ï»¿
Your IP : 172.28.240.42

Current Path : /usr/lib/python2.7/dist-packages/twisted/test/
Current File : //usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyc
�
[�XMc@s�dZddlmZddlmZddlmZmZddlm	Z	ddl
mZddlm
Z
mZmZddlmZmZd	�Zd
efd��YZdefd
��YZdS(s[
Tests for L{twisted.cred._digest} and the associated bits in
L{twisted.cred.credentials}.
i����(tverifyObject(tTestCase(tmd5tsha1(tIPv4Address(tLoginFailed(tcalcHA1tcalcHA2tIUsernameDigestHash(tcalcResponsetDigestCredentialFactorycCs|jd�j�S(Ntbase64(tencodetstrip(ts((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyt	b64encodestFakeDigestCredentialFactorycBs)eZdZd�Zd�Zd�ZRS(s\
    A Fake Digest Credential Factory that generates a predictable
    nonce and opaque
    cOs&tt|�j||�d|_dS(Nt0(tsuperRt__init__t
privateKey(tselftargstkwargs((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyRscCsdS(s)
        Generate a static nonce
        t178288758716122392881254770685((R((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyt_generateNoncescCsdS(s&
        Return a stable time
        i((R((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyt_getTime&s(t__name__t
__module__t__doc__RRR(((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyRs		tDigestAuthTestscBsveZdZd�Zded�Zd�Zd�Zded�Zded�Z	d�Z
d	�Zd
�Zd�Z
ded�Zd
�Zd�Zded�Zd�Zd�Zed�Zd�Zed�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Z d�Z!d�Z"d �Z#d!�Z$d"�Z%d#�Z&d$�Z'd%�Z(RS(&s�
    L{TestCase} mixin class which defines a number of tests for
    L{DigestCredentialFactory}.  Because this mixin defines C{setUp}, it
    must be inherited before L{TestCase}.
    cCsyd|_d|_d|_d|_d|_d|_d|_tdd	d
�|_d|_	t
|j|j�|_dS(
s>
        Create a DigestCredentialFactory for testing
        tfoobartbazquuxs
test realmRt 29fc54aa1641c6fa0e151419361c8f23tauths/write/tTCPs10.2.3.4iu�tGETN(tusernametpasswordtrealmt	algorithmtcnoncetqopturiRt
clientAddresstmethodR
tcredentialFactory(R((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pytsetUp4s								RcCsod}t||j|j|j||j�}d|j|j|jf}||�j�}|j||�dS(s�
        L{calcHA1} accepts the C{'md5'} algorithm and returns an MD5 hash of
        its parameters, excluding the nonce and cnonce.
        t	abc123xyzs%s:%s:%sN(RR%R'R&R)t	hexdigesttassertEqual(Rt
_algorithmt_hashtnoncethashA1ta1texpected((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_MD5HashA1EscCs�d}td|j|j|j||j�}d|j|j|jf}t|�j�}d|||jf}t|�j�}|j||�dS(s�
        L{calcHA1} accepts the C{'md5-sess'} algorithm and returns an MD5 hash
        of its parameters, including the nonce and cnonce.
        t	xyz321abcsmd5-sesss%s:%s:%sN(	RR%R'R&R)RtdigestR1R2(RR5R6R7tha1R8((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_MD5SessionHashA1RscCs|jdt�dS(s�
        L{calcHA1} accepts the C{'sha'} algorithm and returns a SHA hash of its
        parameters, excluding the nonce and cnonce.
        tshaN(R9R(R((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_SHAHashA1ascCsZd}t|||jdd�}d||jf}||�j�}|j||�dS(s�
        L{calcHA2} accepts the C{'md5'} algorithm and returns an MD5 hash of
        its arguments, excluding the entity hash for QOP other than
        C{'auth-int'}.
        R$R"s%s:%sN(RR+tNoneR1R2(RR3R4R-thashA2ta2R8((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_MD5HashA2Authis
cCscd}d}t|||jd|�}d||j|f}||�j�}|j||�dS(s�
        L{calcHA2} accepts the C{'md5'} algorithm and returns an MD5 hash of
        its arguments, including the entity hash for QOP of C{'auth-int'}.
