mirror of
https://github.com/spl0k/supysonic.git
synced 2024-09-19 19:01:03 +00:00
273 lines
10 KiB
Python
273 lines
10 KiB
Python
# This file is part of Supysonic.
|
|
# Supysonic is a Python implementation of the Subsonic server API.
|
|
#
|
|
# Copyright (C) 2017-2018 Alban 'spl0k' Féron
|
|
#
|
|
# Distributed under terms of the GNU AGPLv3 license.
|
|
|
|
import unittest
|
|
import uuid
|
|
|
|
from flask import escape
|
|
from pony.orm import db_session
|
|
|
|
from supysonic.db import User, ClientPrefs
|
|
|
|
from .frontendtestbase import FrontendTestBase
|
|
|
|
|
|
class UserTestCase(FrontendTestBase):
|
|
def setUp(self):
|
|
super().setUp()
|
|
|
|
with db_session:
|
|
self.users = {u.name: u.id for u in User.select()}
|
|
|
|
def test_index(self):
|
|
self._login("bob", "B0b")
|
|
rv = self.client.get("/user", follow_redirects=True)
|
|
self.assertIn("There's nothing much to see", rv.data)
|
|
self.assertNotIn("Users", rv.data)
|
|
self._logout()
|
|
|
|
self._login("alice", "Alic3")
|
|
rv = self.client.get("/user")
|
|
self.assertIn("Users", rv.data)
|
|
|
|
def test_details(self):
|
|
self._login("alice", "Alic3")
|
|
rv = self.client.get("/user/string", follow_redirects=True)
|
|
self.assertIn("badly formed", rv.data)
|
|
rv = self.client.get("/user/" + str(uuid.uuid4()), follow_redirects=True)
|
|
self.assertIn("No such user", rv.data)
|
|
rv = self.client.get("/user/" + str(self.users["bob"]))
|
|
self.assertIn("bob", rv.data)
|
|
self._logout()
|
|
|
|
with db_session:
|
|
ClientPrefs(user=User[self.users["bob"]], client_name="tests")
|
|
|
|
self._login("bob", "B0b")
|
|
rv = self.client.get("/user/" + str(self.users["alice"]), follow_redirects=True)
|
|
self.assertIn("There's nothing much to see", rv.data)
|
|
self.assertNotIn("<h2>bob</h2>", rv.data)
|
|
rv = self.client.get("/user/me")
|
|
self.assertIn("<h2>bob</h2>", rv.data)
|
|
self.assertIn("tests", rv.data)
|
|
|
|
def test_update_client_prefs(self):
|
|
self._login("alice", "Alic3")
|
|
rv = self.client.post("/user/me")
|
|
self.assertIn("updated", rv.data) # does nothing, says it's updated anyway
|
|
# error cases, silently ignored
|
|
self.client.post("/user/me", data={"garbage": "trash"})
|
|
self.client.post("/user/me", data={"a_b_c_d_e_f": "g_h_i_j_k"})
|
|
self.client.post("/user/me", data={"_l": "m"})
|
|
self.client.post("/user/me", data={"n_": "o"})
|
|
self.client.post("/user/me", data={"inexisting_client": "setting"})
|
|
|
|
with db_session:
|
|
ClientPrefs(user=User[self.users["alice"]], client_name="tests")
|
|
|
|
rv = self.client.post(
|
|
"/user/me", data={"tests_format": "mp3", "tests_bitrate": 128}
|
|
)
|
|
self.assertIn("updated", rv.data)
|
|
with db_session:
|
|
prefs = ClientPrefs[User[self.users["alice"]], "tests"]
|
|
self.assertEqual(prefs.format, "mp3")
|
|
self.assertEqual(prefs.bitrate, 128)
|
|
|
|
self.client.post("/user/me", data={"tests_delete": 1})
|
|
with db_session:
|
|
self.assertEqual(ClientPrefs.select().count(), 0)
|
|
|
|
def test_change_username_get(self):
|
|
self._login("bob", "B0b")
|
|
rv = self.client.get("/user/whatever/changeusername", follow_redirects=True)
|
|
self.assertIn("There's nothing much to see", rv.data)
|
|
self._logout()
|
|
|
|
self._login("alice", "Alic3")
