unrhodecode/rhodecode/apps/admin/tests/test_admin_users_ssh_keys.py
2025-01-13 17:47:37 +01:00

150 lines
5.9 KiB
Python

# Copyright (C) 2010-2024 RhodeCode GmbH
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License, version 3
# (only), as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
#
# This program is dual-licensed. If you wish to learn more about the
# RhodeCode Enterprise Edition, including its added features, Support services,
# and proprietary license terms, please see https://rhodecode.com/licenses/
import pytest
from rhodecode.model.db import User, UserSshKeys
from rhodecode.tests import TestController, assert_session_flash
from rhodecode.tests.fixtures.rc_fixture import Fixture
from rhodecode.tests.routes import route_path
fixture = Fixture()
class TestAdminUsersSshKeysView(TestController):
INVALID_KEY = """\
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDk+77sjDzVeB6vevJsuZds1iNU5
LANOa5CU5G/9JYIA6RYsWWMO7mbsR82IUckdqOHmxSykfR1D1TdluyIpQLrwgH5kb
n8FkVI8zBMCKakxowvN67B0R7b1BT4PPzW2JlOXei/m9W12ZY484VTow6/B+kf2Q8
cP8tmCJmKWZma5Em7OTUhvjyQVNz3v7HfeY5Hq0Ci4ECJ59hepFDabJvtAXg9XrI6
jvdphZTc30I4fG8+hBHzpeFxUGvSGNtXPUbwaAY8j/oHYrTpMgkj6pUEFsiKfC5zP
qPFR5HyKTCHW0nFUJnZsbyFT5hMiF/hZkJc9A0ZbdSvJwCRQ/g3bmdL
your_email@example.com
"""
VALID_KEY = (
"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDk+77sjDzVeB6vev"
"JsuZds1iNU5LANOa5CU5G/9JYIA6RYsWWMO7mbsR82IUckdqOHmxSy"
"kfR1D1TdluyIpQLrwgH5kbn8FkVI8zBMCKakxowvN67B0R7b1BT4PP"
"zW2JlOXei/m9W12ZY484VTow6/B+kf2Q8cP8tmCJmKWZma5Em7OTUh"
"vjyQVNz3v7HfeY5Hq0Ci4ECJ59hepFDabJvtAXg9XrI6jvdphZTc30"
"I4fG8+hBHzpeFxUGvSGNtXPUbwaAY8j/oHYrTpMgkj6pUEFsiKfC5zPq"
"PFR5HyKTCHW0nFUJnZsbyFT5hMiF/hZkJc9A0ZbdSvJwCRQ/g3bmdL "
"your_email@example.com"
)
FINGERPRINT = "MD5:01:4f:ad:29:22:6e:01:37:c9:d2:52:26:52:b0:2d:93"
def test_ssh_keys_default_user(self):
self.log_user()
user = User.get_default_user()
self.app.get(route_path("edit_user_ssh_keys", user_id=user.user_id), status=302)
def test_add_ssh_key_error(self, user_util):
self.log_user()
user = user_util.create_user()
user_id = user.user_id
key_data = self.INVALID_KEY
desc = "MY SSH KEY"
response = self.app.post(
route_path("edit_user_ssh_keys_add", user_id=user_id),
{"description": desc, "key_data": key_data, "csrf_token": self.csrf_token},
)
assert_session_flash(response, "An error occurred during ssh key saving: Unable to decode the key")
def test_ssh_key_duplicate(self, user_util):
self.log_user()
user = user_util.create_user()
user_id = user.user_id
key_data = self.VALID_KEY
desc = "MY SSH KEY"
response = self.app.post(
route_path("edit_user_ssh_keys_add", user_id=user_id),
{"description": desc, "key_data": key_data, "csrf_token": self.csrf_token},
)
assert_session_flash(response, "Ssh Key successfully created")
response.follow() # flush session flash
# add the same key AGAIN
desc = "MY SSH KEY"
response = self.app.post(
route_path("edit_user_ssh_keys_add", user_id=user_id),
{"description": desc, "key_data": key_data, "csrf_token": self.csrf_token},
)
err = "Such key with fingerprint `{}` already exists, please use a different one".format(self.FINGERPRINT)
assert_session_flash(response, "An error occurred during ssh key saving: {}".format(err))
def test_add_ssh_key(self, user_util):
self.log_user()
user = user_util.create_user()
user_id = user.user_id
key_data = self.VALID_KEY
desc = "MY SSH KEY"
response = self.app.post(
route_path("edit_user_ssh_keys_add", user_id=user_id),
{"description": desc, "key_data": key_data, "csrf_token": self.csrf_token},
)
assert_session_flash(response, "Ssh Key successfully created")
response = response.follow()
response.mustcontain(desc)
def test_delete_ssh_key(self, user_util):
self.log_user()
user = user_util.create_user()
user_id = user.user_id
key_data = self.VALID_KEY
desc = "MY SSH KEY"
response = self.app.post(
route_path("edit_user_ssh_keys_add", user_id=user_id),
{"description": desc, "key_data": key_data, "csrf_token": self.csrf_token},
)
assert_session_flash(response, "Ssh Key successfully created")
response = response.follow() # flush the Session flash
# now delete our key
keys = UserSshKeys.query().filter(UserSshKeys.user_id == user_id).all()
assert 1 == len(keys)
response = self.app.post(
route_path("edit_user_ssh_keys_delete", user_id=user_id),
{"del_ssh_key": keys[0].ssh_key_id, "csrf_token": self.csrf_token},
)
assert_session_flash(response, "Ssh key successfully deleted")
keys = UserSshKeys.query().filter(UserSshKeys.user_id == user_id).all()
assert 0 == len(keys)
def test_generate_keypair(self, user_util):
self.log_user()
user = user_util.create_user()
user_id = user.user_id
response = self.app.get(route_path("edit_user_ssh_keys_generate_keypair", user_id=user_id))
response.mustcontain("Private key")
response.mustcontain("Public key")
response.mustcontain("-----BEGIN PRIVATE KEY-----")