        R$t	foobarbazsauth-ints%s:%s:%sN(RR+R1R2(RR3R4R-thentityRARBR8((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_MD5HashA2AuthIntvscCs|jd�dS(s�
        L{calcHA2} accepts the C{'md5-sess'} algorithm and QOP of C{'auth'} and
        returns the same value as it does for the C{'md5'} algorithm.
        smd5-sessN(RC(R((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_MD5SessHashA2Auth�scCs|jd�dS(s�
        L{calcHA2} accepts the C{'md5-sess'} algorithm and QOP of C{'auth-int'}
        and returns the same value as it does for the C{'md5'} algorithm.
        smd5-sessN(RF(R((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_MD5SessHashA2AuthInt�scCs|jdt�dS(s�
        L{calcHA2} accepts the C{'sha'} algorithm and returns a SHA hash of
        its arguments, excluding the entity hash for QOP other than
        C{'auth-int'}.
        R>N(RCR(R((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_SHAHashA2Auth�scCs|jdt�dS(s�
        L{calcHA2} accepts the C{'sha'} algorithm and returns a SHA hash of
        its arguments, including the entity hash for QOP of C{'auth-int'}.
        R>N(RFR(R((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_SHAHashA2AuthInt�sc	Csid}d}d}d|||f}||�j�}t||||ddd�}|j||�dS(s�
        L{calcResponse} accepts the C{'md5'} algorithm and returns an MD5 hash
        of its parameters, excluding the nonce count, client nonce, and QoP
        value if the nonce count and client nonce are C{None}
        tabc123t789xyztlmnopqs%s:%s:%sN(R1R	R@R2(	RR3R4R6RAR5tresponseR8R;((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_MD5HashResponse�s	cCs|jd�dS(s�
        L{calcResponse} accepts the C{'md5-sess'} algorithm and returns an MD5
        hash of its parameters, excluding the nonce count, client nonce, and
        QoP value if the nonce count and client nonce are C{None}
        smd5-sessN(RO(R((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_MD5SessionHashResponse�scCs|jdt�dS(s�
        L{calcResponse} accepts the C{'sha'} algorithm and returns a SHA hash
        of its parameters, excluding the nonce count, client nonce, and QoP
        value if the nonce count and client nonce are C{None}
        R>N(ROR(R((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_SHAHashResponse�scCs�d}d}d}d}d}d}d||||||f}	||	�j�}
t|||||||�}|j|
|�dS(	s�
        L{calcResponse} accepts the C{'md5'} algorithm and returns an MD5 hash
        of its parameters, including the nonce count, client nonce, and QoP
        value if they are specified.
        RKRLRMt00000004t	abcxyz123R"s%s:%s:%s:%s:%s:%sN(R1R	R2(RR3R4R6RAR5t
nonceCounttclientNonceR*RNR8R;((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_MD5HashResponseExtra�scCs|jd�dS(s�
        L{calcResponse} accepts the C{'md5-sess'} algorithm and returns an MD5
        hash of its parameters, including the nonce count, client nonce, and
        QoP value if they are specified.
        smd5-sessN(RV(R((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyt test_MD5SessionHashResponseExtra�scCs|jdt�dS(s�
        L{calcResponse} accepts the C{'sha'} algorithm and returns a SHA hash
        of its parameters, including the nonce count, client nonce, and QoP
        value if they are specified.
        R>N(RVR(R((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_SHAHashResponseExtra�scKsd|kr|j|d<nd|kr8|j|d<nd|krT|j|d<nd|krp|j|d<nd|kr�|j|d<nd|kr�|j|d<n|r�d}nd}d	jg|j�D].\}}|dk	r�d
||||f^q��S(s�
        Format all given keyword arguments and their values suitably for use as
        the value of an HTTP header.

