8c4dab7399
* fix missing name in tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix redirect lost with saml source Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io>
61 lines
2.3 KiB
Python
61 lines
2.3 KiB
Python
"""SAML Source tests"""
|
|
|
|
from defusedxml import ElementTree
|
|
from django.test import RequestFactory, TestCase
|
|
from lxml import etree # nosec
|
|
|
|
from authentik.core.tests.utils import create_test_cert, create_test_flow
|
|
from authentik.lib.generators import generate_id
|
|
from authentik.lib.xml import lxml_from_string
|
|
from authentik.sources.saml.models import SAMLSource
|
|
from authentik.sources.saml.processors.metadata import MetadataProcessor
|
|
|
|
|
|
class TestMetadataProcessor(TestCase):
|
|
"""Test MetadataProcessor"""
|
|
|
|
def setUp(self):
|
|
self.factory = RequestFactory()
|
|
self.source = SAMLSource.objects.create(
|
|
name=generate_id(),
|
|
slug=generate_id(),
|
|
issuer="authentik",
|
|
signing_kp=create_test_cert(),
|
|
encryption_kp=create_test_cert(),
|
|
pre_authentication_flow=create_test_flow(),
|
|
)
|
|
|
|
def test_metadata_schema(self):
|
|
"""Test Metadata generation being valid"""
|
|
request = self.factory.get("/")
|
|
xml = MetadataProcessor(self.source, request).build_entity_descriptor()
|
|
metadata = lxml_from_string(xml)
|
|
|
|
schema = etree.XMLSchema(
|
|
etree.parse("schemas/saml-schema-metadata-2.0.xsd", parser=etree.XMLParser()) # nosec
|
|
)
|
|
self.assertTrue(schema.validate(metadata))
|
|
|
|
def test_metadata_consistent(self):
|
|
"""Test Metadata generation being consistent (xml stays the same)"""
|
|
request = self.factory.get("/")
|
|
xml_a = MetadataProcessor(self.source, request).build_entity_descriptor()
|
|
xml_b = MetadataProcessor(self.source, request).build_entity_descriptor()
|
|
self.assertEqual(xml_a, xml_b)
|
|
|
|
def test_metadata(self):
|
|
"""Test Metadata generation being valid"""
|
|
request = self.factory.get("/")
|
|
xml = MetadataProcessor(self.source, request).build_entity_descriptor()
|
|
metadata = ElementTree.fromstring(xml)
|
|
self.assertEqual(metadata.attrib["entityID"], "authentik")
|
|
|
|
def test_metadata_without_signature(self):
|
|
"""Test Metadata generation being valid"""
|
|
self.source.signing_kp = None
|
|
self.source.save()
|
|
request = self.factory.get("/")
|
|
xml = MetadataProcessor(self.source, request).build_entity_descriptor()
|
|
metadata = ElementTree.fromstring(xml)
|
|
self.assertEqual(metadata.attrib["entityID"], "authentik")
|