mirror of
https://github.com/ZwareBear/awx.git
synced 2026-05-15 02:48:37 -05:00
add Auth-Token-Timeout to http headers
This commit is contained in:
@@ -460,8 +460,8 @@ class BaseTestMixin(QueueTestMixin, MockCommonlySlowTestMixin):
|
||||
assert response.status_code == expect, "expected status %s, got %s for url=%s as auth=%s: %s" % (expect, response.status_code, url, auth, response.content)
|
||||
if method_name == 'head':
|
||||
self.assertFalse(response.content)
|
||||
#if return_response_object:
|
||||
# return response
|
||||
if return_response_object:
|
||||
return response
|
||||
if response.status_code not in [204, 405] and method_name != 'head' and response.content:
|
||||
# no JSON responses in these at least for now, 409 should probably return some (FIXME)
|
||||
if response['Content-Type'].startswith('application/json'):
|
||||
|
||||
+22
-1
@@ -15,7 +15,28 @@ from django.core.urlresolvers import reverse
|
||||
from awx.main.models import * # noqa
|
||||
from awx.main.tests.base import BaseTest
|
||||
|
||||
__all__ = ['AuthTokenProxyTest', 'UsersTest', 'LdapTest']
|
||||
__all__ = ['AuthTokenTimeoutTest', 'AuthTokenProxyTest', 'UsersTest', 'LdapTest']
|
||||
|
||||
|
||||
class AuthTokenTimeoutTest(BaseTest):
|
||||
def setUp(self):
|
||||
super(AuthTokenTimeoutTest, self).setUp()
|
||||
self.setup_users()
|
||||
self.setup_instances()
|
||||
|
||||
def test_auth_token_timeout_exists(self):
|
||||
auth_token_url = reverse('api:auth_token_view')
|
||||
dashboard_url = reverse('api:dashboard_view')
|
||||
|
||||
data = dict(zip(('username', 'password'), self.get_super_credentials()))
|
||||
auth = self.post(auth_token_url, data, expect=200)
|
||||
kwargs = {
|
||||
'HTTP_X_AUTH_TOKEN': 'Token %s' % auth['token']
|
||||
}
|
||||
|
||||
response = self._generic_rest(dashboard_url, expect=200, method='get', return_response_object=True, client_kwargs=kwargs)
|
||||
self.assertIn('Auth-Token-Timeout', response)
|
||||
self.assertEqual(response['Auth-Token-Timeout'], str(settings.AUTH_TOKEN_EXPIRATION))
|
||||
|
||||
'''
|
||||
Ensure ips from the X-Forwarded-For get honored and used in auth tokens
|
||||
|
||||
Reference in New Issue
Block a user