Differential D6914 Diff 25057 swh/web/tests/api/views/test_graph.py

Changeset View

Standalone View

swh/web/tests/api/views/test_graph.py

Show All 28 Lines	def test_graph_endpoint_no_authentication_for_vpn_users(api_client, requests_mock):
)		)


def test_graph_endpoint_needs_authentication(api_client):		def test_graph_endpoint_needs_authentication(api_client):
url = reverse("api-1-graph", url_args={"graph_query": "stats"})		url = reverse("api-1-graph", url_args={"graph_query": "stats"})
check_http_get_response(api_client, url, status_code=401)		check_http_get_response(api_client, url, status_code=401)


def _authenticate_graph_user(api_client, keycloak_oidc):		def _authenticate_graph_user(api_client, keycloak_oidc, is_staff=False):
keycloak_oidc.client_permissions = [API_GRAPH_PERM]		keycloak_oidc.client_permissions = [API_GRAPH_PERM]
		if is_staff:
		keycloak_oidc.user_groups = ["/staff"]
oidc_profile = keycloak_oidc.login()		oidc_profile = keycloak_oidc.login()
api_client.credentials(HTTP_AUTHORIZATION=f"Bearer {oidc_profile['refresh_token']}")		api_client.credentials(HTTP_AUTHORIZATION=f"Bearer {oidc_profile['refresh_token']}")


def test_graph_endpoint_needs_permission(api_client, keycloak_oidc, requests_mock):		def test_graph_endpoint_needs_permission(api_client, keycloak_oidc, requests_mock):
graph_query = "stats"		graph_query = "stats"
url = reverse("api-1-graph", url_args={"graph_query": graph_query})		url = reverse("api-1-graph", url_args={"graph_query": graph_query})
oidc_profile = keycloak_oidc.login()		oidc_profile = keycloak_oidc.login()
▲ Show 20 Lines • Show All 216 Lines • ▼ Show 20 Lines	url = reverse(
query_params={"resolve_origins": "true"},		query_params={"resolve_origins": "true"},
)		)

resp = api_client.get(url, HTTP_ACCEPT="text/html")		resp = api_client.get(url, HTTP_ACCEPT="text/html")
assert resp.status_code == 406		assert resp.status_code == 406
assert resp.content_type == "application/json"		assert resp.content_type == "application/json"
assert resp.data["exception"] == "NotAcceptable"		assert resp.data["exception"] == "NotAcceptable"
assert resp.data["reason"] == "Could not satisfy the request Accept header."		assert resp.data["reason"] == "Could not satisfy the request Accept header."


		def test_graph_endpoint_max_edges_settings(api_client, keycloak_oidc, requests_mock):
		graph_config = get_config()["graph"]
		graph_query = "stats"
		url = reverse("api-1-graph", url_args={"graph_query": graph_query})
		requests_mock.get(
		get_config()["graph"]["server_url"] + graph_query,
		json={},
		headers={"Content-Type": "application/json"},
		)

		# currently unauthenticated user can only use the graph endpoint from
		# Software Heritage VPN
		check_http_get_response(
		api_client, url, status_code=200, server_name=SWH_WEB_INTERNAL_SERVER_NAME
		)
		assert (
		f"max_edges={graph_config['max_edges']['anonymous']}"
		in requests_mock.request_history[0].url
		)

		# standard user
		_authenticate_graph_user(api_client, keycloak_oidc)
		check_http_get_response(
		api_client, url, status_code=200,
		)
		assert (
		f"max_edges={graph_config['max_edges']['user']}"
		in requests_mock.request_history[1].url
		)

		# staff user
		_authenticate_graph_user(api_client, keycloak_oidc, is_staff=True)
		check_http_get_response(
		api_client, url, status_code=200,
		)
		assert (
		f"max_edges={graph_config['max_edges']['staff']}"
		in requests_mock.request_history[2].url
		)


		def test_graph_endpoint_max_edges_query_parameter_value(
		api_client, keycloak_oidc, requests_mock
		):
		graph_config = get_config()["graph"]
		graph_query = "stats"

		requests_mock.get(
		get_config()["graph"]["server_url"] + graph_query,
		json={},
		headers={"Content-Type": "application/json"},
		)
		_authenticate_graph_user(api_client, keycloak_oidc)

		max_edges_max_value = graph_config["max_edges"]["user"]

		max_edges = max_edges_max_value // 2
		url = reverse(
		"api-1-graph",
		url_args={"graph_query": graph_query},
		query_params={"max_edges": max_edges},
		)
		check_http_get_response(
		api_client, url, status_code=200,
		)
		assert f"max_edges={max_edges}" in requests_mock.request_history[0].url

		max_edges = max_edges_max_value * 2
		url = reverse(
		"api-1-graph",
		url_args={"graph_query": graph_query},
		query_params={"max_edges": max_edges},
		)
		check_http_get_response(
		api_client, url, status_code=200,
		)
		assert f"max_edges={max_edges_max_value}" in requests_mock.request_history[1].url