Файловый менеджер - Редактировать - /opt/imh-python/lib/python3.9/site-packages/twisted/cred/test/__pycache__/test_digestauth.cpython-39.pyc
Ðазад
a k�h�] � @ s� d Z ddlZddlmZ ddlmZmZ ddlmZ ddl m Z m Z m Z m Z mZ ddlmZ ddlmZ dd lmZ dd lmZ d d � ZG d d� de �ZG dd� de�ZdS )z[ Tests for L{twisted.cred._digest} and the associated bits in L{twisted.cred.credentials}. � N)�hexlify)�md5�sha1)� verifyObject)�DigestCredentialFactory�IUsernameDigestHash�calcHA1�calcHA2� calcResponse)� LoginFailed)� IPv4Address)� networkString)�TestCasec C s t �| ��� S )N)�base64� b64encode�strip)�s� r ��/root/rpmbuild/BUILDROOT/imh-python39-modules-3.9.7-92.el8.x86_64/opt/imh-python/lib/python3.9/site-packages/twisted/cred/test/test_digestauth.pyr s r c s0 e Zd ZdZ� fdd�Zdd� Zdd� Z� ZS )�FakeDigestCredentialFactoryz\ A Fake Digest Credential Factory that generates a predictable nonce and opaque c s t � j|i |�� d| _d S )N� 0)�super�__init__� privateKey)�self�args�kwargs�� __class__r r r ' s z$FakeDigestCredentialFactory.__init__c C s dS )z) Generate a static nonce s 178288758716122392881254770685r �r r r r �_generateNonce+ s z*FakeDigestCredentialFactory._generateNoncec C s dS )z& Return a stable time r r r r r r �_getTime1 s z$FakeDigestCredentialFactory._getTime)�__name__� __module__� __qualname__�__doc__r r r! � __classcell__r r r r r ! s r c @ sZ e Zd ZdZdd� Zdefdd�Zdd� Zd d � Zdefd d �Z defd d�Z dd� Z dd� Z dd� Z dd� Zdefdd�Zdd� Zdd � Zdefd d �Zd d � Zd!d"� ZdOd$d%�Zd&d'� ZdPd(d)�Zd*d+� Zd,d-� Zd.d/� Zd0d1� Zd2d3� Z d4d5� Z d6d7� Z d8d9� Z d:d;� Z d<d=� Z!d>d?� Z"d@dA� Z#dBdC� Z$dDdE� Z%dFdG� Z&dHdI� Z'dJdK� Z(dLdM� Z)dNS )Q�DigestAuthTestsz� L{TestCase} mixin class which defines a number of tests for L{DigestCredentialFactory}. Because this mixin defines C{setUp}, it must be inherited before L{TestCase}. c C sR d| _ d| _d| _d| _d| _d| _d| _tdd d �| _d | _ t | j| j�| _ d S ) z> Create a DigestCredentialFactory for testing � foobars bazquuxs test realm� md5s 29fc54aa1641c6fa0e151419361c8f23� auths /write/ZTCPz10.2.3.4iu� � GETN) �username�password�realm� algorithm�cnonce�qop�urir � clientAddress�methodr �credentialFactoryr r r r �setUp? s zDigestAuthTests.setUpr) c C sT d}t || j| j| j|| j�}d�| j| j| jf�}t||��� �}| �||� dS )z� L{calcHA1} accepts the C{'md5'} algorithm and returns an MD5 hash of its parameters, excluding the nonce and cnonce. s abc123xyz� :N) r r, r. r- r0 �joinr �digest� assertEqual)r � _algorithm�_hash�nonce�hashA1�a1�expectedr r r �test_MD5HashA1N s �z DigestAuthTests.test_MD5HashA1c C s~ d}t d| j| j| j|| j�}| jd | j d | j }tt|��� �}|d | d | j }tt|��� �}| �||� dS )z� L{calcHA1} accepts the C{'md5-sess'} algorithm and returns an MD5 hash of its parameters, including the nonce and cnonce. s xyz321abc� md5-sessr7 N) r r, r. r- r0 r r r9 r: )r r= r> r? �ha1r@ r r r �test_MD5SessionHashA1[ s �z%DigestAuthTests.test_MD5SessionHashA1c C s | � dt� dS )z� L{calcHA1} accepts the C{'sha'} algorithm and returns a SHA hash of its parameters, excluding the nonce and cnonce. � shaN)rA r