import json from datetime import datetime, date, time from django.conf import settings from django.core.urlresolvers import reverse from django.test.client import Client, MULTIPART_CONTENT from django.test import TestCase from django.contrib.auth.models import User from django.contrib.auth import get_user_model from django.core import mail from django.test.utils import override_settings from rest_framework.serializers import _resolve_model from rest_framework import status class APIClient(Client): def patch(self, path, data='', content_type=MULTIPART_CONTENT, follow=False, **extra): return self.generic('PATCH', path, data, content_type, **extra) def options(self, path, data='', content_type=MULTIPART_CONTENT, follow=False, **extra): return self.generic('OPTIONS', path, data, content_type, **extra) class CustomJSONEncoder(json.JSONEncoder): """ Convert datetime/date objects into isoformat """ def default(self, obj): if isinstance(obj, (datetime, date, time)): return obj.isoformat() else: return super(CustomJSONEncoder, self).default(obj) class BaseAPITestCase(object): """ base for API tests: * easy request calls, f.e.: self.post(url, data), self.get(url) * easy status check, f.e.: self.post(url, data, status_code=200) """ def send_request(self, request_method, *args, **kwargs): request_func = getattr(self.client, request_method) status_code = None if not 'content_type' in kwargs and request_method != 'get': kwargs['content_type'] = 'application/json' if 'data' in kwargs and request_method != 'get' and kwargs['content_type'] == 'application/json': data = kwargs.get('data', '') kwargs['data'] = json.dumps(data, cls=CustomJSONEncoder) if 'status_code' in kwargs: status_code = kwargs.pop('status_code') # check_headers = kwargs.pop('check_headers', True) if hasattr(self, 'token'): kwargs['HTTP_AUTHORIZATION'] = 'Token %s' % self.token if hasattr(self, 'company_token'): kwargs[ 'HTTP_AUTHORIZATION'] = 'Company-Token %s' % self.company_token self.response = request_func(*args, **kwargs) is_json = bool( filter(lambda x: 'json' in x, self.response._headers['content-type'])) if is_json and self.response.content: self.response.json = json.loads(self.response.content) else: self.response.json = {} if status_code: self.assertEqual(self.response.status_code, status_code) return self.response def post(self, *args, **kwargs): return self.send_request('post', *args, **kwargs) def get(self, *args, **kwargs): return self.send_request('get', *args, **kwargs) def patch(self, *args, **kwargs): return self.send_request('patch', *args, **kwargs) def put(self, *args, **kwargs): return self.send_request('put', *args, **kwargs) def delete(self, *args, **kwargs): return self.send_request('delete', *args, **kwargs) def options(self, *args, **kwargs): return self.send_request('options', *args, **kwargs) def post_file(self, *args, **kwargs): kwargs['content_type'] = MULTIPART_CONTENT return self.send_request('post', *args, **kwargs) def get_file(self, *args, **kwargs): content_type = None if 'content_type' in kwargs: content_type = kwargs.pop('content_type') response = self.send_request('get', *args, **kwargs) if content_type: self.assertEqual( bool(filter(lambda x: content_type in x, response._headers['content-type'])), True) return response def init(self): settings.DEBUG = True self.client = APIClient() # ----------------------- # T E S T H E R E # ----------------------- class APITestCase1(TestCase, BaseAPITestCase): """ Case #1: - user profile: defined - custom registration: backend defined """ USERNAME = 'person' PASS = 'person' EMAIL = "person1@world.com" NEW_PASS = 'new-test-pass' REGISTRATION_VIEW = 'rest_auth.runtests.RegistrationView' # data without user profile REGISTRATION_DATA = { "username": USERNAME, "password1": PASS, "password2": PASS } REGISTRATION_DATA_WITH_EMAIL = REGISTRATION_DATA.copy() REGISTRATION_DATA_WITH_EMAIL['email'] = EMAIL BASIC_USER_DATA = { 'first_name': "John", 'last_name': 'Smith', 'email': EMAIL } USER_DATA = BASIC_USER_DATA.copy() USER_DATA['newsletter_subscribe'] = True def setUp(self): self.init() self.login_url = reverse('rest_login') self.logout_url = reverse('rest_logout') self.password_change_url = reverse('rest_password_change') self.register_url = reverse('rest_register') self.password_reset_url = reverse('rest_password_reset') self.user_url = reverse('rest_user_details') self.veirfy_email_url = reverse('verify_email') def _login(self): payload = { "username": self.USERNAME, "password": self.PASS } self.post(self.login_url, data=payload, status_code=status.HTTP_200_OK) def _logout(self): self.post(self.logout_url, status=status.HTTP_200_OK) def _generate_uid_and_token(self, user): result = {} from django.utils.encoding import force_bytes from django.contrib.auth.tokens import default_token_generator from django import VERSION if VERSION[1] == 5: from django.utils.http import int_to_base36 