canaille-globuzma/tests/test_password_flow.py
Eloi Rivard 0b7def73a3 black
2021-09-28 09:30:41 +02:00

35 lines
980 B
Python

from . import client_credentials
from canaille.models import Token
def test_password_flow(testclient, slapd_connection, user, client):
res = testclient.post(
"/oauth/token",
params=dict(
grant_type="password",
username=user.name,
password="correct horse battery staple",
scope="profile",
),
headers={"Authorization": f"Basic {client_credentials(client)}"},
status=200,
)
assert res.json["scope"] == "openid profile groups"
assert res.json["token_type"] == "Bearer"
access_token = res.json["access_token"]
token = Token.get(access_token, conn=slapd_connection)
assert token is not None
res = testclient.get(
"/oauth/userinfo",
headers={"Authorization": f"Bearer {access_token}"},
status=200,
)
assert {
"name": "John Doe",
"sub": "user",
"family_name": "Doe",
"groups": [],
} == res.json