r r r r �test_SHAHashA1j s z DigestAuthTests.test_SHAHashA1c C sD d}t ||| jdd�}|d | j }t||��� �}| �||� dS )z� L{calcHA2} accepts the C{'md5'} algorithm and returns an MD5 hash of its arguments, excluding the entity hash for QOP other than C{'auth-int'}. r+ r* Nr7 �r r2 r r9 r: )r r; r< r4 �hashA2�a2r@ r r r �test_MD5HashA2Authq s z"DigestAuthTests.test_MD5HashA2Authc C sP d}d}t ||| jd|�}|d | j d | }t||��� �}| �||� dS )z� L{calcHA2} accepts the C{'md5'} algorithm and returns an MD5 hash of its arguments, including the entity hash for QOP of C{'auth-int'}. r+ s foobarbazs auth-intr7 NrG )r r; r< r4 ZhentityrH rI r@ r r r �test_MD5HashA2AuthInt} s z%DigestAuthTests.test_MD5HashA2AuthIntc C s | � d� dS )z� L{calcHA2} accepts the C{'md5-sess'} algorithm and QOP of C{'auth'} and returns the same value as it does for the C{'md5'} algorithm. rB N)rJ r r r r �test_MD5SessHashA2Auth� s z&DigestAuthTests.test_MD5SessHashA2Authc C s | � d� dS )z� L{calcHA2} accepts the C{'md5-sess'} algorithm and QOP of C{'auth-int'} and returns the same value as it does for the C{'md5'} algorithm. rB N)rK r r r r �test_MD5SessHashA2AuthInt� s z)DigestAuthTests.test_MD5SessHashA2AuthIntc C s | � dt� dS )z� L{calcHA2} accepts the C{'sha'} algorithm and returns a SHA hash of its arguments, excluding the entity hash for QOP other than C{'auth-int'}. rE N)rJ r r r r r �test_SHAHashA2Auth� s z"DigestAuthTests.test_SHAHashA2Authc C s | � dt� dS )z� L{calcHA2} accepts the C{'sha'} algorithm and returns a SHA hash of its arguments, including the entity hash for QOP of C{'auth-int'}. rE N)rK r r r r r �test_SHAHashA2AuthInt� s z%DigestAuthTests.test_SHAHashA2AuthIntc C sT d}d}d}|d | d | }t ||��� �}t||||ddd�}| �||� dS )z� L{calcResponse} accepts the C{'md5'} algorithm and returns an MD5 hash of its parameters, excluding the nonce count, client nonce, and QoP value if the nonce count and client nonce are L{None} � abc123� 789xyz� lmnopqr7 N�r r9 r r: ) r r; r< r> rH r= �responser@ r9 r r r �test_MD5HashResponse� s z$DigestAuthTests.test_MD5HashResponsec C s | � d� dS )z� L{calcResponse} accepts the C{'md5-sess'} algorithm and returns an MD5 hash of its parameters, excluding the nonce count, client nonce, and QoP value if the nonce count and client nonce are L{None} rB N)rU r r r r �test_MD5SessionHashResponse� s z+DigestAuthTests.test_MD5SessionHashResponsec C s | � dt� dS )z� L{calcResponse} accepts the C{'sha'} algorithm and returns a SHA hash of its parameters, excluding the nonce count, client nonce, and QoP value if the nonce count and client nonce are L{None} rE N)rU r r r r r �test_SHAHashResponse� s z$DigestAuthTests.test_SHAHashResponsec C sx d}d}d}d}d}d}|d | d | d | d | d | } t || ��� �} t|||||||�} | �| | � dS ) z� L{calcResponse} accepts the C{'md5'} algorithm and returns an MD5 hash of its parameters, including the nonce count, client nonce, and QoP value if they are specified. rP rQ rR s 00000004s abcxyz123r* r7 NrS ) r r; r< r> rH r= Z nonceCountZ clientNoncer1 rT r@ r9 r r r �test_MD5HashResponseExtra� sB �������� � �� �z)DigestAuthTests.test_MD5HashResponseExtrac C s | � d� dS )z� L{calcResponse} accepts the C{'md5-sess'} algorithm and returns an MD5 hash of its parameters, including the nonce count, client nonce, and QoP value if they are specified. rB N)rX r r r r � test_MD5SessionHashResponseExtra� s z0DigestAuthTests.test_MD5SessionHashResponseExtrac C s | � dt� dS )z� L{calcResponse} accepts the C{'sha'} algorithm and returns a SHA hash of its parameters, including the nonce count, client nonce, and QoP value if they are specified. rE N)rX r r r r r �test_SHAHashResponseExtra� s z)DigestAuthTests.test_SHAHashResponseExtraTc s� d|vr| j |d< d|vr$| j|d< d|vr6| j|d< d|vrH| j|d< d|vrZ| j|d< d|vrl| j|d< |rvd� nd� d �� fd d �|�� D ��S ) a� Format all given keyword arguments and their values suitably for use as the value of an HTTP header. @types quotes: C{bool} @param quotes: A flag indicating whether to quote the values of each field in the response. @param **kw: Keywords and C{bytes} values which will be treated as field name/value pairs to include in the result. @rtype: C{bytes} @return: The given fields formatted for use as an HTTP header value. r, r. r/ r1 r0 r2 � "� s , c s0 g | ](\}}|d urd� t|�d� |� f��qS )Nr\ � =)r8 r )�.0�k�v��quoter r � <listcomp> s �z2DigestAuthTests.formatResponse.<locals>.<listcomp>)r, r. r/ r1 r0 r2 r8 �items)r �quotes�kwr ra r �formatResponse� s( ��z DigestAuthTests.formatResponsec C sh |� d�}|� d��� }|� d�}t|| j| j| j|| j�}t|d| j|d�}t |||||| j|�}|S )z@ Calculate the response for the given challenge r= r/ r1 r+ N) �get�lowerr r, r. r- r0 r r2 r ) r � challengeZncountr= �algor1 rC Zha2r@ r r r �getDigestResponse s �z!DigestAuthTests.getDigestResponsec C sz | j �| jj�}d}| j||d | �||�||d d�}| j �|| j| jj�}| �|� | j �� | � |� | j d �� dS )z� L{DigestCredentialFactory.decode} accepts a digest challenge response and parses it into an L{IUsernameHashedPassword} provider. � 00000001r= �opaque)re r= rT �ncrn � wrongN� r5 � getChallenger3 �hostrg rl �decoder4 � assertTrue� checkPasswordr- � assertFalse)r re rj ro �clientResponse�credsr r r � test_response. s � �z DigestAuthTests.test_responsec C s | � d� dS )a L{DigestCredentialFactory.decode} accepts a digest challenge response which does not quote the values of its fields and parses it into an L{IUsernameHashedPassword} provider in the same way it would a response which included quoted field values. FN)rz r r r r �test_responseWithoutQuotesC s z*DigestAuthTests.test_responseWithoutQuotesc C s d| _ | �d� dS )z� L{DigestCredentialFactory.decode} accepts a digest challenge response which quotes the values of its fields and includes a C{b","} in the URI field. s /some,path/TN)r2 rz r r r r �test_responseWithCommaURIL s z)DigestAuthTests.test_responseWithCommaURIc C s d| _ | �� dS )zs The case of the algorithm value in the response is ignored when checking the credentials. s MD5N�r/ rz r r r r � test_caseInsensitiveAlgorithmU s z-DigestAuthTests.test_caseInsensitiveAlgorithmc C s d| _ | �� dS )zV The algorithm defaults to MD5 if it is not supplied in the response. Nr} r r r r �test_md5DefaultAlgorithm] s z(DigestAuthTests.test_md5DefaultAlgorithmc C sp | j �d�}d}| j|d | �||�||d d�}| j �|| jd�}| �|�| j�� | � |�| jd �� dS )z� L{DigestCredentialFactory.decode} accepts a digest challenge response even if the client address it is passed is L{None}. Nrm r= rn �r= rT ro rn rp ) r5 rr rg rl rt r4 ru rv r- rw �r rj ro rx ry r r r � test_responseWithoutClientIPd s �z,DigestAuthTests.test_responseWithoutClientIPc C s� | j �| jj�}d}| j|d | �||�||d d�}| j �|| j| jj�}| �|� | j �� | � |� | j d �� d}| j|d | �||�||d d�}| j �|| j| jj�}| �|� | j �� | � |� | j d �� dS )zm L{DigestCredentialFactory.decode} handles multiple responses to a single challenge. rm r= rn r� rp s 00000002Nrq r� r r r �test_multiResponsev s2 � � � �z"DigestAuthTests.test_multiResponsec C sv | j �| jj�}d}| j|d | �||�||d d�}| j �|d| jj�}| �|�| j �� | �|�| j d �� dS )a& L{DigestCredentialFactory.decode} returns an L{IUsernameHashedPassword} provider which rejects a correct password for the given user if the challenge response request is made using a different HTTP method than was used to request the initial challenge. rm r= rn r� s POSTrp N) r5 rr r3 rs rg rl rt rw rv r- r� r r r � test_failsWithDifferentMethod� s � �z-DigestAuthTests.test_failsWithDifferentMethodc C sl | � t| jj| jdd�| j| jj�}| �t |�d� | � t| jj| jdd�| j| jj�}| �t |�d� dS )z� L{DigestCredentialFactory.decode} raises L{LoginFailed} if the response has no username field or if the username field is empty. N)r, z$Invalid response, no username given.r\ � � assertRaisesr r5 rt rg r4 r3 rs r: �str�r �er r r �test_noUsername� s � �z DigestAuthTests.test_noUsernamec C s8 | � t| jj| jdd�| j| jj�}| �t |�d� dS )zo L{DigestCredentialFactory.decode} raises L{LoginFailed} if the response has no nonce. rP )rn z!Invalid response, no nonce given.Nr� r� r r r � test_noNonce� s �z DigestAuthTests.test_noNoncec C s4 | � t| jj| �� | j| jj�}| �t |�d� dS )zp L{DigestCredentialFactory.decode} raises L{LoginFailed} if the response has no opaque. z"Invalid response, no opaque given.Nr� r� r r r � test_noOpaque� s �z DigestAuthTests.test_noOpaquec C s� | j �| jj�}d}| j|d | �||�||d d�}| j �|| j| jj�}| �t t |�� | j d | j d | j }t|�}| �|�t|�� ��� |�d� | �|�t|�� ��� dS )z� L{DigestCredentialFactory.decode} returns an L{IUsernameDigestHash} provider which can verify a hash of the form 'username:realm:password'. rm r= rn r� r7 rp N)r5 rr r3 rs rg rl rt r4 ru r r r, r. r- r Z checkHashr r9 �updaterw )r rj ro rx ry Z cleartext�hashr r r �test_checkHash� s" � � z DigestAuthTests.test_checkHashc C s t | j| j�}|�| jj�}| �t|jd|d | jj�}| � t |�d� dt d� }| �t|j||d | jj�}| � t |�d� | �t|jd|d | jj�}| � t |�d� dt d� |d t | jj�df�� }| �t|j||d | jj�}| � t |�d � d S ) z� L{DigestCredentialFactory.decode} raises L{LoginFailed} when the opaque value does not contain all the required parts. s badOpaquer= z&Invalid response, invalid opaque values foo-s nonce,clientipr\ � ,r( z,Invalid