mirror of
https://github.com/netbox-community/netbox.git
synced 2025-12-27 07:37:45 -06:00
513b11450d
Some checks failed
CI / build (20.x, 3.12) (push) Has been cancelled
CI / build (20.x, 3.13) (push) Has been cancelled
CodeQL / Analyze (${{ matrix.language }}) (none, actions) (push) Has been cancelled
CodeQL / Analyze (${{ matrix.language }}) (none, javascript-typescript) (push) Has been cancelled
CodeQL / Analyze (${{ matrix.language }}) (none, python) (push) Has been cancelled
* feat(users): Add support for enabling/disabling Tokens Introduce an `enabled` flag on the `Token` model to allow temporarily revoking API tokens without deleting them. Update forms, serializers, and views to expose the new field. Enforce the `enabled` flag in token authentication. Add model, API, and authentication tests for the new behavior. Fixes #20834 * Fix authentication test --------- Co-authored-by: Jeremy Stretch <jstretch@netboxlabs.com>
364 lines
11 KiB
Python
364 lines
11 KiB
Python
from core.models import ObjectType
|
|
from users.models import *
|
|
from utilities.testing import ViewTestCases, create_test_user
|
|
|
|
|
|
class UserTestCase(
|
|
ViewTestCases.GetObjectViewTestCase,
|
|
ViewTestCases.CreateObjectViewTestCase,
|
|
ViewTestCases.EditObjectViewTestCase,
|
|
ViewTestCases.DeleteObjectViewTestCase,
|
|
ViewTestCases.ListObjectsViewTestCase,
|
|
ViewTestCases.BulkImportObjectsViewTestCase,
|
|
ViewTestCases.BulkEditObjectsViewTestCase,
|
|
ViewTestCases.BulkDeleteObjectsViewTestCase,
|
|
):
|
|
model = User
|
|
maxDiff = None
|
|
validation_excluded_fields = ['password']
|
|
|
|
def _get_queryset(self):
|
|
# Omit the user attached to the test client
|
|
return self.model.objects.exclude(username='testuser')
|
|
|
|
@classmethod
|
|
def setUpTestData(cls):
|
|
users = (
|
|
User(
|
|
username='username1', first_name='first1', last_name='last1', email='user1@foo.com', password='pass1xxx'
|
|
),
|
|
User(
|
|
username='username2', first_name='first2', last_name='last2', email='user2@foo.com', password='pass2xxx'
|
|
),
|
|
User(
|
|
username='username3', first_name='first3', last_name='last3', email='user3@foo.com', password='pass3xxx'
|
|
),
|
|
)
|
|
User.objects.bulk_create(users)
|
|
|
|
cls.form_data = {
|
|
'username': 'usernamex',
|
|
'first_name': 'firstx',
|
|
'last_name': 'lastx',
|
|
'email': 'userx@foo.com',
|
|
'password': 'pass1xxxABCD',
|
|
'confirm_password': 'pass1xxxABCD',
|
|
}
|
|
|
|
cls.csv_data = (
|
|
"username,first_name,last_name,email,password",
|
|
"username4,first4,last4,email4@foo.com,pass4xxx",
|
|
"username5,first5,last5,email5@foo.com,pass5xxx",
|
|
"username6,first6,last6,email6@foo.com,pass6xxx",
|
|
)
|
|
|
|
cls.csv_update_data = (
|
|
"id,first_name,last_name",
|
|
f"{users[0].pk},first7,last7",
|
|
f"{users[1].pk},first8,last8",
|
|
f"{users[2].pk},first9,last9",
|
|
)
|
|
|
|
cls.bulk_edit_data = {
|
|
'last_name': 'newlastname',
|
|
}
|
|
|
|
def test_password_validation_enforced(self):
|
|
"""
|
|
Test that any configured password validation rules (AUTH_PASSWORD_VALIDATORS) are enforced.
