blob: 02de846642af6b84d85afcacf4d469ce0970a808 [file] [log] [blame]
C.J. Collier37141e42020-02-13 13:49:49 -08001# Copyright 2016 Google LLC
Jon Wayne Parrott447c5be2016-10-25 09:32:25 -07002#
3# Licensed under the Apache License, Version 2.0 (the "License");
4# you may not use this file except in compliance with the License.
5# You may obtain a copy of the License at
6#
7# http://www.apache.org/licenses/LICENSE-2.0
8#
9# Unless required by applicable law or agreed to in writing, software
10# distributed under the License is distributed on an "AS IS" BASIS,
11# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12# See the License for the specific language governing permissions and
13# limitations under the License.
14
15import json
16import os
17
18from google.auth import _helpers
Jon Wayne Parrott9a9ce2c2016-10-31 14:59:52 -070019import google.auth.transport.requests
Jon Wayne Parrott447c5be2016-10-25 09:32:25 -070020import google.auth.transport.urllib3
21import pytest
Jon Wayne Parrott9a9ce2c2016-10-31 14:59:52 -070022import requests
Jon Wayne Parrott447c5be2016-10-25 09:32:25 -070023import urllib3
24
25
26HERE = os.path.dirname(__file__)
Bu Sun Kim9eec0912019-10-21 17:04:21 -070027DATA_DIR = os.path.join(HERE, "data")
Bu Sun Kim82e224b2020-03-13 13:21:18 -070028IMPERSONATED_SERVICE_ACCOUNT_FILE = os.path.join(
29 DATA_DIR, "impersonated_service_account.json"
30)
Bu Sun Kim9eec0912019-10-21 17:04:21 -070031SERVICE_ACCOUNT_FILE = os.path.join(DATA_DIR, "service_account.json")
32AUTHORIZED_USER_FILE = os.path.join(DATA_DIR, "authorized_user.json")
Jon Wayne Parrott9a9ce2c2016-10-31 14:59:52 -070033URLLIB3_HTTP = urllib3.PoolManager(retries=False)
34REQUESTS_SESSION = requests.Session()
35REQUESTS_SESSION.verify = False
Bu Sun Kim9eec0912019-10-21 17:04:21 -070036TOKEN_INFO_URL = "https://www.googleapis.com/oauth2/v3/tokeninfo"
Jon Wayne Parrott447c5be2016-10-25 09:32:25 -070037
38
39@pytest.fixture
40def service_account_file():
41 """The full path to a valid service account key file."""
Jon Wayne Parrottbbc39432016-10-27 23:12:39 -070042 yield SERVICE_ACCOUNT_FILE
Jon Wayne Parrott447c5be2016-10-25 09:32:25 -070043
44
45@pytest.fixture
Bu Sun Kim82e224b2020-03-13 13:21:18 -070046def impersonated_service_account_file():
47 """The full path to a valid service account key file."""
48 yield IMPERSONATED_SERVICE_ACCOUNT_FILE
49
50
51@pytest.fixture
Jon Wayne Parrottcf672c22016-10-26 09:41:00 -070052def authorized_user_file():
53 """The full path to a valid authorized user file."""
Jon Wayne Parrottbbc39432016-10-27 23:12:39 -070054 yield AUTHORIZED_USER_FILE
Jon Wayne Parrottcf672c22016-10-26 09:41:00 -070055
56
Bu Sun Kim9eec0912019-10-21 17:04:21 -070057@pytest.fixture(params=["urllib3", "requests"])
Jon Wayne Parrott9a9ce2c2016-10-31 14:59:52 -070058def http_request(request):
Jon Wayne Parrott447c5be2016-10-25 09:32:25 -070059 """A transport.request object."""
Bu Sun Kim9eec0912019-10-21 17:04:21 -070060 if request.param == "urllib3":
Jon Wayne Parrott9a9ce2c2016-10-31 14:59:52 -070061 yield google.auth.transport.urllib3.Request(URLLIB3_HTTP)
Bu Sun Kim9eec0912019-10-21 17:04:21 -070062 elif request.param == "requests":
Jon Wayne Parrott9a9ce2c2016-10-31 14:59:52 -070063 yield google.auth.transport.requests.Request(REQUESTS_SESSION)
Jon Wayne Parrott447c5be2016-10-25 09:32:25 -070064
65
66@pytest.fixture
Jon Wayne Parrott421cc9b2016-10-26 21:05:16 -070067def token_info(http_request):
Jon Wayne Parrott447c5be2016-10-25 09:32:25 -070068 """Returns a function that obtains OAuth2 token info."""
Bu Sun Kim9eec0912019-10-21 17:04:21 -070069
Jon Wayne Parrott447c5be2016-10-25 09:32:25 -070070 def _token_info(access_token=None, id_token=None):
71 query_params = {}
72
73 if access_token is not None:
Bu Sun Kim9eec0912019-10-21 17:04:21 -070074 query_params["access_token"] = access_token
Jon Wayne Parrott447c5be2016-10-25 09:32:25 -070075 elif id_token is not None:
Bu Sun Kim9eec0912019-10-21 17:04:21 -070076 query_params["id_token"] = id_token
Jon Wayne Parrott447c5be2016-10-25 09:32:25 -070077 else:
Bu Sun Kim9eec0912019-10-21 17:04:21 -070078 raise ValueError("No token specified.")
Jon Wayne Parrott447c5be2016-10-25 09:32:25 -070079
80 url = _helpers.update_query(TOKEN_INFO_URL, query_params)
81
Bu Sun Kim9eec0912019-10-21 17:04:21 -070082 response = http_request(url=url, method="GET")
Jon Wayne Parrott447c5be2016-10-25 09:32:25 -070083
Bu Sun Kim9eec0912019-10-21 17:04:21 -070084 return json.loads(response.data.decode("utf-8"))
Jon Wayne Parrott447c5be2016-10-25 09:32:25 -070085
86 yield _token_info
87
88
Jon Wayne Parrottbbc39432016-10-27 23:12:39 -070089@pytest.fixture
90def verify_refresh(http_request):
91 """Returns a function that verifies that credentials can be refreshed."""
Bu Sun Kim9eec0912019-10-21 17:04:21 -070092
Jon Wayne Parrottbbc39432016-10-27 23:12:39 -070093 def _verify_refresh(credentials):
94 if credentials.requires_scopes:
Bu Sun Kim9eec0912019-10-21 17:04:21 -070095 credentials = credentials.with_scopes(["email", "profile"])
Jon Wayne Parrottbbc39432016-10-27 23:12:39 -070096
97 credentials.refresh(http_request)
98
99 assert credentials.token
100 assert credentials.valid
101
102 yield _verify_refresh
103
104
Jon Wayne Parrott447c5be2016-10-25 09:32:25 -0700105def verify_environment():
106 """Checks to make sure that requisite data files are available."""
107 if not os.path.isdir(DATA_DIR):
108 raise EnvironmentError(
Bu Sun Kim9eec0912019-10-21 17:04:21 -0700109 "In order to run system tests, test data must exist in "
110 "system_tests/data. See CONTRIBUTING.rst for details."
111 )
Jon Wayne Parrott447c5be2016-10-25 09:32:25 -0700112
113
114def pytest_configure(config):
115 """Pytest hook that runs before Pytest collects any tests."""
116 verify_environment()