add Auth-Token-Timeout to http headers

This commit is contained in:
Chris Meyers
2015-09-22 12:59:36 -04:00
parent fdace7e10d
commit eb8219fd9f
5 changed files with 45 additions and 5 deletions
+2 -2
View File
@@ -460,8 +460,8 @@ class BaseTestMixin(QueueTestMixin, MockCommonlySlowTestMixin):
assert response.status_code == expect, "expected status %s, got %s for url=%s as auth=%s: %s" % (expect, response.status_code, url, auth, response.content)
if method_name == 'head':
self.assertFalse(response.content)
#if return_response_object:
# return response
if return_response_object:
return response
if response.status_code not in [204, 405] and method_name != 'head' and response.content:
# no JSON responses in these at least for now, 409 should probably return some (FIXME)
if response['Content-Type'].startswith('application/json'):
+22 -1
View File
@@ -15,7 +15,28 @@ from django.core.urlresolvers import reverse
from awx.main.models import * # noqa
from awx.main.tests.base import BaseTest
__all__ = ['AuthTokenProxyTest', 'UsersTest', 'LdapTest']
__all__ = ['AuthTokenTimeoutTest', 'AuthTokenProxyTest', 'UsersTest', 'LdapTest']
class AuthTokenTimeoutTest(BaseTest):
def setUp(self):
super(AuthTokenTimeoutTest, self).setUp()
self.setup_users()
self.setup_instances()
def test_auth_token_timeout_exists(self):
auth_token_url = reverse('api:auth_token_view')
dashboard_url = reverse('api:dashboard_view')
data = dict(zip(('username', 'password'), self.get_super_credentials()))
auth = self.post(auth_token_url, data, expect=200)
kwargs = {
'HTTP_X_AUTH_TOKEN': 'Token %s' % auth['token']
}
response = self._generic_rest(dashboard_url, expect=200, method='get', return_response_object=True, client_kwargs=kwargs)
self.assertIn('Auth-Token-Timeout', response)
self.assertEqual(response['Auth-Token-Timeout'], str(settings.AUTH_TOKEN_EXPIRATION))
'''
Ensure ips from the X-Forwarded-For get honored and used in auth tokens