mirror of
https://github.com/warp-tech/warpgate.git
synced 2024-09-20 14:56:18 +08:00
79 lines
2.1 KiB
Python
79 lines
2.1 KiB
Python
|
import requests
|
||
|
|
import pyotp
|
||
|
|
|
||
|
|
|
||
|
|
from .util import wait_port
|
||
|
|
|
||
|
|
|
||
|
|
class TestHTTPUserAuthOTP:
|
||
|
|
def test_auth_otp_success(
|
||
|
|
self,
|
||
|
|
http_common_wg_port,
|
||
|
|
otp_key_base32,
|
||
|
|
):
|
||
|
|
wait_port(http_common_wg_port, recv=False)
|
||
|
|
session = requests.Session()
|
||
|
|
session.verify = False
|
||
|
|
url = f'https://localhost:{http_common_wg_port}'
|
||
|
|
|
||
|
|
totp = pyotp.TOTP(otp_key_base32)
|
||
|
|
|
||
|
|
response = session.post(
|
||
|
|
f'{url}/@warpgate/api/auth/login',
|
||
|
|
json={
|
||
|
|
'username': 'userwithotp',
|
||
|
|
'password': '123',
|
||
|
|
},
|
||
|
|
)
|
||
|
|
assert response.status_code // 100 != 2
|
||
|
|
|
||
|
|
response = session.get(
|
||
|
|
f'{url}/some/path?a=b&warpgate-target=echo&c=d', allow_redirects=False
|
||
|
|
)
|
||
|
|
assert response.status_code // 100 != 2
|
||
|
|
|
||
|
|
response = session.post(
|
||
|
|
f'{url}/@warpgate/api/auth/otp',
|
||
|
|
json={
|
||
|
|
'otp': totp.now(),
|
||
|
|
},
|
||
|
|
)
|
||
|
|
assert response.status_code // 100 == 2
|
||
|
|
|
||
|
|
response = session.get(
|
||
|
|
f'{url}/some/path?a=b&warpgate-target=echo&c=d', allow_redirects=False
|
||
|
|
)
|
||
|
|
assert response.status_code // 100 == 2
|
||
|
|
assert response.json()['path'] == '/some/path'
|
||
|
|
|
||
|
|
def test_auth_otp_fail(
|
||
|
|
self,
|
||
|
|
http_common_wg_port,
|
||
|
|
):
|
||
|
|
wait_port(http_common_wg_port, recv=False)
|
||
|
|
session = requests.Session()
|
||
|
|
session.verify = False
|
||
|
|
url = f'https://localhost:{http_common_wg_port}'
|
||
|
|
|
||
|
|
response = session.post(
|
||
|
|
f'{url}/@warpgate/api/auth/login',
|
||
|
|
json={
|
||
|
|
'username': 'userwithotp',
|
||
|
|
'password': '123',
|
||
|
|
},
|
||
|
|
)
|
||
|
|
assert response.status_code // 100 != 2
|
||
|
|
|
||
|
|
response = session.post(
|
||
|
|
f'{url}/@warpgate/api/auth/otp',
|
||
|
|
json={
|
||
|
|
'otp': '00000000',
|
||
|
|
},
|
||
|
|
)
|
||
|
|
assert response.status_code // 100 != 2
|
||
|
|
|
||
|
|
response = session.get(
|
||
|
|
f'{url}/some/path?a=b&warpgate-target=echo&c=d', allow_redirects=False
|
||
|
|
)
|
||
|
|
assert response.status_code // 100 != 2
|