJOOOr!c|||j|jtjSz= The checker fails with an invalid username.  assertFailurerUrorTr UnauthorizedLoginrFs rtest_memoryCheckerFailsUsernamez2MemoryCheckerTests.test_memoryCheckerFailsUsernamer6!! L ( ( 6 68O   r!c|||j|jtjSz= The checker fails with an invalid password. rwrUrorSr rxrFs rtest_memoryCheckerFailsPasswordz2MemoryCheckerTests.test_memoryCheckerFailsPasswordzrzr!N) r5r6r7rVr_rcrrryr~rr!rrIrIOswJJJXXX   PPP        r!rIceZdZdZdZdS)AnonymousCheckerTestsctjd}|tj||tj|j dS)z Verifies that strcred.makeChecker('anonymous') returns an object that implements the L{ICredentialsChecker} interface. anonymousN) r r,rZr r[r\r>r IAnonymousr^)r/rUs rr_z$AnonymousCheckerTests.test_isCheckersW %k22 4??HHIII k,g.JKKKKKr!ctjd}|tj}fd}||S)z? We can log in anonymously using this checker. rcHtj|dSrg)rDr ANONYMOUS)avatarr/s rrlzEAnonymousCheckerTests.testAnonymousAccessSucceeds.._gotAvatars"  !3V < < < < > *622 %6xII%6xHH'89MM'8uEE#/77  ;#~~H&*j&6&6&8&8  "(  KK$//x' JJsJ(9 : : :  > JJtZ)< = = = = = > >r!c|tj|j|t j|jj|tj|j |t j|j jdS)z Verifies that strcred.makeChecker('unix') returns an object that implements the L{ICredentialsChecker} interface. N) rZr r[r\rUr>r r]r^rrFs rr_zUnixCheckerTests.test_isCheckers 4?? MMNNN k3T\5VWWW 4??@QRRSSS  )4+<+Q     r!crfd}jj|S)recH|jjdSrgrhrks rrlz=UnixCheckerTests.test_unixCheckerSucceeds.._gotAvatarrmr!rnrqs` rtest_unixCheckerSucceedsz)UnixCheckerTests.test_unixCheckerSucceedsrsr!crfd}jj|S)zD The checker works with valid L{bytes} credentials. cn|jjddS)Nutf-8)rirrjdecoderks rrlzBUnixCheckerTests.test_unixCheckerSucceedsBytes.._gotAvatars2   Xt'?'F'Fw'O'O P P P P Pr!)rrorrprqs` rtest_unixCheckerSucceedsBytesz.UnixCheckerTests.test_unixCheckerSucceedsBytessQ  Q Q Q Q Q 00AAMM    r!c|||j|jtjSrurvrFs rtest_unixCheckerFailsUsernamez.UnixCheckerTests.test_unixCheckerFailsUsernamerzr!c|||j|jtjS)zF The checker fails with an invalid L{bytes} username. )rwrrorr rxrFs r"test_unixCheckerFailsUsernameBytesz3UnixCheckerTests.test_unixCheckerFailsUsernameBytes9!!   - -d.? @ @  #   r!c|||j|jtjSr|r}rFs rtest_unixCheckerFailsPasswordz.UnixCheckerTests.test_unixCheckerFailsPasswordrzr!c|||j|jtjS)zF The checker fails with an invalid L{bytes} password. )rwrrorr rxrFs r"test_unixCheckerFailsPasswordBytesz3UnixCheckerTests.test_unixCheckerFailsPasswordBytes rr!N) r5r6r7rrrVr_rrrrrrrr!rrrs   E    >>><    PPP                  r!rz%Required module is unavailable: cryptceZdZdZdZdZdS) CryptTestsz9 L{crypt} has functions for encrypting password. c&d}dD]} t||}t|tr|d}n#t$rYUwxYwd}|t j|||t j||dD]\}tt|d}|sd}t||}t|tr|d}|dz}t j||} || t j| d| d} || t j||} || t j| d| d} || ^dS) z4 L{cred_unix.verifyCryptedPassword} sample password ^%$)Nabrz$1x1234) METHOD_SHA512 METHOD_SHA256 METHOD_MD5 METHOD_CRYPTNzinteresting password xyzblahfooincorrect) r isinstancebytesr TypeErrorrZrverifyCryptedPassword assertFalsegetattrencode) r/rsaltcryptedCorrectcryptedIncorrectmethod cryptMethodcryptedincorrectCryptedresults rtest_verifyCryptedPasswordz%CryptTests.test_verifyCryptedPasswords%)   D !&Xt!.mockCryptPs"++ r!rrrN)rrrrr)r/rrrs r!test_verifyCryptedPasswordOSErrorz,CryptTests.test_verifyCryptedPasswordOSErrorKsh    )Xt44 5'9--- 8RRSSSSSr!N)r5r6r7__doc__rrrr!rrrsB.