response, invalid opaque/time valuesN)r r/ r. rr r3 rs r� r � _verifyOpaquer: r� r r8 r )r r5 rj �excZ badOpaquer r r �test_invalidOpaque� sP � �����z"DigestAuthTests.test_invalidOpaquec C s� t | j| j�}|�| jj�}|�d| jj�}| �t|j ||d | jj�}| � t |�d� | �t|j |d| jj�}| � t |�d� dS )z� L{DigestCredentialFactory.decode} raises L{LoginFailed} when the given nonce from the response does not match the nonce encoded in the opaque. s 1234567890r= z2Invalid response, incompatible opaque/nonce valuesr\ N) r r/ r. rr r3 rs �_generateOpaquer� r r� r: r� )r r5 rj �badNonceOpaquer� r r r �test_incompatibleNonce1 s* ���z&DigestAuthTests.test_incompatibleNoncec C s` t | j| j�}|�| jj�}d}| �| jj|� |�|d |�}| �t |j ||d | jj� dS )z� L{DigestCredentialFactory.decode} raises L{LoginFailed} when the request comes from a client IP other than what is encoded in the opaque. z10.0.0.1r= N) r r/ r. rr r3 rs ZassertNotEqualr� r� r r� )r r5 rj Z badAddressr� r r r �test_incompatibleClientIPO s ��z)DigestAuthTests.test_incompatibleClientIPc C s� t | j| j�}|�| jj�}d�|d t| jj�df�}tt ||j �� � �}t |�}d�||� d�f�}| �t|j||d | jj� dS )z� L{DigestCredentialFactory.decode} raises L{LoginFailed} when the given opaque is older than C{DigestCredentialFactory.CHALLENGE_LIFETIME_SECS} r� r= s -137876876� -� N)r r/ r. rr r3 rs r8 r r r r r9 r r r� r r� )r r5 rj �keyr9 ZekeyZoldNonceOpaquer r r � test_oldNonceh s ��z DigestAuthTests.test_oldNoncec C s~ t | j| j�}|�| jj�}d�|d t| jj�df�}tt |d �� � �}d�|t |�f�}| � t |j||d | jj� dS )z~ L{DigestCredentialFactory.decode} raises L{LoginFailed} when the opaque checksum fails verification. r� r= r s this is not the right pkeyr� N)r r/ r. rr r3 rs r8 r r r r9 r r� r r� )r r5 rj r� r9 Z badChecksumr r r � test_mismatchedOpaqueChecksum� s ��z-DigestAuthTests.test_mismatchedOpaqueChecksumc C s6 d}|D ](\}}}}| j ttd|||dd|d� qdS )z� L{calcHA1} raises L{TypeError} when any of the pszUsername, pszRealm, or pszPassword arguments are specified with the preHA1 keyword argument. ))s user� realm� password� preHA1)Nr� Nr� )NNr� r� r) s nonces cnonce)�preHA1N)r� � TypeErrorr )r � argumentsZ pszUsernameZpszRealmZ pszPasswordr� r r r � test_incompatibleCalcHA1Options� s �z/DigestAuthTests.test_incompatibleCalcHA1Optionsc C s | j �dd�}| �d|� dS )z� L{DigestCredentialFactory._generateOpaque} returns a value without newlines, regardless of the length of the nonce. sn long nonce long nonce long nonce long nonce long nonce long nonce long nonce long nonce long nonce long nonce Nr� )r5 r� Z assertNotIn)r rn r r r �test_noNewlineOpaque� s z$DigestAuthTests.test_noNewlineOpaqueN)T)T)*r" r# r$ r% r6 r rA rD rF rJ rK rL rM rN rO rU rV rW rX rY rZ rg rl rz r{ r| r~ r r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r' 8 sL ! ( #3 r' )r% r �binasciir �hashlibr r Zzope.interface.verifyr Ztwisted.cred.credentialsr r r r r Ztwisted.cred.errorr Ztwisted.internet.addressr Ztwisted.python.compatr Ztwisted.trial.unittestr r r r' r r r r �<module> s
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка