Coverage for tests/test_auth.py: 100%

1import base64 7 ctx1abcdefg

2import time 7 ctx1abcdefg

3from pathlib import Path 7 ctx1abcdefg

4 

5import pytest 7 ctx1abcdefg

6 

7from fastapi_cloud_cli.utils.auth import ( 7 ctx1abcdefg

8 AuthConfig, 

9 Identity, 

10 _is_jwt_expired, 

11 write_auth_config, 

12) 

13 

14from .utils import create_jwt_token 7 ctx1abcdefg

15 

16 

17def test_is_jwt_expired_with_valid_token() -> None: 7 ctx1abcdefg

18 future_exp = int(time.time()) + 3600 7 ctx1CDEFGHI

19 

20 token = create_jwt_token({"exp": future_exp, "sub": "test_user"}) 7 ctx1CDEFGHI

21 

22 assert not _is_jwt_expired(token) 7 ctx1CDEFGHI

23 

24 

25def test_is_jwt_expired_with_expired_token() -> None: 7 ctx1abcdefg

26 past_exp = int(time.time()) - 3600 7 ctx1JKLMNOP

27 token = create_jwt_token({"exp": past_exp, "sub": "test_user"}) 7 ctx1JKLMNOP

28 

29 assert _is_jwt_expired(token) 7 ctx1JKLMNOP

30 

31 

32def test_is_jwt_expired_with_no_exp_claim() -> None: 7 ctx1abcdefg

33 token = create_jwt_token({"sub": "test_user"}) 7 ctx1456789!

34 

35 # Tokens without exp claim should be considered valid 

36 assert not _is_jwt_expired(token) 7 ctx1456789!

37 

38 

39@pytest.mark.parametrize( 7 ctx1abcdefg

40 "token", 

41 [ 

42 "not.a.valid.jwt.token", 

43 "only.two", 

44 "invalid", 

45 "", 

46 "...", 

47 ], 

48) 

49def test_is_jwt_expired_with_malformed_token(token: str) -> None: 7 ctx1abcdefg

50 assert _is_jwt_expired(token) 7 ctx2cbdbebfbgbhbib

51 

52 

53def test_is_jwt_expired_with_invalid_base64() -> None: 7 ctx1abcdefg

54 token = "header.!!!invalid_signature!!!.signature" 7 ctx1#$%'()*

55 assert _is_jwt_expired(token) 7 ctx1#$%'()*

56 

57 

58def test_is_jwt_expired_with_invalid_json() -> None: 7 ctx1abcdefg

59 header_encoded = base64.urlsafe_b64encode(b'{"alg":"HS256"}').decode().rstrip("=") 7 ctx1hijklmn

60 payload_encoded = base64.urlsafe_b64encode(b"{invalid json}").decode().rstrip("=") 7 ctx1hijklmn

61 signature = base64.urlsafe_b64encode(b"signature").decode().rstrip("=") 7 ctx1hijklmn

62 token = f"{header_encoded}.{payload_encoded}.{signature}" 7 ctx1hijklmn

63 

64 assert _is_jwt_expired(token) 7 ctx1hijklmn

65 

66 

67def test_is_jwt_expired_edge_case_exact_expiration() -> None: 7 ctx1abcdefg

68 current_time = int(time.time()) 7 ctx1QRSTUVW

69 token = create_jwt_token({"exp": current_time, "sub": "test_user"}) 7 ctx1QRSTUVW

70 

71 assert _is_jwt_expired(token) 7 ctx1QRSTUVW

72 

73 

74def test_is_jwt_expired_edge_case_one_second_before() -> None: 7 ctx1abcdefg

75 current_time = int(time.time()) 7 ctx1XYZ0123

76 token = create_jwt_token({"exp": current_time + 1, "sub": "test_user"}) 7 ctx1XYZ0123

77 

78 assert not _is_jwt_expired(token) 7 ctx1XYZ0123

79 

80 

81def test_is_user_token_expired_with_no_token(temp_auth_config: Path) -> None: 7 ctx1abcdefg

82 assert not temp_auth_config.exists() 7 ctx1+,-./:;

83 assert Identity().is_user_token_expired() 7 ctx1+,-./:;

84 

85 

86def test_is_logged_in_with_no_token(temp_auth_config: Path) -> None: 7 ctx1abcdefg

87 assert not temp_auth_config.exists() 7 ctx1=?@[]^_

88 assert not Identity().is_logged_in() 7 ctx1=?@[]^_

89 

90 

91def test_is_logged_in_with_valid_token(temp_auth_config: Path) -> None: 7 ctx1abcdefg

92 future_exp = int(time.time()) + 3600 7 ctx1opqrstu

93 token = create_jwt_token({"exp": future_exp, "sub": "test_user"}) 7 ctx1opqrstu

94 

95 write_auth_config(AuthConfig(access_token=token)) 7 ctx1opqrstu

96 

97 assert Identity().is_logged_in() 7 ctx1opqrstu

98 

99 

100def test_is_logged_in_with_expired_token(temp_auth_config: Path) -> None: 7 ctx1abcdefg

101 past_exp = int(time.time()) - 3600 7 ctx1vwxyzAB

102 token = create_jwt_token({"exp": past_exp, "sub": "test_user"}) 7 ctx1vwxyzAB

103 

104 write_auth_config(AuthConfig(access_token=token)) 7 ctx1vwxyzAB

105 

106 assert not Identity().is_logged_in() 7 ctx1vwxyzAB

107 

108 

109def test_is_logged_in_with_malformed_token(temp_auth_config: Path) -> None: 7 ctx1abcdefg

110 write_auth_config(AuthConfig(access_token="not.a.valid.token")) 7 ctx2` { | } ~ abbb

111 

112 assert not Identity().is_logged_in() 7 ctx2` { | } ~ abbb