Node / ReticulumProjects / MeshChatX.git / files / tests / backend / test_websocket_config_security.py

Displaying Raw • Download

T8b949e# SPDX-License-Identifier: 0BSD

Tff7b72import T7ee787asyncio

Tff7b72from T7ee787unittestT7ee787.T7ee787mock Tff7b72import Te6edf3AsyncMockTb4b4b4, Te6edf3MagicMockTb4b4b4, Te6edf3patch

Tff7b72import T7ee787pytest

Tff7b72from T7ee787meshchatxT7ee787.T7ee787srcT7ee787.T7ee787backendT7ee787.T7ee787websocket_config_guard Tff7b72import Tb4b4b4(

Te6edf3WEBSOCKET_MUTATOR_TYPESTb4b4b4,

Te6edf3WEBSOCKET_PUBLIC_TYPESTb4b4b4,

Te6edf3WEBSOCKET_READ_TYPESTb4b4b4,

Te6edf3websocket_type_requires_authTb4b4b4,

Tb4b4b4)

Tff7b72def Td2a8ff_run_async_immediateTb4b4b4(Te6edf3coroTb4b4b4)Tb4b4b4:

Tff7b72return Te6edf3asyncioTff7b72.Td2a8ffcreate_taskTb4b4b4(Te6edf3coroTb4b4b4)

Tff7b72def Td2a8fftest_websocket_type_requires_auth_classifies_mutatorsTb4b4b4(Tb4b4b4)Tb4b4b4:

Tff7b72for Te6edf3msg_type Tff7b72in Te6edf3WEBSOCKET_MUTATOR_TYPESTb4b4b4:

Tff7b72assert Te6edf3websocket_type_requires_authTb4b4b4(Te6edf3msg_typeTb4b4b4) Tff7b72is Tff7b72True

Tff7b72def Td2a8fftest_websocket_type_requires_auth_allows_ping_and_readsTb4b4b4(Tb4b4b4)Tb4b4b4:

Tff7b72for Te6edf3msg_type Tff7b72in Te6edf3WEBSOCKET_PUBLIC_TYPES Tff7b72| Te6edf3WEBSOCKET_READ_TYPESTb4b4b4:

Tff7b72assert Te6edf3websocket_type_requires_authTb4b4b4(Te6edf3msg_typeTb4b4b4) Tff7b72is Tff7b72False

Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffasyncio

Tff7b72async Tff7b72def Td2a8fftest_websocket_mutator_rejected_without_session_when_auth_enabledTb4b4b4(Te6edf3mock_appTb4b4b4)Tb4b4b4:

Te6edf3mock_appTff7b72.Td2a8ffconfigTff7b72.Td2a8ffauth_enabledTff7b72.Td2a8ffsetTb4b4b4(Tff7b72TrueTb4b4b4)

Te6edf3mock_appTff7b72.Td2a8ffconfigTff7b72.Td2a8ffauth_password_hashTff7b72.Td2a8ffsetTb4b4b4(Ta5d6ff"Ta5d6ffhashTa5d6ff"Tb4b4b4)

Te6edf3client Tff7b72= Te6edf3MagicMockTb4b4b4(Tb4b4b4)

Te6edf3clientTff7b72.Td2a8ffrequest Tff7b72= Te6edf3MagicMockTb4b4b4(Tb4b4b4)

Te6edf3clientTff7b72.Td2a8ffsend_str Tff7b72= Te6edf3AsyncMockTb4b4b4(Tb4b4b4)

Tff7b72with Tb4b4b4(

Te6edf3patchTff7b72.Td2a8ffobjectTb4b4b4(Te6edf3mock_appTb4b4b4, Ta5d6ff"Ta5d6ff_websocket_session_authorizedTa5d6ff"Tb4b4b4, Te6edf3return_valueTff7b72=Tff7b72FalseTb4b4b4)Tb4b4b4,