|
|
"""
|
|
self.add_permissions('users.add_user')
|
|
data = {
|
|
'username': 'new_user',
|
|
'password': 'F1a',
|
|
'confirm_password': 'F1a',
|
|
}
|
|
|
|
# Password too short
|
|
request = {
|
|
'path': self._get_url('add'),
|
|
'data': data,
|
|
}
|
|
response = self.client.post(**request)
|
|
self.assertHttpStatus(response, 200)
|
|
|
|
# Password long enough
|
|
data['password'] = 'fooBarFoo123'
|
|
data['confirm_password'] = 'fooBarFoo123'
|
|
self.assertHttpStatus(self.client.post(**request), 302)
|
|
|
|
# Password no number
|
|
data['password'] = 'FooBarFooBar'
|
|
data['confirm_password'] = 'FooBarFooBar'
|
|
self.assertHttpStatus(self.client.post(**request), 200)
|
|
|
|
# Password no letter
|
|
data['password'] = '123456789123'
|
|
data['confirm_password'] = '123456789123'
|
|
self.assertHttpStatus(self.client.post(**request), 200)
|
|
|
|
# Password no uppercase
|
|
data['password'] = 'foobar123abc'
|
|
data['confirm_password'] = 'foobar123abc'
|
|
self.assertHttpStatus(self.client.post(**request), 200)
|
|
|
|
# Password no lowercase
|
|
data['password'] = 'FOOBAR123ABC'
|
|
data['confirm_password'] = 'FOOBAR123ABC'
|
|
self.assertHttpStatus(self.client.post(**request), 200)
|
|
|
|
|
|
class GroupTestCase(
|
|
ViewTestCases.GetObjectViewTestCase,
|
|
ViewTestCases.CreateObjectViewTestCase,
|
|
ViewTestCases.EditObjectViewTestCase,
|
|
ViewTestCases.DeleteObjectViewTestCase,
|
|
ViewTestCases.ListObjectsViewTestCase,
|
|
ViewTestCases.BulkImportObjectsViewTestCase,
|
|
ViewTestCases.BulkEditObjectsViewTestCase,
|
|
ViewTestCases.BulkDeleteObjectsViewTestCase,
|
|
):
|
|
model = Group
|
|
maxDiff = None
|
|
|
|
@classmethod
|
|
def setUpTestData(cls):
|
|
|
|
groups = (
|
|
Group(name='group1'),
|
|
Group(name='group2'),
|
|
Group(name='group3'),
|
|
)
|
|
Group.objects.bulk_create(groups)
|
|
|
|
cls.form_data = {
|
|
'name': 'groupx',
|
|
}
|
|
|
|
cls.csv_data = (
|
|
"name",
|
|
"group4"
|
|
"group5"
|
|
"group6"
|
|
)
|
|
|
|
cls.csv_update_data = (
|
|
"id,name",
|
|
f"{groups[0].pk},group7",
|
|
f"{groups[1].pk},group8",
|
|
f"{groups[2].pk},group9",
|
|
)
|
|
|
|
cls.bulk_edit_data = {
|
|
'description': 'New description',
|
|
}
|
|
|
|
|
|
class ObjectPermissionTestCase(
|
|
ViewTestCases.GetObjectViewTestCase,
|
|
ViewTestCases.CreateObjectViewTestCase,
|
|
ViewTestCases.EditObjectViewTestCase,
|
|
ViewTestCases.DeleteObjectViewTestCase,
|
|
ViewTestCases.ListObjectsViewTestCase,
|
|
ViewTestCases.BulkEditObjectsViewTestCase,
|
|
ViewTestCases.BulkDeleteObjectsViewTestCase,
|
|
):
|
|
model = ObjectPermission
|
|
maxDiff = None
|
|
|
|
@classmethod
|
|
def setUpTestData(cls):
|
|
object_type = ObjectType.objects.get_by_natural_key('dcim', 'site')
|
|
|
|
permissions = (
|
|
ObjectPermission(name='Permission 1', actions=['view', 'add', 'delete']),
|
|
ObjectPermission(name='Permission 2', actions=['view', 'add', 'delete']),
|
|
ObjectPermission(name='Permission 3', actions=['view', 'add', 'delete']),
|
|
)
|
|
ObjectPermission.objects.bulk_create(permissions)
|
|
|
|
cls.form_data = {
|
|
'name': 'Permission X',
|
|
'description': 'A new permission',
|
|
'object_types_1': [object_type.pk], # SplitMultiSelectWidget requires _1 suffix on field name
|
|
'actions': 'view,edit,delete',
|
|
}
|
|
|
|
cls.csv_data = (
|
|
"name",
|
|
"permission4"
|
|
"permission5"
|
|
"permission6"
|
|
)
|
|
|
|
cls.csv_update_data = (
|
|
"id,name,actions",
|
|
f"{permissions[0].pk},permission7",
|
|
f"{permissions[1].pk},permission8",
|
|
f"{permissions[2].pk},permission9",
|
|
)
|
|
|
|
cls.bulk_edit_data = {
|
|
'description': 'New description',
|
|
}
|
|
|
|
|
|
class TokenTestCase(
|
|
ViewTestCases.GetObjectViewTestCase,
|
|
ViewTestCases.CreateObjectViewTestCase,
|
|
ViewTestCases.EditObjectViewTestCase,
|
|
ViewTestCases.DeleteObjectViewTestCase,
