f7f0a4e811
* Add read only and admin policies * Migrate to 2 system groups * Add system groups * Add system groups admin & read only * Dont' mutate parameters * Fix types
211 lines
7.5 KiB
Python
211 lines
7.5 KiB
Python
"""Tests for the auth store."""
|
|
from homeassistant.auth import auth_store
|
|
|
|
|
|
async def test_loading_no_group_data_format(hass, hass_storage):
|
|
"""Test we correctly load old data without any groups."""
|
|
hass_storage[auth_store.STORAGE_KEY] = {
|
|
'version': 1,
|
|
'data': {
|
|
'credentials': [],
|
|
'users': [
|
|
{
|
|
"id": "user-id",
|
|
"is_active": True,
|
|
"is_owner": True,
|
|
"name": "Paulus",
|
|
"system_generated": False,
|
|
},
|
|
{
|
|
"id": "system-id",
|
|
"is_active": True,
|
|
"is_owner": True,
|
|
"name": "Hass.io",
|
|
"system_generated": True,
|
|
}
|
|
],
|
|
"refresh_tokens": [
|
|
{
|
|
"access_token_expiration": 1800.0,
|
|
"client_id": "http://localhost:8123/",
|
|
"created_at": "2018-10-03T13:43:19.774637+00:00",
|
|
"id": "user-token-id",
|
|
"jwt_key": "some-key",
|
|
"last_used_at": "2018-10-03T13:43:19.774712+00:00",
|
|
"token": "some-token",
|
|
"user_id": "user-id"
|
|
},
|
|
{
|
|
"access_token_expiration": 1800.0,
|
|
"client_id": None,
|
|
"created_at": "2018-10-03T13:43:19.774637+00:00",
|
|
"id": "system-token-id",
|
|
"jwt_key": "some-key",
|
|
"last_used_at": "2018-10-03T13:43:19.774712+00:00",
|
|
"token": "some-token",
|
|
"user_id": "system-id"
|
|
},
|
|
{
|
|
"access_token_expiration": 1800.0,
|
|
"client_id": "http://localhost:8123/",
|
|
"created_at": "2018-10-03T13:43:19.774637+00:00",
|
|
"id": "hidden-because-no-jwt-id",
|
|
"last_used_at": "2018-10-03T13:43:19.774712+00:00",
|
|
"token": "some-token",
|
|
"user_id": "user-id"
|
|
},
|
|
]
|
|
}
|
|
}
|
|
|
|
store = auth_store.AuthStore(hass)
|
|
groups = await store.async_get_groups()
|
|
assert len(groups) == 2
|
|
admin_group = groups[0]
|
|
assert admin_group.name == auth_store.GROUP_NAME_ADMIN
|
|
assert admin_group.system_generated
|
|
assert admin_group.id == auth_store.GROUP_ID_ADMIN
|
|
read_group = groups[1]
|
|
assert read_group.name == auth_store.GROUP_NAME_READ_ONLY
|
|
assert read_group.system_generated
|
|
assert read_group.id == auth_store.GROUP_ID_READ_ONLY
|
|
|
|
users = await store.async_get_users()
|
|
assert len(users) == 2
|
|
|
|
owner, system = users
|
|
|
|
assert owner.system_generated is False
|
|
assert owner.groups == [admin_group]
|
|
assert len(owner.refresh_tokens) == 1
|
|
owner_token = list(owner.refresh_tokens.values())[0]
|
|
assert owner_token.id == 'user-token-id'
|
|
|
|
assert system.system_generated is True
|
|
assert system.groups == []
|
|
assert len(system.refresh_tokens) == 1
|
|
system_token = list(system.refresh_tokens.values())[0]
|
|
assert system_token.id == 'system-token-id'
|
|
|
|
|
|
async def test_loading_all_access_group_data_format(hass, hass_storage):
|
|
"""Test we correctly load old data with single group."""
|
|
hass_storage[auth_store.STORAGE_KEY] = {
|
|
'version': 1,
|
|
'data': {
|
|
'credentials': [],
|
|
'users': [
|
|
{
|
|
"id": "user-id",
|
|
"is_active": True,
|
|
"is_owner": True,
|
|
"name": "Paulus",
|
|
"system_generated": False,
|
|
'group_ids': ['abcd-all-access']
|
|
},
|
|
{
|
|
"id": "system-id",
|
|
"is_active": True,
|
|
"is_owner": True,
|
|
"name": "Hass.io",
|
|
"system_generated": True,
|
|
}
|
|
],
|
|
"groups": [
|
|
{
|
|
"id": "abcd-all-access",
|
|
"name": "All Access",
|
|
}
|
|
],
|
|
"refresh_tokens": [
|
|
{
|
|
"access_token_expiration": 1800.0,
|
|
"client_id": "http://localhost:8123/",
|
|
"created_at": "2018-10-03T13:43:19.774637+00:00",
|
|
"id": "user-token-id",
|
|
"jwt_key": "some-key",
|
|
"last_used_at": "2018-10-03T13:43:19.774712+00:00",
|
|
"token": "some-token",
|
|
"user_id": "user-id"
|
|
},
|
|
{
|
|
"access_token_expiration": 1800.0,
|
|
"client_id": None,
|
|
"created_at": "2018-10-03T13:43:19.774637+00:00",
|
|
"id": "system-token-id",
|
|
"jwt_key": "some-key",
|
|
"last_used_at": "2018-10-03T13:43:19.774712+00:00",
|
|
"token": "some-token",
|
|
"user_id": "system-id"
|
|
},
|
|
{
|
|
"access_token_expiration": 1800.0,
|
|
"client_id": "http://localhost:8123/",
|
|
"created_at": "2018-10-03T13:43:19.774637+00:00",
|
|
"id": "hidden-because-no-jwt-id",
|
|
"last_used_at": "2018-10-03T13:43:19.774712+00:00",
|
|
"token": "some-token",
|
|
"user_id": "user-id"
|
|
},
|
|
]
|
|
}
|
|
}
|
|
|
|
store = auth_store.AuthStore(hass)
|
|
groups = await store.async_get_groups()
|
|
assert len(groups) == 2
|
|
admin_group = groups[0]
|
|
assert admin_group.name == auth_store.GROUP_NAME_ADMIN
|
|
assert admin_group.system_generated
|
|
assert admin_group.id == auth_store.GROUP_ID_ADMIN
|
|
read_group = groups[1]
|
|
assert read_group.name == auth_store.GROUP_NAME_READ_ONLY
|
|
assert read_group.system_generated
|
|
assert read_group.id == auth_store.GROUP_ID_READ_ONLY
|
|
|
|
users = await store.async_get_users()
|
|
assert len(users) == 2
|
|
|
|
owner, system = users
|
|
|
|
assert owner.system_generated is False
|
|
assert owner.groups == [admin_group]
|
|
assert len(owner.refresh_tokens) == 1
|
|
owner_token = list(owner.refresh_tokens.values())[0]
|
|
assert owner_token.id == 'user-token-id'
|
|
|
|
assert system.system_generated is True
|
|
assert system.groups == []
|
|
assert len(system.refresh_tokens) == 1
|
|
system_token = list(system.refresh_tokens.values())[0]
|
|
assert system_token.id == 'system-token-id'
|
|
|
|
|
|
async def test_loading_empty_data(hass, hass_storage):
|
|
"""Test we correctly load with no existing data."""
|
|
store = auth_store.AuthStore(hass)
|
|
groups = await store.async_get_groups()
|
|
assert len(groups) == 2
|
|
admin_group = groups[0]
|
|
assert admin_group.name == auth_store.GROUP_NAME_ADMIN
|
|
assert admin_group.system_generated
|
|
assert admin_group.id == auth_store.GROUP_ID_ADMIN
|
|
read_group = groups[1]
|
|
assert read_group.name == auth_store.GROUP_NAME_READ_ONLY
|
|
assert read_group.system_generated
|
|
assert read_group.id == auth_store.GROUP_ID_READ_ONLY
|
|
|
|
users = await store.async_get_users()
|
|
assert len(users) == 0
|
|
|
|
|
|
async def test_system_groups_only_store_id(hass, hass_storage):
|
|
"""Test that for system groups we only store the ID."""
|
|
store = auth_store.AuthStore(hass)
|
|
await store._async_load()
|
|
data = store._data_to_save()
|
|
assert len(data['users']) == 0
|
|
assert data['groups'] == [
|
|
{'id': auth_store.GROUP_ID_ADMIN},
|
|
{'id': auth_store.GROUP_ID_READ_ONLY},
|
|
]
|