zware/awx
1
0
Fork 0
mirror of https://github.com/ZwareBear/awx.git synced 2026-05-13 05:08:35 -05:00
Code Issues Packages Projects Releases Wiki Activity

don't allow users to specify $encrypted$ for encrypted credential fields

Browse Source 
this keyword only has value when you _update_ an existing credential
This commit is contained in:
Ryan Petrello
2020-07-01 15:53:09 -04:00
parent e3e69b4c6b
commit 1434e5812f
2 changed files with 24 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
awx/main/tests/functional/api/test_credential.py
+16
View File
@@ -1153,6 +1153,22 @@ def test_cloud_credential_type_mutability(patch, organization, admin, credential
assert response.status_code == 200
@pytest.mark.django_db
@pytest.mark.parametrize('field', ['password', 'ssh_key_data'])
def test_secret_fields_cannot_be_special_encrypted_variable(post, organization, admin, credentialtype_ssh, field):
params = {
'name': 'Best credential ever',
'credential_type': credentialtype_ssh.id,
'inputs': {
'username': 'joe',
field: '$encrypted$',
},
'organization': organization.id,
}
response = post(reverse('api:credential_list'), params, admin, status=400)
assert str(response.data['inputs'][0]) == f'$encrypted$ is a reserved keyword, and cannot be used for {field}.'
@pytest.mark.django_db
def test_ssh_unlock_needed(put, organization, admin, credentialtype_ssh):
params = {