54 lines
1.8 KiB
Python
54 lines
1.8 KiB
Python
from django.contrib.auth import get_user_model
|
|
|
|
from hobo.signature import sign_url
|
|
|
|
|
|
def test_provisionning(app, db, settings):
|
|
settings.HOBO_ANONYMOUS_SERVICE_USER_CLASS = 'hobo.rest_authentication.AnonymousAdminServiceUser'
|
|
settings.KNOWN_SERVICES = {
|
|
'chrono': {
|
|
'foobar': {
|
|
'title': 'Foo',
|
|
'url': 'https://chrono.example.invalid/',
|
|
'verif_orig': 'chrono.example.invalid',
|
|
'secret': 'xxx',
|
|
'provisionning-url': 'https://chrono.example.invalid/__provision__/',
|
|
}
|
|
},
|
|
'hobo': {
|
|
'hobo': {
|
|
'title': 'Hobo',
|
|
'url': 'https://hobo.example.invalid/',
|
|
'verif_orig': 'hobo.example.invalid',
|
|
'secret': 'xxx',
|
|
'provisionning-url': 'https://hobo.example.invalid/__provision__/',
|
|
}
|
|
},
|
|
}
|
|
notification = {
|
|
'@type': 'provision',
|
|
'issuer': 'http://idp.example.net/idp/saml/metadata',
|
|
'objects': {
|
|
'@type': 'user',
|
|
'data': [
|
|
{
|
|
'uuid': 'a' * 32,
|
|
'first_name': 'John',
|
|
'last_name': 'Doe',
|
|
'email': 'john.doe@example.net',
|
|
'is_superuser': True,
|
|
'roles': [],
|
|
}
|
|
],
|
|
},
|
|
}
|
|
User = get_user_model()
|
|
assert User.objects.count() == 0
|
|
resp = app.put_json('/__provision__/', notification, status=403)
|
|
assert User.objects.count() == 0
|
|
resp = app.put_json(
|
|
sign_url('/__provision__/?orig=%s' % 'hobo.example.invalid', 'xxx'), notification, status=200
|
|
)
|
|
assert User.objects.count() == 1
|
|
assert User.objects.get(email='john.doe@example.net')
|