%.%.%` T T T T Tr!rcBeZdZdZdZdZdZdZdZdZ dZ d Z d S) FileDBCheckerTestsz* C{--auth=file:...} file checker. ctjdd|_tjdd|_tjdd|_tjdd|_||_t|j dtj d |jz|_ dS) Nrrrrrrradmin:asdf alice:foo file:) r rRrKrMrSrTmktempfilenamer setContentr r,rUrFs rrVzFileDBCheckerTests.setUp^s 1(GDD  1(FCC "3HiHH "3D%@@   **+EFFF*7T]+BCC r!cd}tj|r$|dz }tj|$|S)Nz /DoesNotExistr")ospathexists)r/rs r _fakeFilenamez FileDBCheckerTests._fakeFilenamegsC"gnnX&&  OHgnnX&& r!c|tj|j|t j|jjdSrXrYrFs rr_z!FileDBCheckerTests.test_isCheckermr`r!crfd}jj|S)recH|jjdSrgrhrks rrlz?FileDBCheckerTests.test_fileCheckerSucceeds.._gotAvatarzrmr!rnrqs` rtest_fileCheckerSucceedsz+FileDBCheckerTests.test_fileCheckerSucceedsursr!c|||j|jtjSrurvrFs rtest_fileCheckerFailsUsernamez0FileDBCheckerTests.test_fileCheckerFailsUsernamerzr!c|||j|jtjSr|r}rFs rtest_fileCheckerFailsPasswordz0FileDBCheckerTests.test_fileCheckerFailsPasswordrzr!c|ttjd|ttjddS)z4 An empty filename raises an error. rCrN)r* ValueErrorr r,rFs rtest_failsWithEmptyFilenamez.FileDBCheckerTests.test_failsWithEmptyFilenames@ *g&96BBB *g&97CCCCCr!c>tjj}t}|tj_t jd|z|tj_|tj| dS)zt When the file auth plugin is given a file that doesn't exist, it should produce a warning. rN) rrE errorOutputrr r,rr>invalidFileWarninggetvalue)r/ oldOutput newOutputs rtest_warnWithBadFilenamez+FileDBCheckerTests.test_warnWithBadFilenamesy 3? JJ 6? '3Gd&8&8&:&::;;;6? '3 i2I4F4F4H4HIIIIIr!N) r5r6r7rrVrr_rrrrrrr!rrrYsDDD XXXPPP      DDD J J J J Jr!r cryptographyzcryptography is not availableceZdZdZdZdS)SSHCheckerTestsz Tests for the C{--auth=sshkey:...} checker. The majority of the tests for the ssh public key database checker are in L{twisted.conch.test.test_checkers.SSHPublicKeyCheckerTestCase}. ctjd}|tj||tj|j dS)z Verifies that strcred.makeChecker('sshkey') returns an object that implements the L{ICredentialsChecker} interface. sshkeyN) r r,rZr r[r\r>r ISSHPrivateKeyr^)r/ sshCheckers rr_zSSHCheckerTests.test_isCheckersW (22  4?? KKLLL k0*2QRRRRRr!N)r5r6r7rr_rr!rrrs2 SSSSSr!rceZdZdZdS) DummyOptionsz@ Simple options for testing L{strcred.AuthOptionMixin}. N)r5r6r7rrr!rrrsr!rc>eZdZdZdZdZdZdZdZdZ dZ d S) CheckerOptionsTestsc>t}|ddg|t|ddt}|gd|t|dddS)zu The C{--auth} command line creates a list in the Options instance and appends values to it. --authmemory credCheckers)rrrrN)r parseOptionsrilenr/optionss rtest_createsListz$CheckerOptionsTests.test_createsLists ..h1222 W^455q999..EEEFFF W^455q99999r!ct}t}|tj|jd|g|tj|jd|gdS)zx The C{--auth} command line raises an exception when it gets a parameter it doesn't understand. r--help-auth-typeN)rr%r*r UsageErrorr )r/rinvalidParameters rtest_invalidAuthErrorz)CheckerOptionsTests.test_invalidAuthErrors ...//   g2X?O4P        !1 2     r!ct}|gd|d}|t|tjd|t|tjd|tjd}|tjd}|tj ||tj || tj|j | tj|j dS)z The C{--auth} command line creates a dictionary mapping supported interfaces to the list of credentials checkers that support it. )rrrrcredInterfacesr rN) rr rir r rr]rZr r[r\r>r^)r/rchd chdAnonymous chdUserPasss rtest_createsDictionaryz*CheckerOptionsTests.test_createsDictionarys# ..HHHIII&' S!78991=== S!