224 lines
7.9 KiB
Python
224 lines
7.9 KiB
Python
# -*- coding: utf-8 -*-
|
|
|
|
import os
|
|
import json
|
|
import mock
|
|
import pytest
|
|
|
|
from webtest import Upload
|
|
|
|
from wcs.qommon.ident.password_accounts import PasswordAccount
|
|
from wcs.formdef import FormDef
|
|
from wcs.categories import Category
|
|
from wcs import fields
|
|
|
|
from utilities import get_app, login, create_temporary_pub, clean_temporary_pub
|
|
|
|
|
|
def pytest_generate_tests(metafunc):
|
|
if 'pub' in metafunc.fixturenames:
|
|
metafunc.parametrize('pub', ['pickle', 'sql', 'pickle-templates', 'pickle-lazy'], indirect=True)
|
|
|
|
|
|
@pytest.fixture
|
|
def pub(request, emails):
|
|
pub = create_temporary_pub(
|
|
sql_mode=bool('sql' in request.param),
|
|
templates_mode=bool('templates' in request.param),
|
|
lazy_mode=bool('lazy' in request.param),
|
|
)
|
|
pub.cfg['identification'] = {'methods': ['password']}
|
|
pub.cfg['language'] = {'language': 'en'}
|
|
pub.write_cfg()
|
|
open(os.path.join(pub.app_dir, 'site-options.cfg'), 'w').write('''
|
|
[storage-remote]
|
|
label = remote storage
|
|
class = wcs.qommon.upload_storage.RemoteOpaqueUploadStorage
|
|
ws = https://crypto.example.net/ws1/
|
|
|
|
[storage-remote-bo]
|
|
label = remote storage backoffice only
|
|
class = wcs.qommon.upload_storage.RemoteOpaqueUploadStorage
|
|
ws = https://crypto.example.net/ws2/
|
|
frontoffice_redirect = false
|
|
|
|
[api-secrets]
|
|
crypto.example.net = 1234
|
|
|
|
[wscall-secrets]
|
|
crypto.example.net = 1234
|
|
''')
|
|
return pub
|
|
|
|
|
|
def teardown_module(module):
|
|
clean_temporary_pub()
|
|
|
|
|
|
def create_formdef():
|
|
FormDef.wipe()
|
|
formdef = FormDef()
|
|
formdef.name = 'test'
|
|
formdef.fields = [
|
|
fields.FileField(id='0', label='file', varname='file'),
|
|
fields.FileField(id='1', label='remote file', varname='remote_file')
|
|
]
|
|
formdef.store()
|
|
return formdef
|
|
|
|
|
|
def create_user_and_admin(pub):
|
|
pub.user_class.wipe()
|
|
PasswordAccount.wipe()
|
|
|
|
user = pub.user_class()
|
|
user.email = 'foo@localhost'
|
|
user.store()
|
|
account = PasswordAccount(id='foo')
|
|
account.set_password('foo')
|
|
account.user_id = user.id
|
|
account.store()
|
|
|
|
admin = pub.user_class()
|
|
admin.email = 'admin@localhost'
|
|
admin.is_admin = True
|
|
admin.store()
|
|
account = PasswordAccount(id='admin')
|
|
account.set_password('admin')
|
|
account.user_id = admin.id
|
|
account.store()
|
|
return user, admin
|
|
|
|
|
|
@mock.patch('wcs.wscalls.call_webservice')
|
|
def test_form_file_field_upload_storage(wscall, pub):
|
|
create_user_and_admin(pub)
|
|
formdef = create_formdef()
|
|
formdef.data_class().wipe()
|
|
|
|
assert formdef.fields[0].storage == formdef.fields[1].storage == 'default'
|
|
|
|
assert 'remote' in pub.get_site_storages()
|
|
|
|
formdef.fields[1].storage = 'remote'
|
|
formdef.store()
|
|
assert formdef.fields[0].storage == 'default'
|
|
assert formdef.fields[1].storage == 'remote'
|
|
|
|
wscall.return_value = None, 200, json.dumps(
|
|
{"err": 0, "data": {"redirect_url": "https://crypto.example.net/"}})
|
|
|
|
image_content = open(os.path.join(os.path.dirname(__file__),
|
|
'image-with-gps-data.jpeg'), 'rb').read()
|
|
|
|
upload_0 = Upload('file.jpg', image_content, 'image/jpeg')
|
|
upload_1 = Upload('remote.jpg', image_content, 'image/jpeg')
|
|
|
|
resp = get_app(pub).get('/test/')
|
|
resp.forms[0]['f0$file'] = upload_0
|
|
resp.forms[0]['f1$file'] = upload_1
|
|
resp = resp.forms[0].submit('submit')
|
|
assert 'Check values then click submit.' in resp.text
|
|
resp = resp.forms[0].submit('submit')
|
|
assert resp.status_int == 302
|
|
resp = resp.follow()
|
|
assert 'The form has been recorded' in resp.text
|
|
|
|
assert 'download?f=0&thumbnail=1' in resp.text
|
|
assert 'download?f=1&thumbnail=1' not in resp.text # no thumbnail for remote storage
|
|
assert 'href="download?f=0"' in resp.text
|
|
assert 'href="download?f=1"' in resp.text
|
|
|
|
resp = resp.click('remote.jpg')
|
|
assert resp.location.startswith('https://crypto.example.net/')
