Alex Gaynor | 2b21b12 | 2013-10-31 09:39:25 -0700 | [diff] [blame] | 1 | import base64 |
Alex Gaynor | fb8adfc | 2013-10-31 14:16:24 -0700 | [diff] [blame^] | 2 | import calendar |
| 3 | import json |
| 4 | import os |
| 5 | |
| 6 | import iso8601 |
| 7 | |
| 8 | import pytest |
Alex Gaynor | 2b21b12 | 2013-10-31 09:39:25 -0700 | [diff] [blame] | 9 | |
Alex Gaynor | de36e90 | 2013-10-31 10:10:44 -0700 | [diff] [blame] | 10 | import six |
| 11 | |
Alex Gaynor | 2b21b12 | 2013-10-31 09:39:25 -0700 | [diff] [blame] | 12 | from cryptography.fernet import Fernet |
| 13 | |
| 14 | |
Alex Gaynor | fb8adfc | 2013-10-31 14:16:24 -0700 | [diff] [blame^] | 15 | def json_parametrize(keys, path): |
| 16 | with open(path) as f: |
| 17 | data = json.load(f) |
| 18 | return pytest.mark.parametrize(keys, [ |
| 19 | tuple([entry[k] for k in keys]) |
| 20 | for entry in data |
| 21 | ]) |
Alex Gaynor | 2b21b12 | 2013-10-31 09:39:25 -0700 | [diff] [blame] | 22 | |
Alex Gaynor | fb8adfc | 2013-10-31 14:16:24 -0700 | [diff] [blame^] | 23 | |
| 24 | class TestFernet(object): |
| 25 | @json_parametrize( |
| 26 | ("secret", "now", "iv", "src", "token"), |
| 27 | os.path.join(os.path.dirname(__file__), "vectors", "fernet", "generate.json") |
| 28 | ) |
| 29 | def test_generate(self, secret, now, iv, src, token): |
| 30 | f = Fernet(base64.urlsafe_b64decode(secret.encode("ascii"))) |
| 31 | actual_token = f._encrypt_from_parts( |
| 32 | src.encode("ascii"), |
| 33 | calendar.timegm(iso8601.parse_date(now).utctimetuple()), |
| 34 | b"".join(map(six.int2byte, iv)) |
Alex Gaynor | 5e87dfd | 2013-10-31 09:46:03 -0700 | [diff] [blame] | 35 | ) |
Alex Gaynor | fb8adfc | 2013-10-31 14:16:24 -0700 | [diff] [blame^] | 36 | assert actual_token == token |
| 37 | |
| 38 | @json_parametrize( |
| 39 | ("secret", "now", "src", "ttl_sec", "token"), |
| 40 | os.path.join(os.path.dirname(__file__), "vectors", "fernet", "verify.json") |
| 41 | ) |
| 42 | def test_verify(self, secret, now, src, ttl_sec, token): |
| 43 | f = Fernet(base64.urlsafe_b64decode(secret.encode("ascii"))) |
| 44 | payload = f.decrypt( |
| 45 | token.encode("ascii"), |
| 46 | ttl=ttl_sec, |
| 47 | current_time=calendar.timegm(iso8601.parse_date(now).utctimetuple()) |
| 48 | ) |
| 49 | assert payload == src |