imacat/mia-accounting
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 41 Wiki Activity

Removed the CSRF token from the NextUriTestCase test case, for simplicity.

Browse Source
This commit is contained in:
依瑪貓 2023-02-04 14:38:25 +08:00
parent 2c8d5e7c8a
commit 17ba7659b6
1 changed files with 5 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
tests/test_utils.py
View File

@ -26,8 +26,7 @@ from flask import Flask, request
from accounting.utils.next_url import append_next, inherit_next, or_next from accounting.utils.next_url import append_next, inherit_next, or_next
from accounting.utils.pagination import Pagination, DEFAULT_PAGE_SIZE from accounting.utils.pagination import Pagination, DEFAULT_PAGE_SIZE
from accounting.utils.query import parse_query_keywords from accounting.utils.query import parse_query_keywords
from test_site import create_app from test_site import create_app, csrf
from testlib import get_csrf_token
class NextUriTestCase(unittest.TestCase): class NextUriTestCase(unittest.TestCase):
@ -42,6 +41,7 @@ class NextUriTestCase(unittest.TestCase):
target: str = "/target" target: str = "/target"
@app.route("/test-next", methods=["GET", "POST"]) @app.route("/test-next", methods=["GET", "POST"])
@csrf.exempt
def test_next_view() -> str: def test_next_view() -> str:
"""The test view with the next URI.""" """The test view with the next URI."""
current_uri: str = request.full_path if request.query_string \ current_uri: str = request.full_path if request.query_string \
@ -56,6 +56,7 @@ class NextUriTestCase(unittest.TestCase):
return "" return ""
@app.route("/test-no-next", methods=["GET", "POST"]) @app.route("/test-no-next", methods=["GET", "POST"])
@csrf.exempt
def test_no_next_view() -> str: def test_no_next_view() -> str:
"""The test view without the next URI.""" """The test view without the next URI."""
current_uri: str = request.full_path if request.query_string \ current_uri: str = request.full_path if request.query_string \
@ -69,22 +70,19 @@ class NextUriTestCase(unittest.TestCase):
client: httpx.Client = httpx.Client(app=app, client: httpx.Client = httpx.Client(app=app,
base_url="https://testserver") base_url="https://testserver")
client.headers["Referer"] = "https://testserver" client.headers["Referer"] = "https://testserver"
csrf_token: str = get_csrf_token(self, client, "/login")
response: httpx.Response response: httpx.Response
# With the next URI # With the next URI
response = client.get("/test-next?next=/next&q=abc&page-no=4") response = client.get("/test-next?next=/next&q=abc&page-no=4")
self.assertEqual(response.status_code, 200) self.assertEqual(response.status_code, 200)
response = client.post("/test-next", data={"csrf_token": csrf_token, response = client.post("/test-next", data={"next": "/next",
"next": "/next",
"name": "viewer"}) "name": "viewer"})
self.assertEqual(response.status_code, 200) self.assertEqual(response.status_code, 200)
# Without the next URI # Without the next URI
response = client.get("/test-no-next?q=abc&page-no=4") response = client.get("/test-no-next?q=abc&page-no=4")
self.assertEqual(response.status_code, 200) self.assertEqual(response.status_code, 200)
response = client.post("/test-no-next", data={"csrf_token": csrf_token, response = client.post("/test-no-next", data={"name": "viewer"})
"name": "viewer"})
self.assertEqual(response.status_code, 200) self.assertEqual(response.status_code, 200)