|
|
assert '&signature=' in resp.location
|
|
|
|
# no links, via webservice
|
|
wscall.return_value = None, 200, json.dumps(
|
|
{"err": 0, "data": {
|
|
"redirect_url": "https://crypto.example.net/",
|
|
"backoffice_redirect_url": None,
|
|
"frontoffice_redirect_url": None,
|
|
}})
|
|
resp = get_app(pub).get('/test/')
|
|
resp.forms[0]['f0$file'] = upload_0
|
|
resp.forms[0]['f1$file'] = upload_1
|
|
resp = resp.forms[0].submit('submit')
|
|
resp = resp.forms[0].submit('submit')
|
|
resp = resp.follow()
|
|
assert 'The form has been recorded' in resp.text
|
|
assert 'download?f=0&thumbnail=1' in resp.text
|
|
assert 'download?f=1&thumbnail=1' not in resp.text
|
|
assert 'href="download?f=0"' in resp.text
|
|
assert 'href="download?f=1"' not in resp.text # no link on frontoffice
|
|
admin_app = login(get_app(pub), username='admin', password='admin')
|
|
resp = admin_app.get('/backoffice/management/test/2/')
|
|
assert 'download?f=0&thumbnail=1' in resp.text
|
|
assert 'download?f=1&thumbnail=1' not in resp.text
|
|
assert 'href="download?f=0"' in resp.text
|
|
assert 'href="download?f=1"' not in resp.text # no link on backoffice
|
|
admin_app.get('/backoffice/management/test/2/download?f=1', status=404) # cannot access
|
|
|
|
# link only on backoffice, via site-options
|
|
formdef.fields[1].storage = 'remote-bo'
|
|
formdef.store()
|
|
wscall.return_value = None, 200, json.dumps(
|
|
{"err": 0, "data": {"redirect_url": "https://crypto.example.net/"}})
|
|
resp = get_app(pub).get('/test/')
|
|
resp.forms[0]['f0$file'] = upload_0
|
|
resp.forms[0]['f1$file'] = upload_1
|
|
resp = resp.forms[0].submit('submit')
|
|
resp = resp.forms[0].submit('submit')
|
|
resp = resp.follow()
|
|
assert 'The form has been recorded' in resp.text
|
|
assert 'download?f=0&thumbnail=1' in resp.text
|
|
assert 'download?f=1&thumbnail=1' not in resp.text # no thumbnail for remote storage
|
|
assert 'href="download?f=0"' in resp.text
|
|
assert 'href="download?f=1"' not in resp.text # no link on frontoffice
|
|
# go to backoffice
|
|
resp = admin_app.get('/backoffice/management/test/3/')
|
|
assert 'download?f=0&thumbnail=1' in resp.text
|
|
assert 'download?f=1&thumbnail=1' not in resp.text # no thumbnail for remote storage
|
|
assert 'href="download?f=0"' in resp.text
|
|
assert 'href="download?f=1"' in resp.text # link is present on backoffice
|
|
|
|
# file size limit verification
|
|
formdef.fields[1].max_file_size = '1ko'
|
|
formdef.store()
|
|
wscall.return_value = None, 200, json.dumps(
|
|
{"err": 0, "data": {"redirect_url": "https://crypto.example.net/"}})
|
|
resp = get_app(pub).get('/test/')
|
|
resp.forms[0]['f0$file'] = upload_0
|
|
resp.forms[0]['f1$file'] = upload_1
|
|
resp = resp.forms[0].submit('submit')
|
|
assert 'over file size limit (1ko)' in resp.text
|
|
|
|
# api access (json export)
|
|
resp = admin_app.get('/api/forms/test/1/', status=200)
|
|
assert resp.json['fields']['file']['content'].startswith('/9j/4AAQSkZJRg')
|
|
assert 'storage' not in resp.json['fields']['file']
|
|
assert resp.json['fields']['remote_file']['content'] == ''
|
|
assert resp.json['fields']['remote_file']['storage'] == 'remote'
|
|
assert resp.json['fields']['remote_file']['storage_attrs'] == {
|
|
'redirect_url': 'https://crypto.example.net/',
|
|
'file_size': 1834
|
|
}
|
|
|
|
resp = admin_app.get('/api/forms/test/2/', status=200)
|
|
assert resp.json['fields']['remote_file']['content'] == ''
|
|
assert resp.json['fields']['remote_file']['storage'] == 'remote'
|
|
assert resp.json['fields']['remote_file']['storage_attrs'] == {
|
|
'redirect_url': 'https://crypto.example.net/',
|
|
'frontoffice_redirect_url': None,
|
|
'backoffice_redirect_url': None,
|
|
'file_size': 1834
|
|
}
|
|
|
|
resp = admin_app.get('/api/forms/test/3/', status=200)
|
|
assert resp.json['fields']['remote_file']['content'] == ''
|
|
assert resp.json['fields']['remote_file']['storage'] == 'remote-bo'
|
|
assert resp.json['fields']['remote_file']['storage_attrs'] == {
|
|
'redirect_url': 'https://crypto.example.net/',
|
|
'file_size': 1834
|
|
}
|