        @types quotes: C{bool}
        @param quotes: A flag indicating whether to quote the values of each
            field in the response.

        @param **kw: Keywords and C{str} values which will be treated as field
            name/value pairs to include in the result.

        @rtype: C{str}
        @return: The given fields formatted for use as an HTTP header value.
        R%R'R(R*R)R+t"ts, s	%s=%s%s%sN(	R%R'R(R*R)R+tjoint	iteritemsR@(Rtquotestkwtquotetktv((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pytformatResponse�s&	c	Cs�|jd�}|jd�j�}|jd�}t||j|j|j||j�}t|d|j|d�}t
||||||j|�}|S(s@
        Calculate the response for the given challenge
        R5R(R*R$N(tgettlowerRR%R'R&R)RR+R@R	(	Rt	challengetncountR5talgoR*R<tha2R8((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pytgetDigestResponses$!cCs�|jj|jj�}d}|jd|d|dd|j||�d|d|d�}|jj||j|jj�}|j|j	|j
��|j|j	|j
d��dS(	s�
        L{DigestCredentialFactory.decode} accepts a digest challenge response
        and parses it into an L{IUsernameHashedPassword} provider.
        t00000001R]R5RNtnctopaquetwrongN(R.tgetChallengeR,thostRbRitdecodeR-t
assertTruet
checkPasswordR&tassertFalse(RR]ReRktclientResponsetcreds((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyt
test_response%s	

	cCs|jt�dS(s
        L{DigestCredentialFactory.decode} accepts a digest challenge response
        which does not quote the values of its fields and parses it into an
        L{IUsernameHashedPassword} provider in the same way it would a
        response which included quoted field values.
        N(RvtFalse(R((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_responseWithoutQuotes9scCsd|_|j�dS(ss
        The case of the algorithm value in the response is ignored when
        checking the credentials.
        tMD5N(R(Rv(R((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_caseInsensitiveAlgorithmCs	cCsd|_|j�dS(sV
        The algorithm defaults to MD5 if it is not supplied in the response.
        N(R@R(Rv(R((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_md5DefaultAlgorithmLs	c
Cs�|jjd�}d}|jd|dd|j||�d|d|d�}|jj||jd�}|j|j|j	��|j
|j|j	d��dS(s�
        L{DigestCredentialFactory.decode} accepts a digest challenge response
        even if the client address it is passed is C{None}.
        RjR5RNRkRlRmN(R.RnR@RbRiRpR-RqRrR&Rs(RReRkRtRu((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_responseWithoutClientIPTs	

c
CsF|jj|jj�}d}|jd|dd|j||�d|d|d�}|jj||j|jj�}|j|j	|j
��|j|j	|j
d��d}|jd|dd|j||�d|d|d�}|jj||j|jj�}|j|j	|j
��|j|j	|j
d��dS(	sm
        L{DigestCredentialFactory.decode} handles multiple responses to a
        single challenge.
        RjR5RNRkRlRmt00000002N(R.RnR,RoRbRiRpR-RqRrR&Rs(RReRkRtRu((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_multiResponsefs*	

	

c
Cs�|jj|jj�}d}|jd|dd|j||�d|d|d�}|jj|d|jj�}|j|j|j	��|j|j|j	d��dS(	s&
        L{DigestCredentialFactory.decode} returns an L{IUsernameHashedPassword}
        provider which rejects a correct password for the given user if the
        challenge response request is made using a different HTTP method than
        was used to request the initial challenge.
        RjR5RNRkRltPOSTRmN(
R.RnR,RoRbRiRpRsRrR&(RReRkRtRu((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_failsWithDifferentMethod�s	

cCs�|jt|jj|jdd�|j|jj�}|j	t
|�d�|jt|jj|jdd�|j|jj�}|j	t
|�d�dS(s�
        L{DigestCredentialFactory.decode} raises L{LoginFailed} if the response
        has no username field or if the username field is empty.
        R%s$Invalid response, no username given.RZN(tassertRaisesRR.RpRbR@R-R,RoR2tstr(Rte((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_noUsername�s		cCsP|jt|jj|jdd�|j|jj�}|jt	|�d�dS(so
        L{DigestCredentialFactory.decode} raises L{LoginFailed} if the response
        has no nonce.
        RlRKs!Invalid response, no nonce given.N(
R�RR.RpRbR-R,RoR2R�(RR�((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_noNonce�s	cCsJ|jt|jj|j�|j|jj�}|jt	|�d�dS(sp
        L{DigestCredentialFactory.decode} raises L{LoginFailed} if the response
        has no opaque.
        s"Invalid response, no opaque given.N(
R�RR.RpRbR-R,RoR2R�(RR�((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyt
test_noOpaque�s		c
Cs�|jj|jj�}d}|jd|dd|j||�d|d|d�}|jj||j|jj�}|jt	t
|��d|j|j|j
f}t|�}|j|j|j���|jd�|j|j|j���dS(	s�
        L{DigestCredentialFactory.decode} returns an L{IUsernameDigestHash}
        provider which can verify a hash of the form 'username:realm:password'.
        RjR5RNRkRls%s:%s:%sRmN(R.RnR,RoRbRiRpR-RqRRR%R'R&Rt	checkHashR1tupdateRs(RReRkRtRut	cleartextthash((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_checkHash�s	