Te6edf3patchTb4b4b4(

Ta5d6ff"Ta5d6ffmeshchatx.meshchat.AsyncUtils.run_asyncTa5d6ff"Tb4b4b4,

Te6edf3side_effectTff7b72=Te6edf3_run_async_immediateTb4b4b4,

Tb4b4b4)Tb4b4b4,

Tb4b4b4)Tb4b4b4:

Tff7b72await Te6edf3mock_appTff7b72.Td2a8ffon_websocket_data_receivedTb4b4b4(

Te6edf3clientTb4b4b4,

Tb4b4b4{Ta5d6ff"Ta5d6fftypeTa5d6ff"Tb4b4b4: Ta5d6ff"Ta5d6ffkeyboard_shortcuts.setTa5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ffshortcutsTa5d6ff"Tb4b4b4: Tb4b4b4[Tb4b4b4]Tb4b4b4}Tb4b4b4,

Tb4b4b4)

Tff7b72await Te6edf3asyncioTff7b72.Td2a8ffsleepTb4b4b4(T79c0ff0Tb4b4b4)

Te6edf3clientTff7b72.Td2a8ffsend_strTff7b72.Td2a8ffassert_awaited_onceTb4b4b4(Tb4b4b4)

Te6edf3payload Tff7b72= Te6edf3clientTff7b72.Td2a8ffsend_strTff7b72.Td2a8ffawait_argsTff7b72.Td2a8ffargsTb4b4b4[T79c0ff0Tb4b4b4]

Tff7b72assert Ta5d6ff'Ta5d6ff"Ta5d6ffAuthentication requiredTa5d6ff"Ta5d6ff' Tff7b72in Te6edf3payload

Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffasyncio

Tff7b72async Tff7b72def Td2a8fftest_websocket_session_authorized_uses_attached_requestTb4b4b4(Te6edf3mock_appTb4b4b4)Tb4b4b4:

T8b949e"""Aiohttp WebSocketResponse has no .request; mutators must use the attached one."""

Te6edf3mock_appTff7b72.Td2a8ffconfigTff7b72.Td2a8ffauth_enabledTff7b72.Td2a8ffsetTb4b4b4(Tff7b72TrueTb4b4b4)

Te6edf3identity_hash Tff7b72= Ta5d6ff"Ta5d6ffabTa5d6ff" Tff7b72* T79c0ff16

Te6edf3mock_appTff7b72.Td2a8ffidentity Tff7b72= Te6edf3MagicMockTb4b4b4(Tb4b4b4)

Te6edf3mock_appTff7b72.Td2a8ffidentityTff7b72.Td2a8ffhashTff7b72.Td2a8ffhexTff7b72.Td2a8ffreturn_value Tff7b72= Te6edf3identity_hash

Te6edf3client Tff7b72= Te6edf3MagicMockTb4b4b4(Te6edf3specTff7b72=Tb4b4b4[Ta5d6ff"Ta5d6ffsend_strTa5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ff_meshchatx_requestTa5d6ff"Tb4b4b4]Tb4b4b4)

Te6edf3clientTff7b72.Td2a8ff_meshchatx_request Tff7b72= Te6edf3MagicMockTb4b4b4(Tb4b4b4)

Te6edf3session Tff7b72= Tb4b4b4{Ta5d6ff"Ta5d6ffauthenticatedTa5d6ff"Tb4b4b4: Tff7b72TrueTb4b4b4, Ta5d6ff"Ta5d6ffidentity_hashTa5d6ff"Tb4b4b4: Te6edf3identity_hashTb4b4b4}

Tff7b72with Te6edf3patchTb4b4b4(Ta5d6ff"Ta5d6ffmeshchatx.meshchat.get_sessionTa5d6ff"Tb4b4b4, Te6edf3AsyncMockTb4b4b4(Te6edf3return_valueTff7b72=Te6edf3sessionTb4b4b4)Tb4b4b4)Tb4b4b4:

Tff7b72assert Tff7b72await Te6edf3mock_appTff7b72.Td2a8ff_websocket_session_authorizedTb4b4b4(Te6edf3clientTb4b4b4) Tff7b72is Tff7b72True

Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffasyncio

Tff7b72async Tff7b72def Td2a8fftest_websocket_session_authorized_false_without_attached_requestTb4b4b4(Te6edf3mock_appTb4b4b4)Tb4b4b4:

Te6edf3mock_appTff7b72.Td2a8ffconfigTff7b72.Td2a8ffauth_enabledTff7b72.Td2a8ffsetTb4b4b4(Tff7b72TrueTb4b4b4)

Te6edf3client Tff7b72= Te6edf3MagicMockTb4b4b4(Te6edf3specTff7b72=Tb4b4b4[Ta5d6ff"Ta5d6ffsend_strTa5d6ff"Tb4b4b4]Tb4b4b4)

Tff7b72assert Tff7b72await Te6edf3mock_appTff7b72.Td2a8ff_websocket_session_authorizedTb4b4b4(Te6edf3clientTb4b4b4) Tff7b72is Tff7b72False

Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffasyncio

Tff7b72async Tff7b72def Td2a8fftest_nomadnet_page_download_not_rejected_when_ws_request_attachedTb4b4b4(Te6edf3mock_appTb4b4b4)Tb4b4b4:

Te6edf3mock_appTff7b72.Td2a8ffconfigTff7b72.Td2a8ffauth_enabledTff7b72.Td2a8ffsetTb4b4b4(Tff7b72TrueTb4b4b4)

Te6edf3identity_hash Tff7b72= Ta5d6ff"Ta5d6ffcdTa5d6ff" Tff7b72* T79c0ff16

Te6edf3mock_appTff7b72.Td2a8ffidentity Tff7b72= Te6edf3MagicMockTb4b4b4(Tb4b4b4)

Te6edf3mock_appTff7b72.Td2a8ffidentityTff7b72.Td2a8ffhashTff7b72.Td2a8ffhexTff7b72.Td2a8ffreturn_value Tff7b72= Te6edf3identity_hash

Te6edf3client Tff7b72= Te6edf3MagicMockTb4b4b4(Te6edf3specTff7b72=Tb4b4b4[Ta5d6ff"Ta5d6ffsend_strTa5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ff_meshchatx_requestTa5d6ff"Tb4b4b4]Tb4b4b4)

Te6edf3clientTff7b72.Td2a8ff_meshchatx_request Tff7b72= Te6edf3MagicMockTb4b4b4(Tb4b4b4)

Te6edf3clientTff7b72.Td2a8ffsend_str Tff7b72= Te6edf3AsyncMockTb4b4b4(Tb4b4b4)

Te6edf3session Tff7b72= Tb4b4b4{Ta5d6ff"Ta5d6ffauthenticatedTa5d6ff"Tb4b4b4: Tff7b72TrueTb4b4b4, Ta5d6ff"Ta5d6ffidentity_hashTa5d6ff"Tb4b4b4: Te6edf3identity_hashTb4b4b4}

Tff7b72with Tb4b4b4(

Te6edf3patchTb4b4b4(Ta5d6ff"Ta5d6ffmeshchatx.meshchat.get_sessionTa5d6ff"Tb4b4b4, Te6edf3AsyncMockTb4b4b4(Te6edf3return_valueTff7b72=Te6edf3sessionTb4b4b4)Tb4b4b4)Tb4b4b4,

Te6edf3patchTb4b4b4(

Ta5d6ff"Ta5d6ffmeshchatx.meshchat.AsyncUtils.run_asyncTa5d6ff"Tb4b4b4,

Te6edf3side_effectTff7b72=Te6edf3_run_async_immediateTb4b4b4,

Tb4b4b4)Tb4b4b4,

Tb4b4b4)Tb4b4b4:

Tff7b72await Te6edf3mock_appTff7b72.Td2a8ffon_websocket_data_receivedTb4b4b4(

Te6edf3clientTb4b4b4,

Tb4b4b4{

Ta5d6ff"Ta5d6fftypeTa5d6ff"Tb4b4b4: Ta5d6ff"Ta5d6ffnomadnet.page.downloadTa5d6ff"Tb4b4b4,

T8b949e# Intentionally incomplete payload: auth must pass before handler

T8b949e# returns early for missing nomadnet_page_download.

Tb4b4b4}Tb4b4b4,

Tb4b4b4)

Tff7b72await Te6edf3asyncioTff7b72.Td2a8ffsleepTb4b4b4(T79c0ff0Tb4b4b4)

Tff7b72for Te6edf3call Tff7b72in Te6edf3clientTff7b72.Td2a8ffsend_strTff7b72.Td2a8ffawait_args_listTb4b4b4:

Tff7b72assert Ta5d6ff"Ta5d6ffAuthentication requiredTa5d6ff" Tff7b72not Tff7b72in Te6edf3callTff7b72.Td2a8ffargsTb4b4b4[T79c0ff0Tb4b4b4]

Tff7b72assert Ta5d6ff"Ta5d6ffRejected unauthorizedTa5d6ff" Tff7b72not Tff7b72in Te6edf3callTff7b72.Td2a8ffargsTb4b4b4[T79c0ff0Tb4b4b4]

Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffasyncio

Tff7b72async Tff7b72def Td2a8fftest_websocket_read_allowed_without_session_when_auth_enabledTb4b4b4(Te6edf3mock_appTb4b4b4)Tb4b4b4:

Te6edf3mock_appTff7b72.Td2a8ffconfigTff7b72.Td2a8ffauth_enabledTff7b72.Td2a8ffsetTb4b4b4(Tff7b72TrueTb4b4b4)

Te6edf3client Tff7b72= Te6edf3MagicMockTb4b4b4(Tb4b4b4)

Te6edf3clientTff7b72.Td2a8ffrequest Tff7b72= Te6edf3MagicMockTb4b4b4(Tb4b4b4)

Te6edf3clientTff7b72.Td2a8ffsend_str Tff7b72= Te6edf3AsyncMockTb4b4b4(Tb4b4b4)

Tff7b72with Tb4b4b4(

Te6edf3patchTff7b72.Td2a8ffobjectTb4b4b4(Te6edf3mock_appTb4b4b4, Ta5d6ff"Ta5d6ff_websocket_session_authorizedTa5d6ff"Tb4b4b4, Te6edf3return_valueTff7b72=Tff7b72FalseTb4b4b4)Tb4b4b4,

Te6edf3patchTff7b72.Td2a8ffobjectTb4b4b4(

Te6edf3mock_appTb4b4b4,

Ta5d6ff"Ta5d6ffget_archived_page_versionsTa5d6ff"Tb4b4b4,

Te6edf3return_valueTff7b72=Tb4b4b4[Tb4b4b4]Tb4b4b4,

Tb4b4b4)Tb4b4b4,

Te6edf3patchTb4b4b4(

Ta5d6ff"Ta5d6ffmeshchatx.meshchat.AsyncUtils.run_asyncTa5d6ff"Tb4b4b4,

Te6edf3side_effectTff7b72=Te6edf3_run_async_immediateTb4b4b4,

Tb4b4b4)Tb4b4b4,

Tb4b4b4)Tb4b4b4:

Tff7b72await Te6edf3mock_appTff7b72.Td2a8ffon_websocket_data_receivedTb4b4b4(

Te6edf3clientTb4b4b4,

Tb4b4b4{

Ta5d6ff"Ta5d6fftypeTa5d6ff"Tb4b4b4: Ta5d6ff"Ta5d6ffnomadnet.page.archives.getTa5d6ff"Tb4b4b4,

