Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
D
django-rest-framework
Overview
Overview
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
edx
django-rest-framework
Commits
a99a449c
Commit
a99a449c
authored
Jan 11, 2012
by
Tom Christie
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Add test for PUT with session auth+csrf
parent
7a87fc87
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
11 additions
and
4 deletions
+11
-4
djangorestframework/tests/authentication.py
+11
-4
No files found.
djangorestframework/tests/authentication.py
View file @
a99a449c
from
django.conf.urls.defaults
import
patterns
from
django.conf.urls.defaults
import
patterns
from
django.contrib.auth.models
import
User
from
django.contrib.auth.models
import
User
from
django.contrib.auth
import
login
from
django.test
import
Client
,
TestCase
from
django.test
import
Client
,
TestCase
from
django.utils
import
simplejson
as
json
from
django.utils
import
simplejson
as
json
from
djangorestframework.compat
import
RequestFactory
from
djangorestframework.views
import
View
from
djangorestframework.views
import
View
from
djangorestframework
import
permissions
from
djangorestframework
import
permissions
...
@@ -14,8 +12,12 @@ import base64
...
@@ -14,8 +12,12 @@ import base64
class
MockView
(
View
):
class
MockView
(
View
):
permissions
=
(
permissions
.
IsAuthenticated
,
)
permissions
=
(
permissions
.
IsAuthenticated
,
)
def
post
(
self
,
request
):
def
post
(
self
,
request
):
return
{
'a'
:
1
,
'b'
:
2
,
'c'
:
3
}
return
{
'a'
:
1
,
'b'
:
2
,
'c'
:
3
}
def
put
(
self
,
request
):
return
{
'a'
:
1
,
'b'
:
2
,
'c'
:
3
}
urlpatterns
=
patterns
(
''
,
urlpatterns
=
patterns
(
''
,
(
r'^$'
,
MockView
.
as_view
()),
(
r'^$'
,
MockView
.
as_view
()),
...
@@ -83,8 +85,13 @@ class SessionAuthTests(TestCase):
...
@@ -83,8 +85,13 @@ class SessionAuthTests(TestCase):
response
=
self
.
non_csrf_client
.
post
(
'/'
,
{
'example'
:
'example'
})
response
=
self
.
non_csrf_client
.
post
(
'/'
,
{
'example'
:
'example'
})
self
.
assertEqual
(
response
.
status_code
,
200
)
self
.
assertEqual
(
response
.
status_code
,
200
)
def
test_put_form_session_auth_passing
(
self
):
"""Ensure PUTting form over session authentication with logged in user and CSRF token passes."""
self
.
non_csrf_client
.
login
(
username
=
self
.
username
,
password
=
self
.
password
)
response
=
self
.
non_csrf_client
.
put
(
'/'
,
{
'example'
:
'example'
})
self
.
assertEqual
(
response
.
status_code
,
200
)
def
test_post_form_session_auth_failing
(
self
):
def
test_post_form_session_auth_failing
(
self
):
"""Ensure POSTing form over session authentication without logged in user fails."""
"""Ensure POSTing form over session authentication without logged in user fails."""
response
=
self
.
csrf_client
.
post
(
'/'
,
{
'example'
:
'example'
})
response
=
self
.
csrf_client
.
post
(
'/'
,
{
'example'
:
'example'
})
self
.
assertEqual
(
response
.
status_code
,
403
)
self
.
assertEqual
(
response
.
status_code
,
403
)
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment