From c238e8e9c8ebae68a9c3f36f045662f19e57ccd7 Mon Sep 17 00:00:00 2001 From: s3lph Date: Wed, 30 May 2018 02:09:32 +0200 Subject: [PATCH] test_facade: Added a login test case --- matemat/db/test/test_facade.py | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) diff --git a/matemat/db/test/test_facade.py b/matemat/db/test/test_facade.py index 049edcb..859ea37 100644 --- a/matemat/db/test/test_facade.py +++ b/matemat/db/test/test_facade.py @@ -1,6 +1,8 @@ import unittest +import bcrypt + from matemat.db import Database from matemat.exceptions import AuthenticationError, DatabaseConsistencyError @@ -29,6 +31,36 @@ class DatabaseTest(unittest.TestCase): with self.assertRaises(ValueError): db.create_user('testuser', 'supersecurepassword2', 'testuser2@example.com') + def test_login(self): + with self.db as db: + with db.transaction() as c: + u = db.create_user('testuser', 'supersecurepassword', 'testuser@example.com') + # Add a touchkey without using the provided function + c.execute('''UPDATE users SET touchkey = :tkhash WHERE user_id = :user_id''', { + 'tkhash': bcrypt.hashpw(b'0123', bcrypt.gensalt(12)), + 'user_id': u.id + }) + user = db.login('testuser', 'supersecurepassword') + self.assertEqual(u.id, user.id) + user = db.login('testuser', touchkey='0123') + self.assertEqual(u.id, user.id) + with self.assertRaises(AuthenticationError): + # Inexistent user should fail + db.login('nooone', 'supersecurepassword') + with self.assertRaises(AuthenticationError): + # Wrong password should fail + db.login('testuser', 'anothersecurepassword') + with self.assertRaises(AuthenticationError): + # Wrong touchkey should fail + db.login('testuser', touchkey='0124') + with self.assertRaises(ValueError): + # No password or touchkey should fail + db.login('testuser') + with self.assertRaises(ValueError): + # Both password and touchkey should fail + db.login('testuser', password='supersecurepassword', touchkey='0123') + + def test_change_password(self): with self.db as db: user = db.create_user('testuser', 'supersecurepassword', 'testuser@example.com')