82 lines
2.8 KiB
Python
82 lines
2.8 KiB
Python
"""Password flow tests"""
|
|
from django.urls.base import reverse
|
|
from django.utils.encoding import force_str
|
|
from rest_framework.test import APITestCase
|
|
|
|
from authentik.core.models import User
|
|
from authentik.flows.challenge import ChallengeTypes
|
|
from authentik.flows.models import Flow, FlowDesignation, FlowStageBinding
|
|
from authentik.policies.password.models import PasswordPolicy
|
|
from authentik.stages.prompt.models import FieldTypes, Prompt, PromptStage
|
|
|
|
|
|
class TestPasswordPolicyFlow(APITestCase):
|
|
"""Test Password Policy"""
|
|
|
|
def setUp(self) -> None:
|
|
self.user = User.objects.create(username="unittest", email="test@beryju.org")
|
|
|
|
self.flow = Flow.objects.create(
|
|
name="test-prompt",
|
|
slug="test-prompt",
|
|
designation=FlowDesignation.AUTHENTICATION,
|
|
)
|
|
password_prompt = Prompt.objects.create(
|
|
field_key="password",
|
|
label="PASSWORD_LABEL",
|
|
type=FieldTypes.PASSWORD,
|
|
required=True,
|
|
placeholder="PASSWORD_PLACEHOLDER",
|
|
)
|
|
|
|
self.policy = PasswordPolicy.objects.create(
|
|
name="test_true",
|
|
amount_uppercase=1,
|
|
amount_lowercase=2,
|
|
amount_symbols=3,
|
|
length_min=3,
|
|
error_message="test message",
|
|
)
|
|
stage = PromptStage.objects.create(name="prompt-stage")
|
|
stage.validation_policies.set([self.policy])
|
|
stage.fields.set(
|
|
[
|
|
password_prompt,
|
|
]
|
|
)
|
|
FlowStageBinding.objects.create(target=self.flow, stage=stage, order=2)
|
|
|
|
def test_prompt_data(self):
|
|
"""Test policy attached to a prompt stage"""
|
|
response = self.client.post(
|
|
reverse("authentik_api:flow-executor", kwargs={"flow_slug": self.flow.slug}),
|
|
{"password": "akadmin"},
|
|
)
|
|
self.assertEqual(response.status_code, 200)
|
|
self.assertJSONEqual(
|
|
force_str(response.content),
|
|
{
|
|
"component": "ak-stage-prompt",
|
|
"fields": [
|
|
{
|
|
"field_key": "password",
|
|
"label": "PASSWORD_LABEL",
|
|
"order": 0,
|
|
"placeholder": "PASSWORD_PLACEHOLDER",
|
|
"required": True,
|
|
"type": "password",
|
|
"sub_text": "",
|
|
}
|
|
],
|
|
"flow_info": {
|
|
"background": self.flow.background_url,
|
|
"cancel_url": reverse("authentik_flows:cancel"),
|
|
"title": "",
|
|
},
|
|
"response_errors": {
|
|
"non_field_errors": [{"code": "invalid", "string": self.policy.error_message}]
|
|
},
|
|
"type": ChallengeTypes.NATIVE.value,
|
|
},
|
|
)
|