|
|
rv = self.client.get("/user/whatever/changeusername", follow_redirects=True)
|
|
self.assertIn("badly formed", rv.data)
|
|
rv = self.client.get(
|
|
"/user/{}/changeusername".format(uuid.uuid4()), follow_redirects=True
|
|
)
|
|
self.assertIn("No such user", rv.data)
|
|
self.client.get("/user/{}/changeusername".format(self.users["bob"]))
|
|
|
|
def test_change_username_post(self):
|
|
self._login("alice", "Alic3")
|
|
rv = self.client.post("/user/whatever/changeusername", follow_redirects=True)
|
|
self.assertIn("badly formed", rv.data)
|
|
rv = self.client.post(
|
|
"/user/{}/changeusername".format(uuid.uuid4()), follow_redirects=True
|
|
)
|
|
self.assertIn("No such user", rv.data)
|
|
|
|
path = "/user/{}/changeusername".format(self.users["bob"])
|
|
rv = self.client.post(path, follow_redirects=True)
|
|
self.assertIn("required", rv.data)
|
|
rv = self.client.post(path, data={"user": "bob"}, follow_redirects=True)
|
|
self.assertIn("No changes", rv.data)
|
|
rv = self.client.post(
|
|
path, data={"user": "b0b", "admin": 1}, follow_redirects=True
|
|
)
|
|
self.assertIn("updated", rv.data)
|
|
self.assertIn("b0b", rv.data)
|
|
with db_session:
|
|
bob = User[self.users["bob"]]
|
|
self.assertEqual(bob.name, "b0b")
|
|
self.assertTrue(bob.admin)
|
|
rv = self.client.post(path, data={"user": "alice"}, follow_redirects=True)
|
|
with db_session:
|
|
self.assertEqual(User[self.users["bob"]].name, "b0b")
|
|
|
|
def test_change_mail_get(self):
|
|
self._login("alice", "Alic3")
|
|
self.client.get("/user/me/changemail")
|
|
# whatever
|
|
|
|
def test_change_mail_post(self):
|
|
self._login("alice", "Alic3")
|
|
self.client.post("/user/me/changemail")
|
|
# whatever
|
|
|
|
def test_change_password_get(self):
|
|
self._login("alice", "Alic3")
|
|
rv = self.client.get("/user/me/changepass")
|
|
self.assertIn("Current password", rv.data)
|
|
rv = self.client.get("/user/{}/changepass".format(self.users["bob"]))
|
|
self.assertNotIn("Current password", rv.data)
|
|
|
|
def test_change_password_post(self):
|
|
self._login("alice", "Alic3")
|
|
path = "/user/me/changepass"
|
|
rv = self.client.post(path)
|
|
self.assertIn("required", rv.data)
|
|
rv = self.client.post(path, data={"current": "alice"})
|
|
self.assertIn("required", rv.data)
|
|
rv = self.client.post(path, data={"new": "alice"})
|
|
self.assertIn("required", rv.data)
|
|
rv = self.client.post(path, data={"current": "alice", "new": "alice"})
|
|
self.assertIn("password and its confirmation don", rv.data)
|
|
rv = self.client.post(
|
|
path, data={"current": "alice", "new": "alice", "confirm": "alice"}
|
|
)
|
|
self.assertIn("Wrong password", rv.data)
|
|
self._logout()
|
|
rv = self._login("alice", "Alic3")
|
|
self.assertIn("Logged in", rv.data)
|
|
rv = self.client.post(
|
|
path,
|
|
data={"current": "Alic3", "new": "alice", "confirm": "alice"},
|
|
follow_redirects=True,
|
|
)
|
|
self.assertIn("changed", rv.data)
|
|
self._logout()
|
|
rv = self._login("alice", "alice")
|
|
self.assertIn("Logged in", rv.data)
|
|
|
|
path = "/user/{}/changepass".format(self.users["bob"])
|
|
rv = self.client.post(path)
|
|
self.assertIn("required", rv.data)
|
|
rv = self.client.post(path, data={"new": "alice"})
|
|
