auth tests

src/tests/management/commands/populate_users.py

@@ -22,6 +22,7 @@ def handle(self, *args, **options):
 
  editors, _ = Group.objects.get_or_create(name="editors")
  viewers, _ = Group.objects.get_or_create(name="viewers")
+
  editors.save()
  viewers.save()
 

src/tests/tests.py

@@ -1 +1,61 @@
-# Create your tests here.
+import logging
+
+from django.contrib.auth.models import User
+from rest_framework.test import APITestCase
+
+logger = logging.getLogger(__name__)
+
+collections_url = "/oapif/collections"
+
+
+class TestBasicAuth(APITestCase):
+ @classmethod
+ def setUpTestData(cls):
+ cls.demo_viewer = User.objects.get(username="demo_viewer")
+ cls.admin = User.objects.get(username="admin")
+ cls.collection_url = collections_url + "/tests.point_2056_10fields"
+ cls.items_url = cls.collection_url + "/items"
+
+ def tearDown(self):
+ self.client.force_authenticate(user=None)
+
+ def test_get_as_viewer(self):
+ collections_from_anonymous = self.client.get(
+ collections_url, format="json"
+ ).json()
+ self.client.force_authenticate(user=self.demo_viewer)
+ collection_response = self.client.get(collections_url, format="json")
+
+ self.assertEqual(collection_response.status_code, 200)
+ self.assertEqual(
+ len(collection_response.json()), len(collections_from_anonymous)
+ )
+
+ def test_post_as_admin(self):
+ self.client.force_authenticate(user=self.admin)
+ data = {"geom": "Point(1300000 600000)", "field_0": "test123"}
+ post_to_items = self.client.post(self.items_url, data, format="json")
+ self.assertIn(post_to_items.status_code, (200, 201))
+
+ def test_anonymous_items_options(self):
+ # Anonymous user
+ expected = {"GET", "OPTIONS", "HEAD"}
+ response = self.client.options(self.items_url)
+
+ allowed_headers = set(s.strip() for s in response.headers["Allow"].split(","))
+ allowed_body = set(response.json()["actions"].keys())
+
+ self.assertEqual(allowed_body, expected)
+ self.assertEqual(allowed_headers, allowed_body)
+
+ def test_admin_items_options(self):
+ # Authenticated user with admin permissions
+ expected = {"POST", "GET", "OPTIONS", "HEAD"}
+ self.client.force_authenticate(user=self.admin)
+ response = self.client.options(self.items_url)
+
+ allowed_headers = set(s.strip() for s in response.headers["Allow"].split(","))
+ allowed_body = set(response.json()["actions"].keys())
+
+ self.assertEqual(allowed_body, expected)
+ self.assertEqual(allowed_headers, allowed_body)