Ta5d6ff"Ta5d6ffdestination_hashTa5d6ff"Tb4b4b4: Ta5d6ff"Ta5d6ffaaTa5d6ff" Tff7b72* T79c0ff16Tb4b4b4,

Ta5d6ff"Ta5d6ffpage_pathTa5d6ff"Tb4b4b4: Ta5d6ff"Ta5d6ffindex.muTa5d6ff"Tb4b4b4,

Tb4b4b4}Tb4b4b4,

Tb4b4b4)

Tff7b72await Te6edf3asyncioTff7b72.Td2a8ffsleepTb4b4b4(T79c0ff0Tb4b4b4)

Te6edf3clientTff7b72.Td2a8ffsend_strTff7b72.Td2a8ffassert_awaitedTb4b4b4(Tb4b4b4)

Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffasyncio

Tff7b72async Tff7b72def Td2a8fftest_websocket_config_set_ignores_auth_enabledTb4b4b4(Te6edf3mock_appTb4b4b4)Tb4b4b4:

Te6edf3mock_appTff7b72.Td2a8ffconfigTff7b72.Td2a8ffauth_enabledTff7b72.Td2a8ffsetTb4b4b4(Tff7b72TrueTb4b4b4)

Te6edf3mock_appTff7b72.Td2a8ffconfigTff7b72.Td2a8ffauth_password_hashTff7b72.Td2a8ffsetTb4b4b4(Ta5d6ff"Ta5d6ffexisting-hashTa5d6ff"Tb4b4b4)

Te6edf3client Tff7b72= Tffa657objectTb4b4b4(Tb4b4b4)

Tff7b72with Te6edf3patchTff7b72.Td2a8ffobjectTb4b4b4(Te6edf3mock_appTb4b4b4, Ta5d6ff"Ta5d6ff_websocket_session_authorizedTa5d6ff"Tb4b4b4, Te6edf3return_valueTff7b72=Tff7b72TrueTb4b4b4)Tb4b4b4:

Tff7b72await Te6edf3mock_appTff7b72.Td2a8ffon_websocket_data_receivedTb4b4b4(

Te6edf3clientTb4b4b4,

Tb4b4b4{

Ta5d6ff"Ta5d6fftypeTa5d6ff"Tb4b4b4: Ta5d6ff"Ta5d6ffconfig.setTa5d6ff"Tb4b4b4,

Ta5d6ff"Ta5d6ffconfigTa5d6ff"Tb4b4b4: Tb4b4b4{

Ta5d6ff"Ta5d6ffdisplay_nameTa5d6ff"Tb4b4b4: Ta5d6ff"Ta5d6ffUpdated PeerTa5d6ff"Tb4b4b4,

Ta5d6ff"Ta5d6ffauth_enabledTa5d6ff"Tb4b4b4: Tff7b72FalseTb4b4b4,

Ta5d6ff"Ta5d6ffauth_password_hashTa5d6ff"Tb4b4b4: Tff7b72NoneTb4b4b4,

Tb4b4b4}Tb4b4b4,

Tb4b4b4}Tb4b4b4,

Tb4b4b4)

Tff7b72assert Te6edf3mock_appTff7b72.Td2a8ffconfigTff7b72.Td2a8ffauth_enabledTff7b72.Td2a8ffgetTb4b4b4(Tb4b4b4) Tff7b72is Tff7b72True

Tff7b72assert Te6edf3mock_appTff7b72.Td2a8ffconfigTff7b72.Td2a8ffauth_password_hashTff7b72.Td2a8ffgetTb4b4b4(Tb4b4b4) Tff7b72== Ta5d6ff"Ta5d6ffexisting-hashTa5d6ff"

Tff7b72assert Te6edf3mock_appTff7b72.Td2a8ffconfigTff7b72.Td2a8ffdisplay_nameTff7b72.Td2a8ffgetTb4b4b4(Tb4b4b4) Tff7b72== Ta5d6ff"Ta5d6ffUpdated PeerTa5d6ff"