result['uid'] = int_to_base36(user.pk) else: from django.utils.http import urlsafe_base64_encode result['uid'] = urlsafe_base64_encode(force_bytes(user.pk)) result['token'] = default_token_generator.make_token(user) return result def test_login(self): payload = { "username": self.USERNAME, "password": self.PASS } # there is no users in db so it should throw error (400) self.post(self.login_url, data=payload, status_code=400) self.post(self.password_change_url, status_code=403) # create user user = User.objects.create_user(self.USERNAME, '', self.PASS) self.post(self.login_url, data=payload, status_code=200) self.assertEqual('key' in self.response.json.keys(), True) self.token = self.response.json['key'] self.post(self.password_change_url, status_code=400) # test inactive user user.is_active = False user.save() self.post(self.login_url, data=payload, status_code=400) # test wrong username/password payload = { "username": self.USERNAME + '?', "password": self.PASS } self.post(self.login_url, data=payload, status_code=400) # test empty payload self.post(self.login_url, data={}, status_code=400) def test_password_change(self): login_payload = { "username": self.USERNAME, "password": self.PASS } User.objects.create_user(self.USERNAME, '', self.PASS) self.post(self.login_url, data=login_payload, status_code=200) self.token = self.response.json['key'] new_password_payload = { "new_password1": "new_person", "new_password2": "new_person" } self.post(self.password_change_url, data=new_password_payload, status_code=200) # user should not be able to login using old password self.post(self.login_url, data=login_payload, status_code=400) # new password should work login_payload['password'] = new_password_payload['new_password1'] self.post(self.login_url, data=login_payload, status_code=200) # pass1 and pass2 are not equal new_password_payload = { "new_password1": "new_person1", "new_password2": "new_person" } self.post(self.password_change_url, data=new_password_payload, status_code=400) # send empty payload self.post(self.password_change_url, data={}, status_code=400) def test_password_reset(self): user = User.objects.create_user(self.USERNAME, self.EMAIL, self.PASS) # call password reset mail_count = len(mail.outbox) payload = {'email': self.EMAIL} self.post(self.password_reset_url, data=payload, status_code=200) self.assertEqual(len(mail.outbox), mail_count + 1) url_kwargs = self._generate_uid_and_token(user) data = { 'new_password1': self.NEW_PASS, 'new_password2': self.NEW_PASS, 'uid': url_kwargs['uid'], 'token': url_kwargs['token'] } url = reverse('rest_password_reset_confirm') self.post(url, data=data, status_code=200) payload = { "username": self.USERNAME, "password": self.NEW_PASS } self.post(self.login_url, data=payload, status_code=200) def test_user_details(self): user = User.objects.create_user(self.USERNAME, self.EMAIL, self.PASS) payload = { "username": self.USERNAME, "password": self.PASS } self.post(self.login_url, data=payload, status_code=200) self.token = self.response.json['key'] self.get(self.user_url, status_code=200) self.patch(self.user_url, data=self.BASIC_USER_DATA, status_code=200) user = User.objects.get(pk=user.pk) self.assertEqual(user.first_name, self.response.json['first_name']) self.assertEqual(user.last_name, self.response.json['last_name']) self.assertEqual(user.email, self.response.json['email']) def test_registration(self): user_count = User.objects.all().count() # test empty payload self.post(self.register_url, data={}, status_code=400) self.post(self.register_url, data=self.REGISTRATION_DATA, status_code=201) self.assertEqual(User.objects.all().count(), user_count + 1) new_user = get_user_model().objects.latest('id') self.assertEqual(new_user.username, self.REGISTRATION_DATA['username']) self._login() self._logout() @override_settings( ACCOUNT_EMAIL_VERIFICATION='mandatory', ACCOUNT_EMAIL_REQUIRED=True ) def test_registration_with_email_verification(self): user_count = User.objects.all().count() mail_count = len(mail.outbox) # test empty payload self.post(self.register_url, data={}, status_code=status.HTTP_400_BAD_REQUEST) self.post(self.register_url, data=self.REGISTRATION_DATA_WITH_EMAIL, status_code=status.HTTP_201_CREATED) self.assertEqual(User.objects.all().count(), user_count + 1) self.assertEqual(len(mail.outbox), mail_count + 1) new_user = get_user_model().objects.latest('id') self.assertEqual(new_user.username, self.REGISTRATION_DATA['username']) # email is not verified yet payload = { "username": self.USERNAME, "password": self.PASS } self.post(self.login_url, data=payload, status=status.HTTP_400_BAD_REQUEST) # veirfy email email_confirmation = new_user.emailaddress_set.get(email=self.EMAIL)\ .emailconfirmation_set.order_by('-created')[0] self.post(self.veirfy_email_url, data={"key": email_confirmation.key}, status_code=status.HTTP_200_OK) # try to login again self._login() self._logout()