a4dc6d13b5
* events: rename audit to events * policies/expression: log expression exceptions as event * policies/expression: add ExpressionPolicy Model to event when possible * lib/expressions: ensure syntax errors are logged too * lib: fix lint error * policies: add execution_logging field * core: add property mapping tests * policies/expression: add full test * policies/expression: fix attribute name * policies: add execution_logging * web: fix imports * root: update swagger * policies: use dataclass instead of dict for types * events: add support for dataclass as event param * events: add special keys which are never cleaned * policies: add tests for process, don't clean full cache * admin: create event when new version is seen * events: move utils to separate file * admin: add tests for admin tasks * events: add .set_user method to ensure users have correct attributes set * core: add test for property_mapping errors with user and request
57 lines
2.2 KiB
Python
57 lines
2.2 KiB
Python
"""authentik core property mapping tests"""
|
|
from django.test import RequestFactory, TestCase
|
|
from guardian.shortcuts import get_anonymous_user
|
|
|
|
from authentik.core.exceptions import PropertyMappingExpressionException
|
|
from authentik.core.models import PropertyMapping
|
|
from authentik.events.models import Event, EventAction
|
|
|
|
|
|
class TestPropertyMappings(TestCase):
|
|
"""authentik core property mapping tests"""
|
|
|
|
def setUp(self) -> None:
|
|
super().setUp()
|
|
self.factory = RequestFactory()
|
|
|
|
def test_expression(self):
|
|
"""Test expression"""
|
|
mapping = PropertyMapping.objects.create(
|
|
name="test", expression="return 'test'"
|
|
)
|
|
self.assertEqual(mapping.evaluate(None, None), "test")
|
|
|
|
def test_expression_syntax(self):
|
|
"""Test expression syntax error"""
|
|
mapping = PropertyMapping.objects.create(name="test", expression="-")
|
|
with self.assertRaises(PropertyMappingExpressionException):
|
|
mapping.evaluate(None, None)
|
|
|
|
def test_expression_error_general(self):
|
|
"""Test expression error"""
|
|
expr = "return aaa"
|
|
mapping = PropertyMapping.objects.create(name="test", expression=expr)
|
|
with self.assertRaises(NameError):
|
|
mapping.evaluate(None, None)
|
|
events = Event.objects.filter(
|
|
action=EventAction.PROPERTY_MAPPING_EXCEPTION, context__expression=expr
|
|
)
|
|
self.assertTrue(events.exists())
|
|
self.assertEqual(len(events), 1)
|
|
|
|
def test_expression_error_extended(self):
|
|
"""Test expression error (with user and http request"""
|
|
expr = "return aaa"
|
|
request = self.factory.get("/")
|
|
mapping = PropertyMapping.objects.create(name="test", expression=expr)
|
|
with self.assertRaises(NameError):
|
|
mapping.evaluate(get_anonymous_user(), request)
|
|
events = Event.objects.filter(
|
|
action=EventAction.PROPERTY_MAPPING_EXCEPTION, context__expression=expr
|
|
)
|
|
self.assertTrue(events.exists())
|
|
self.assertEqual(len(events), 1)
|
|
event = events.first()
|
|
self.assertEqual(event.user["username"], "AnonymousUser")
|
|
self.assertEqual(event.client_ip, "127.0.0.1")
|