mirror of
https://git.linux-kernel.at/oliver/ivatar.git
synced 2025-11-12 03:06:24 +00:00
368aa5bf27
- Add Argon2PasswordHasher with high security settings as primary hasher - Implement fallback to PBKDF2PasswordHasher for CentOS 7/Python 3.6 compatibility - Add argon2-cffi dependency to requirements.txt - Replace all print statements with proper logging calls across codebase - Implement comprehensive logging configuration with multiple handlers: * ivatar.log - General application logs (INFO level) * ivatar_debug.log - Detailed debug logs (DEBUG level) * security.log - Security events (WARNING level) - Add configurable LOGS_DIR setting with local config override support - Create config_local.py.example with logging configuration examples - Fix code quality issues (flake8, black formatting, import conflicts) - Maintain backward compatibility with existing password hashes Security improvements: - New passwords use Argon2 (memory-hard, ASIC-resistant) - Enhanced PBKDF2 iterations for fallback scenarios - Structured logging for security monitoring and debugging - Production-ready configuration with flexible log locations Tests: 85/113 passing (failures due to external DNS/API dependencies) Code quality: All pre-commit hooks passing
114 lines
3.8 KiB
Python
114 lines
3.8 KiB
Python
# -*- coding: utf-8 -*-
|
|
"""
|
|
Test our utils from ivatar.utils
|
|
"""
|
|
|
|
from django.test import TestCase
|
|
|
|
from ivatar.utils import is_trusted_url, openid_variations
|
|
|
|
|
|
class Tester(TestCase):
|
|
"""
|
|
Main test class
|
|
"""
|
|
|
|
def test_openid_variations(self):
|
|
"""
|
|
Test if the OpenID variation "generator" does the correct thing
|
|
"""
|
|
openid0 = "http://user.url/"
|
|
openid1 = "http://user.url"
|
|
openid2 = "https://user.url/"
|
|
openid3 = "https://user.url"
|
|
|
|
# First variation
|
|
self.assertEqual(openid_variations(openid0)[0], openid0)
|
|
self.assertEqual(openid_variations(openid0)[1], openid1)
|
|
self.assertEqual(openid_variations(openid0)[2], openid2)
|
|
self.assertEqual(openid_variations(openid0)[3], openid3)
|
|
|
|
# Second varitations
|
|
self.assertEqual(openid_variations(openid1)[0], openid0)
|
|
self.assertEqual(openid_variations(openid1)[1], openid1)
|
|
self.assertEqual(openid_variations(openid1)[2], openid2)
|
|
self.assertEqual(openid_variations(openid1)[3], openid3)
|
|
|
|
# Third varitations
|
|
self.assertEqual(openid_variations(openid2)[0], openid0)
|
|
self.assertEqual(openid_variations(openid2)[1], openid1)
|
|
self.assertEqual(openid_variations(openid2)[2], openid2)
|
|
self.assertEqual(openid_variations(openid2)[3], openid3)
|
|
|
|
# Forth varitations
|
|
self.assertEqual(openid_variations(openid3)[0], openid0)
|
|
self.assertEqual(openid_variations(openid3)[1], openid1)
|
|
self.assertEqual(openid_variations(openid3)[2], openid2)
|
|
self.assertEqual(openid_variations(openid3)[3], openid3)
|
|
|
|
def test_is_trusted_url(self):
|
|
test_gravatar_true = is_trusted_url(
|
|
"https://gravatar.com/avatar/63a75a80e6b1f4adfdb04c1ca02e596c",
|
|
[
|
|
{
|
|
"schemes": ["http", "https"],
|
|
"host_equals": "gravatar.com",
|
|
"path_prefix": "/avatar/",
|
|
}
|
|
],
|
|
)
|
|
self.assertTrue(test_gravatar_true)
|
|
|
|
test_gravatar_false = is_trusted_url(
|
|
"https://gravatar.com.example.org/avatar/63a75a80e6b1f4adfdb04c1ca02e596c",
|
|
[
|
|
{
|
|
"schemes": ["http", "https"],
|
|
"host_suffix": ".gravatar.com",
|
|
"path_prefix": "/avatar/",
|
|
}
|
|
],
|
|
)
|
|
self.assertFalse(test_gravatar_false)
|
|
|
|
test_open_redirect = is_trusted_url(
|
|
"https://github.com/SethFalco/?boop=https://secure.gravatar.com/avatar/205e460b479e2e5b48aec07710c08d50",
|
|
[
|
|
{
|
|
"schemes": ["http", "https"],
|
|
"host_suffix": ".gravatar.com",
|
|
"path_prefix": "/avatar/",
|
|
}
|
|
],
|
|
)
|
|
self.assertFalse(test_open_redirect)
|
|
|
|
test_multiple_filters = is_trusted_url(
|
|
"https://ui-avatars.com/api/blah",
|
|
[
|
|
{
|
|
"schemes": ["https"],
|
|
"host_equals": "ui-avatars.com",
|
|
"path_prefix": "/api/",
|
|
},
|
|
{
|
|
"schemes": ["http", "https"],
|
|
"host_suffix": ".gravatar.com",
|
|
"path_prefix": "/avatar/",
|
|
},
|
|
],
|
|
)
|
|
self.assertTrue(test_multiple_filters)
|
|
|
|
test_url_prefix_true = is_trusted_url(
|
|
"https://ui-avatars.com/api/blah",
|
|
[{"url_prefix": "https://ui-avatars.com/api/"}],
|
|
)
|
|
self.assertTrue(test_url_prefix_true)
|
|
|
|
test_url_prefix_false = is_trusted_url(
|
|
"https://ui-avatars.com/api/blah",
|
|
[{"url_prefix": "https://gravatar.com/avatar/"}],
|
|
)
|
|
self.assertFalse(test_url_prefix_false)
|