>?@@!DDD;1215 +78;  4?? MMNNN 4?? LLMMM k,l.OPPP k3[5UVVVVVr!ct}|gd||d|dtjdS)z When two C{--auth} arguments are passed along which support the same interface, a list with both is created. )rrrrr rN)rr rir r]rs r test_credInterfacesProvidesListsz4CheckerOptionsTests.test_credInterfacesProvidesListssc ..CCCDDD  N # $ %k&C D     r!cg}t}|D]7}||j|||j8dS)zG The list for C{--help-auth} does not duplicate items. N)r_checkerFactoriesForOptHelpAuth assertNotInrappend)r/ authTypesrcfs r!test_listDoesNotDisplayDuplicatesz5CheckerOptionsTests.test_listDoesNotDisplayDuplicatessh ..99;; * *B   R[) 4 4 4   R[ ) ) ) ) * *r!ct}t}||_|t|jdgt jD]/}||j | 0dS)zz The C{--help-auth} argument correctly displays all available authentication plugins, then exits. z --help-authN) rr authOutputr* SystemExitr r r#r>rr)r/ newStdoutrcheckerFactorys rtest_displaysListCorrectlyz.CheckerOptionsTests.test_displaysListCorrectlys JJ ..& *g&:]OLLL%:<< I IN MM.193E3E3G3G H H H H I Ir!cVt}t}||_|t|jddgt jjD]P}| r:| | | QdS)z The C{--help-auth-for} argument will correctly display the help file for a particular authentication plugin. rrCN) rrr&r*r'r rrEauthHelpstripr>r)r/r(rlines rtest_displaysHelpCorrectlyz.CheckerOptionsTests.test_displaysHelpCorrectlys JJ ..&  ,/A6.J   3< B BDzz|| B djjllI,>,>,@,@AAA B Br!ct}|tj|jddg}|t |ddS)z When the checker specified by C{--auth} raises an unexpected error, it should be caught and re-raised within a L{usage.UsageError}. rrCz,Unexpected error: 'file' requires a filenameN)rr*rrr ristr)r/rerrs rtest_unexpectedExceptionz,CheckerOptionsTests.test_unexpectedExceptionsY ..  g2Xv4F   S#QRRRRRr!N) r5r6r7rrrrr$r*r/r3rr!rrrs : : :   $WWW"    *** I I I B B B S S S S Sr!rceZdZejfZdS)OptionsForUsernamePasswordN)r5r6r7r r]supportedInterfacesrr!rr5r5)s&8:r!r5ceZdZejfZdS) OptionsForUsernameHashedPasswordN)r5r6r7r IUsernameHashedPasswordr6rr!rr8r8-s&>@r!r8ceZdZdZdS)OptionsSupportsAllInterfacesN)r5r6r7r6rr!rr;r;1sr!r;c6eZdZUgZeeeed<dS)OptionsSupportsNoInterfacesr6N)r5r6r7r6rrr__annotations__rr!rr=r=5s,57$y/277777r!r=cNeZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d S) LimitingInterfacesTestsa Tests functionality that allows an application to limit the credential interfaces it can support. For the purposes of this test, we use IUsernameHashedPassword, although this will never really be used by the command line. (I have, to date, not thought of a half-decent way for a user to specify a hash algorithm via the command-line. Nor do I think it's very useful.) I should note that, at first, this test is counter-intuitive, because we're using the checker with a pre-defined hash function as the 'bad' checker. See the documentation for L{twisted.cred.checkers.FilePasswordDB.hash} for more details. cr||_t|jd5}|ddddn #1swxYwYt j|j|_t j|j|j|_t j |_ dS)Nwbr)hash) rropenwriter FilePasswordDB goodChecker_hash badCheckerAllowAnonymousAccess anonChecker)r/fs rrVzLimitingInterfacesTests.setUpJs  $- & & 0! GG. / / / 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0#24=AA"1$-djQQQ#8::sAAAc|S)z> A dumb hash that doesn't really do anything. r)r/networkUsernamenetworkPasswordstoredPasswords rrHzLimitingInterfacesTests._hashRs r!c@t}||tj||tj|tj |j |j dS)zE The supportsInterface method behaves appropriately. N) r5rZsupportsInterfacer r]rrr*r UnsupportedInterfaces addCheckerrKrs rtest_supportsInterfacez.LimitingInterfacesTests.test_supportsInterfaceXs-.. 