|
|
ViewTestCases.ListObjectsViewTestCase,
|
|
ViewTestCases.BulkImportObjectsViewTestCase,
|
|
ViewTestCases.BulkEditObjectsViewTestCase,
|
|
ViewTestCases.BulkDeleteObjectsViewTestCase,
|
|
):
|
|
model = Token
|
|
maxDiff = None
|
|
validation_excluded_fields = ['token', 'user']
|
|
|
|
@classmethod
|
|
def setUpTestData(cls):
|
|
users = (
|
|
create_test_user('User 1'),
|
|
create_test_user('User 2'),
|
|
)
|
|
tokens = (
|
|
Token(user=users[0]),
|
|
Token(user=users[0]),
|
|
Token(user=users[1]),
|
|
)
|
|
for token in tokens:
|
|
token.save()
|
|
|
|
cls.form_data = {
|
|
'version': 2,
|
|
'token': '4F9DAouzURLbicyoG55htImgqQ0b4UZHP5LUYgl5',
|
|
'user': users[0].pk,
|
|
'description': 'Test token',
|
|
'enabled': True,
|
|
}
|
|
|
|
cls.csv_data = (
|
|
"token,user,description,enabled,write_enabled",
|
|
f"zjebxBPzICiPbWz0Wtx0fTL7bCKXKGTYhNzkgC2S,{users[0].pk},Test token,true,true",
|
|
f"9Z5kGtQWba60Vm226dPDfEAV6BhlTr7H5hAXAfbF,{users[1].pk},Test token,true,false",
|
|
f"njpMnNT6r0k0MDccoUhTYYlvP9BvV3qLzYN2p6Uu,{users[1].pk},Test token,false,true",
|
|
)
|
|
|
|
cls.csv_update_data = (
|
|
"id,description",
|
|
f"{tokens[0].pk},New description",
|
|
f"{tokens[1].pk},New description",
|
|
f"{tokens[2].pk},New description",
|
|
)
|
|
|
|
cls.bulk_edit_data = {
|
|
'description': 'New description',
|
|
}
|
|
|
|
|
|
class OwnerGroupTestCase(ViewTestCases.AdminModelViewTestCase):
|
|
model = OwnerGroup
|
|
|
|
@classmethod
|
|
def setUpTestData(cls):
|
|
owner_groups = (
|
|
OwnerGroup(name='Owner Group 1'),
|
|
OwnerGroup(name='Owner Group 2'),
|
|
OwnerGroup(name='Owner Group 3'),
|
|
)
|
|
OwnerGroup.objects.bulk_create(owner_groups)
|
|
|
|
cls.form_data = {
|
|
'name': 'Owner Group X',
|
|
'description': 'A new owner group',
|
|
}
|
|
|
|
cls.csv_data = (
|
|
"name,description",
|
|
"Owner Group 4,Foo",
|
|
"Owner Group 5,Bar",
|
|
"Owner Group 6,Baz",
|
|
)
|
|
|
|
cls.csv_update_data = (
|
|
"id,description",
|
|
f"{owner_groups[0].pk},Foo",
|
|
f"{owner_groups[1].pk},Bar",
|
|
f"{owner_groups[2].pk},Baz",
|
|
)
|
|
|
|
cls.bulk_edit_data = {
|
|
'description': 'New description',
|
|
}
|
|
|
|
|
|
class OwnerTestCase(ViewTestCases.AdminModelViewTestCase):
|
|
model = Owner
|
|
|
|
@classmethod
|
|
def setUpTestData(cls):
|
|
groups = (
|
|
Group(name='Group 1'),
|
|
Group(name='Group 2'),
|
|
Group(name='Group 3'),
|
|
)
|
|
Group.objects.bulk_create(groups)
|
|
|
|
users = (
|
|
User(username='User 1'),
|
|
User(username='User 2'),
|
|
User(username='User 3'),
|
|
)
|
|
User.objects.bulk_create(users)
|
|
|
|
owner_groups = (
|
|
OwnerGroup(name='Owner Group 1'),
|
|
OwnerGroup(name='Owner Group 2'),
|
|
OwnerGroup(name='Owner Group 3'),
|
|
OwnerGroup(name='Owner Group 4'),
|
|
)
|
|
OwnerGroup.objects.bulk_create(owner_groups)
|
|
|
|
owners = (
|
|
Owner(name='Owner 1'),
|
|
Owner(name='Owner 2'),
|
|
Owner(name='Owner 3'),
|
|
)
|
|
Owner.objects.bulk_create(owners)
|
|
|
|
# Assign users and groups to owners
|
|
owners[0].user_groups.add(groups[0])
|
|
owners[1].user_groups.add(groups[1])
|
|
owners[2].user_groups.add(groups[2])
|
|
owners[0].users.add(users[0])
|
|
owners[1].users.add(users[1])
|
|
owners[2].users.add(users[2])
|
|
|
|
cls.form_data = {
|
|
'name': 'Owner X',
|
|
'group': owner_groups[3].pk,
|
|
'user_groups': [groups[0].pk, groups[1].pk],
|
|
'users': [users[0].pk, users[1].pk],
|
|
'description': 'A new owner',
|
|
}
|
|
|
|
cls.csv_data = (
|
|
"name,group,description",
|
|
"Owner 4,Owner Group 4,Foo",
|
|
"Owner 5,Owner Group 4,Bar",
|
|
"Owner 6,Owner Group 4,Baz",
|
|
)
|
|
|
|
cls.csv_update_data = (
|
|
"id,description",
|
|
f"{owners[0].pk},Foo",
|
|
f"{owners[1].pk},Bar",
|
|
f"{owners[2].pk},Baz",
|
|
)
|
|
|
|
cls.bulk_edit_data = {
|
|
'description': 'New description',
|
|
}
|