cCsZt|j|j�}|j|jj�}|jt|jd|d|jj�}|j	t
|�d�dtd�}|jt|j||d|jj�}|j	t
|�d�|jt|jd|d|jj�}|j	t
|�d�dtd|d|jjf�}|jt|j||d|jj�}|j	t
|�d�d	S(
s�
        L{DigestCredentialFactory.decode} raises L{LoginFailed} when the opaque
        value does not contain all the required parts.
        t	badOpaqueR5s&Invalid response, invalid opaque valuesfoo-snonce,clientipRZs%s,%s,foobars,Invalid response, invalid opaque/time valuesN(RR(R'RnR,RoR�Rt
_verifyOpaqueR2R�R(RR.RetexcR�((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_invalidOpaque�sH		cCs�t|j|j�}|j|jj�}|jd|jj�}|jt|j	||d|jj�}|j
t|�d�|jt|j	|d|jj�}|j
t|�d�dS(s�
        L{DigestCredentialFactory.decode} raises L{LoginFailed} when the given
        nonce from the response does not match the nonce encoded in the opaque.
        t
1234567890R5s2Invalid response, incompatible opaque/nonce valuesRZN(RR(R'RnR,Rot_generateOpaqueR�RR�R2R�(RR.RetbadNonceOpaqueR�((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_incompatibleNonces.		cCs�t|j|j�}|j|jj�}d}|j|jj|�|j|d|�}|jt	|j
||d|jj�dS(s�
        L{DigestCredentialFactory.decode} raises L{LoginFailed} when the
        request comes from a client IP other than what is encoded in the
        opaque.
        s10.0.0.1R5N(RR(R'RnR,RotassertNotEqualR�R�RR�(RR.Ret
badAddressR�((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_incompatibleClientIP6scCs�t|j|j�}|j|jj�}d|d|jjdf}t||j�j�}t	|�}d||j
d�f}|jt|j
||d|jj�dS(s�
        L{DigestCredentialFactory.decode} raises L{LoginFailed} when the given
        opaque is older than C{DigestCredentialFactory.CHALLENGE_LIFETIME_SECS}
        s%s,%s,%sR5s
-137876876s%s-%ss
N(RR(R'RnR,RoRRR1RR
R�RR�(RR.RetkeyR;tekeytoldNonceOpaque((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyt
test_oldNonceNs	
	
cCs�t|j|j�}|j|jj�}d|d|jjdf}t|d�j�}d|t|�f}|j	t
|j||d|jj�dS(s~
        L{DigestCredentialFactory.decode} raises L{LoginFailed} when the opaque
        checksum fails verification.
        s%s,%s,%sR5Rsthis is not the right pkeys%s-%sN(RR(R'RnR,RoRR1RR�RR�(RR.ReR�R;tbadChecksum((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_mismatchedOpaqueChecksumgs	
	
cCsXd	d
df}xB|D]:\}}}}|jttd|||ddd|�qWdS(s�
        L{calcHA1} raises L{TypeError} when any of the pszUsername, pszRealm,
        or pszPassword arguments are specified with the preHA1 keyword
        argument.
        tuserR'R&tpreHA1RR5R)N(susersrealmspasswordspreHA1(NsrealmNspreHA1(NNspasswordspreHA1(R@R�t	TypeErrorR(Rt	argumentstpszUsernametpszRealmtpszPasswordR�((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_incompatibleCalcHA1Optionss	cCs-|jjddd�}|jd|�dS(s�
        L{DigestCredentialFactory._generateOpaque} returns a value without
        newlines, regardless of the length of the nonce.
        slong nonce i
s
N(R.R�R@tassertNotIn(RRl((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyttest_noNewlineOpaque�s	()RRRR/RR9R=R?RCRFRGRHRIRJRORPRQRVRWRXtTrueRbRiRvRxRzR{R|R~R�R�R�R�R�R�R�R�R�R�R�R�(((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyR.sJ	
		

													&		
					 			
	
		1	!				N(Rtzope.interface.verifyRttwisted.trial.unittestRttwisted.python.hashlibRRttwisted.internet.addressRttwisted.cred.errorRttwisted.cred.credentialsRRRR	R
RRR(((s@/usr/lib/python2.7/dist-packages/twisted/test/test_digestauth.pyt<module>s