11+2OPPQQQ 22;3IJJKKK   )7+=t?O     r!ct}||tj||tjdS)z| The supportsInterface method behaves appropriately when the supportedInterfaces attribute is None. N)r;rZrRr r]rrs rtest_supportsAllInterfacesz2LimitingInterfacesTests.test_supportsAllInterfacescs[ /00 11+2OPPQQQ 11+2HIIJJJJJr!ct}tj}tj}||||||dS)zJ The supportsCheckerFactory method behaves appropriately. N)r5rrEr theAnonymousCheckerFactoryrZsupportsCheckerFactoryr)r/rfileCFanonCFs rtest_supportsCheckerFactoryz3LimitingInterfacesTests.test_supportsCheckerFactorylsg-..0: 66v>>??? 77??@@@@@r!ct}||j|jd}||d|d|j||dd|j|t |d|d|t |dddS)z When addChecker is called with a checker that implements at least one of the interfaces our application supports, it is successful. rrr r N)r5rTrGr6rDrir )r/rifaces rtest_canAddSupportedCheckerz3LimitingInterfacesTests.test_canAddSupportedCheckervs -..4+,,,+A. W%56u=a@$BRSSS W^4Q79IJJJ W%56u=>>BBB W^455q99999r!cxt}|tj|j|jdS)z~ When addChecker is called with a checker that does not implement any supported interfaces, it fails. N)r8r*r rSrTrIrs r#test_failOnAddingUnsupportedCheckerz;LimitingInterfacesTests.test_failOnAddingUnsupportedCheckers@ 344   )7+=t     r!ct}tjj}|t j|jd|gdS)zq The C{--auth} command line raises an exception when it gets a checker we don't support. rN)r=r rYrr*rrr )r/rrs rtest_unsupportedInterfaceErrorz6LimitingInterfacesTests.test_unsupportedInterfaceErrorsC .//!<E %*G,@8XBVWWWWWr!ct}|D]:}d}|jD]}||rd}|rt j;dS)z C{--help-auth} will only list checkers that purport to supply at least one of the credential interfaces our application can use. TFN)r5rr^rRr rS)r/rrinvalid interfaces rtest_helpAuthLimitsOutputz1LimitingInterfacesTests.test_helpAuthLimitsOutputs -..>>@@ 6 6GG$9 $ $ ,,Y77$#G 63555 6  6 6r!ct}d}tjD]}||s|}n||dt }||_|t|j ddg| tj | dS)z C{--help-auth-type} will display a warning if you get help for an authType that does not supply at least one of the credential interfaces our application can use. Nrr) r5r r#rZassertNotIdenticalrr&r*r'r r>notSupportedWarningr)r/rinvalidFactoryrr(s rtest_helpAuthTypeLimitsOutputz5LimitingInterfacesTests.test_helpAuthTypeLimitsOutputs -..355  G11':: !(  555JJ &  ,/A;.O    g193E3E3G3GHHHHHr!N)r5r6r7rrVrHrUrWr]r`rbrdrhrmrr!rr@r@9s ;;;    KKKAAA : : :   XXX 6 6 6IIIIIr!r@)5rriortypingrrunittestrzope.interfacertwistedr twisted.credr r r r twisted.pluginsr rrtwisted.pythonrtwisted.python.fakepwdrtwisted.python.filepathrtwisted.python.reflectrtwisted.trial.unittestrrrrr%r'r9rIrrrrrOptionsAuthOptionMixinrrr5r8r;r=r@rr!rr|s   !!!!!!!!$$$$$$>>>>>>>>>>>>@@@@@@@@@@ //////,,,,,,000000++++++ gmE}V   TTTTTXTTT$     H   &1 1 1 1 1 1 1 1 h/////H///.C566E 9::D788u u u u u xu u 98;:76u pE :;;@T@T@T@T@T@T@T<;@TFGJGJGJGJGJGJGJGJTC566MM. ) ))+JKKSSSSShSSLK76S"5='"9 jSjSjSjSjS(jSjSjSZ;;;;;0G;;;AAAAAu}g6MAAA5='2I88888%-1H888BIBIBIBIBIhBIBIBIBIBIr!