self.assertIn("password and its confirmation don", rv.data)
|
|
rv = self.client.post(
|
|
path, data={"new": "alice", "confirm": "alice"}, follow_redirects=True
|
|
)
|
|
self.assertIn("changed", rv.data)
|
|
self._logout()
|
|
rv = self._login("bob", "alice")
|
|
self.assertIn("Logged in", rv.data)
|
|
|
|
def test_add_get(self):
|
|
self._login("bob", "B0b")
|
|
rv = self.client.get("/user/add", follow_redirects=True)
|
|
self.assertIn("There's nothing much to see", rv.data)
|
|
self.assertNotIn("Add User", rv.data)
|
|
self._logout()
|
|
|
|
self._login("alice", "Alic3")
|
|
rv = self.client.get("/user/add")
|
|
self.assertIn("Add User", rv.data)
|
|
|
|
def test_add_post(self):
|
|
self._login("alice", "Alic3")
|
|
rv = self.client.post("/user/add")
|
|
self.assertIn("required", rv.data)
|
|
rv = self.client.post("/user/add", data={"user": "user"})
|
|
self.assertIn("Please provide a password", rv.data)
|
|
rv = self.client.post("/user/add", data={"passwd": "passwd"})
|
|
self.assertIn("required", rv.data)
|
|
rv = self.client.post("/user/add", data={"user": "name", "passwd": "passwd"})
|
|
self.assertIn("passwords don", rv.data)
|
|
rv = self.client.post(
|
|
"/user/add",
|
|
data={"user": "alice", "passwd": "passwd", "passwd_confirm": "passwd"},
|
|
)
|
|
self.assertIn(escape("User 'alice' exists"), rv.data)
|
|
with db_session:
|
|
self.assertEqual(User.select().count(), 2)
|
|
|
|
rv = self.client.post(
|
|
"/user/add",
|
|
data={
|
|
"user": "user",
|
|
"passwd": "passwd",
|
|
"passwd_confirm": "passwd",
|
|
"admin": 1,
|
|
},
|
|
follow_redirects=True,
|
|
)
|
|
self.assertIn("added", rv.data)
|
|
with db_session:
|
|
self.assertEqual(User.select().count(), 3)
|
|
self._logout()
|
|
rv = self._login("user", "passwd")
|
|
self.assertIn("Logged in", rv.data)
|
|
|
|
def test_delete(self):
|
|
path = "/user/del/{}".format(self.users["bob"])
|
|
|
|
self._login("bob", "B0b")
|
|
rv = self.client.get(path, follow_redirects=True)
|
|
self.assertIn("There's nothing much to see", rv.data)
|
|
with db_session:
|
|
self.assertEqual(User.select().count(), 2)
|
|
self._logout()
|
|
|
|
self._login("alice", "Alic3")
|
|
rv = self.client.get("/user/del/string", follow_redirects=True)
|
|
self.assertIn("badly formed", rv.data)
|
|
rv = self.client.get("/user/del/" + str(uuid.uuid4()), follow_redirects=True)
|
|
self.assertIn("No such user", rv.data)
|
|
rv = self.client.get(path, follow_redirects=True)
|
|
self.assertIn("Deleted", rv.data)
|
|
with db_session:
|
|
self.assertEqual(User.select().count(), 1)
|
|
self._logout()
|
|
rv = self._login("bob", "B0b")
|
|
self.assertIn("Wrong username or password", rv.data)
|
|
|
|
def test_lastfm_link(self):
|
|
self._login("alice", "Alic3")
|
|
rv = self.client.get("/user/me/lastfm/link", follow_redirects=True)
|
|
self.assertIn("Missing LastFM auth token", rv.data)
|
|
rv = self.client.get(
|
|
"/user/me/lastfm/link",
|
|
query_string={"token": "abcdef"},
|
|
follow_redirects=True,
|
|
)
|
|
self.assertIn("No API key set", rv.data)
|
|
|
|
def test_lastfm_unlink(self):
|
|
self._login("alice", "Alic3")
|
|
rv = self.client.get("/user/me/lastfm/unlink", follow_redirects=True)
|
|
self.assertIn("Unlinked", rv.data)
|
|
|
|
|
|
if __name__ == "__main__":
|
|
unittest.main()
|