globuzma/canaille-globuzma
1
0
Fork 0
forked from Github-Mirrors/canaille
Code Pull requests Activity

Unit tests for token revocation

Browse source
This commit is contained in:
Éloi Rivard 2020-08-25 11:39:06 +02:00
parent 3ebddf4817
commit 56448cbf19
3 changed files with 8 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
tests/test_authorization_code_flow.py
View file

@ -138,8 +138,9 @@ def test_refresh_token(testclient, slapd_connection, logged_user, client):
)
assert 200 == res.status_code
access_token = res.json["access_token"]
token = Token.get(access_token, conn=slapd_connection)
assert token is not None
old_token = Token.get(access_token, conn=slapd_connection)
assert old_token is not None
assert not old_token.revoked
res = testclient.post(
"/oauth/token",
@ -150,8 +151,10 @@ def test_refresh_token(testclient, slapd_connection, logged_user, client):
)
assert 200 == res.status_code
access_token = res.json["access_token"]
token = Token.get(access_token, conn=slapd_connection)
assert token is not None
new_token = Token.get(access_token, conn=slapd_connection)
assert new_token is not None
old_token.reload(slapd_connection)
assert old_token.revoked
res = testclient.get("/api/me", headers={"Authorization": f"Bearer {access_token}"})
assert 200 == res.status_code

1
web/models.py
View file

@ -1,5 +1,4 @@
import ldap
import time
import datetime
from authlib.common.encoding import json_loads, json_dumps
from authlib.oauth2.rfc6749 import (

2
web/oauth2utils.py
View file

@ -135,7 +135,7 @@ class RefreshTokenGrant(_RefreshTokenGrant):
return User.get(credential.oauthSubject)
def revoke_old_credential(self, credential):
credential.revoke = True
credential.revoked = True
credential.save()