3d63143c38
* brands: add OIDC webfinger support for default application Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io>
124 lines
4.5 KiB
Python
124 lines
4.5 KiB
Python
"""Test brands"""
|
|
|
|
from django.urls import reverse
|
|
from rest_framework.test import APITestCase
|
|
|
|
from authentik.brands.api import Themes
|
|
from authentik.brands.models import Brand
|
|
from authentik.core.models import Application
|
|
from authentik.core.tests.utils import create_test_admin_user, create_test_brand
|
|
from authentik.lib.generators import generate_id
|
|
from authentik.providers.oauth2.models import OAuth2Provider
|
|
from authentik.providers.saml.models import SAMLProvider
|
|
|
|
|
|
class TestBrands(APITestCase):
|
|
"""Test brands"""
|
|
|
|
def test_current_brand(self):
|
|
"""Test Current brand API"""
|
|
brand = create_test_brand()
|
|
self.assertJSONEqual(
|
|
self.client.get(reverse("authentik_api:brand-current")).content.decode(),
|
|
{
|
|
"branding_logo": "/static/dist/assets/icons/icon_left_brand.svg",
|
|
"branding_favicon": "/static/dist/assets/icons/icon.png",
|
|
"branding_title": "authentik",
|
|
"matched_domain": brand.domain,
|
|
"ui_footer_links": [],
|
|
"ui_theme": Themes.AUTOMATIC,
|
|
"default_locale": "",
|
|
},
|
|
)
|
|
|
|
def test_brand_subdomain(self):
|
|
"""Test Current brand API"""
|
|
Brand.objects.all().delete()
|
|
Brand.objects.create(domain="bar.baz", branding_title="custom")
|
|
self.assertJSONEqual(
|
|
self.client.get(
|
|
reverse("authentik_api:brand-current"), HTTP_HOST="foo.bar.baz"
|
|
).content.decode(),
|
|
{
|
|
"branding_logo": "/static/dist/assets/icons/icon_left_brand.svg",
|
|
"branding_favicon": "/static/dist/assets/icons/icon.png",
|
|
"branding_title": "custom",
|
|
"matched_domain": "bar.baz",
|
|
"ui_footer_links": [],
|
|
"ui_theme": Themes.AUTOMATIC,
|
|
"default_locale": "",
|
|
},
|
|
)
|
|
|
|
def test_fallback(self):
|
|
"""Test fallback brand"""
|
|
Brand.objects.all().delete()
|
|
self.assertJSONEqual(
|
|
self.client.get(reverse("authentik_api:brand-current")).content.decode(),
|
|
{
|
|
"branding_logo": "/static/dist/assets/icons/icon_left_brand.svg",
|
|
"branding_favicon": "/static/dist/assets/icons/icon.png",
|
|
"branding_title": "authentik",
|
|
"matched_domain": "fallback",
|
|
"ui_footer_links": [],
|
|
"ui_theme": Themes.AUTOMATIC,
|
|
"default_locale": "",
|
|
},
|
|
)
|
|
|
|
def test_create_default_multiple(self):
|
|
"""Test attempted creation of multiple default brands"""
|
|
Brand.objects.create(
|
|
domain="foo",
|
|
default=True,
|
|
branding_title="custom",
|
|
)
|
|
user = create_test_admin_user()
|
|
self.client.force_login(user)
|
|
response = self.client.post(
|
|
reverse("authentik_api:brand-list"), data={"domain": "bar", "default": True}
|
|
)
|
|
self.assertEqual(response.status_code, 400)
|
|
|
|
def test_webfinger_no_app(self):
|
|
"""Test Webfinger"""
|
|
create_test_brand()
|
|
self.assertJSONEqual(
|
|
self.client.get(reverse("authentik_brands:webfinger")).content.decode(), {}
|
|
)
|
|
|
|
def test_webfinger_not_supported(self):
|
|
"""Test Webfinger"""
|
|
brand = create_test_brand()
|
|
provider = SAMLProvider.objects.create(
|
|
name=generate_id(),
|
|
)
|
|
app = Application.objects.create(name=generate_id(), slug=generate_id(), provider=provider)
|
|
brand.default_application = app
|
|
brand.save()
|
|
self.assertJSONEqual(
|
|
self.client.get(reverse("authentik_brands:webfinger")).content.decode(), {}
|
|
)
|
|
|
|
def test_webfinger_oidc(self):
|
|
"""Test Webfinger"""
|
|
brand = create_test_brand()
|
|
provider = OAuth2Provider.objects.create(
|
|
name=generate_id(),
|
|
)
|
|
app = Application.objects.create(name=generate_id(), slug=generate_id(), provider=provider)
|
|
brand.default_application = app
|
|
brand.save()
|
|
self.assertJSONEqual(
|
|
self.client.get(reverse("authentik_brands:webfinger")).content.decode(),
|
|
{
|
|
"links": [
|
|
{
|
|
"href": f"http://testserver/application/o/{app.slug}/",
|
|
"rel": "http://openid.net/specs/connect/1.0/issuer",
|
|
}
|
|
],
|
|
"subject": None,
|
|
},
|
|
)
|