canaille-globuzma/tests/test_password_flow.py
2021-06-03 17:24:36 +02:00

30 lines
941 B
Python

from . import client_credentials
from canaille.models import Token
def test_password_flow(testclient, slapd_connection, user, client):
res = testclient.post(
"/oauth/token",
params=dict(
grant_type="password",
username=user.name,
password="correct horse battery staple",
scope="profile",
),
headers={"Authorization": f"Basic {client_credentials(client)}"},
status=200,
)
assert res.json["scope"] == "openid profile groups"
assert res.json["token_type"] == "Bearer"
access_token = res.json["access_token"]
token = Token.get(access_token, conn=slapd_connection)
assert token is not None
res = testclient.get(
"/oauth/userinfo",
headers={"Authorization": f"Bearer {access_token}"},
status=200,
)
assert {"name": "John Doe", "sub": "user", "family_name": "Doe", "groups": []} == res.json