mirror of
https://mau.dev/maunium/synapse.git
synced 2024-10-01 01:36:05 -04:00
23740eaa3d
During the migration the automated script to update the copyright headers accidentally got rid of some of the existing copyright lines. Reinstate them.
176 lines
6.3 KiB
Python
176 lines
6.3 KiB
Python
#
|
|
# This file is licensed under the Affero General Public License (AGPL) version 3.
|
|
#
|
|
# Copyright 2022 The Matrix.org Foundation C.I.C.
|
|
# Copyright (C) 2023 New Vector, Ltd
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU Affero General Public License as
|
|
# published by the Free Software Foundation, either version 3 of the
|
|
# License, or (at your option) any later version.
|
|
#
|
|
# See the GNU Affero General Public License for more details:
|
|
# <https://www.gnu.org/licenses/agpl-3.0.html>.
|
|
#
|
|
# Originally licensed under the Apache License, Version 2.0:
|
|
# <http://www.apache.org/licenses/LICENSE-2.0>.
|
|
#
|
|
# [This file includes modifications made by New Vector Limited]
|
|
#
|
|
#
|
|
|
|
from twisted.test.proto_helpers import MemoryReactor
|
|
|
|
from synapse.rest import admin
|
|
from synapse.rest.client import login, login_token_request, versions
|
|
from synapse.server import HomeServer
|
|
from synapse.util import Clock
|
|
|
|
from tests import unittest
|
|
from tests.unittest import override_config
|
|
|
|
GET_TOKEN_ENDPOINT = "/_matrix/client/v1/login/get_token"
|
|
|
|
|
|
class LoginTokenRequestServletTestCase(unittest.HomeserverTestCase):
|
|
servlets = [
|
|
login.register_servlets,
|
|
admin.register_servlets,
|
|
login_token_request.register_servlets,
|
|
versions.register_servlets, # TODO: remove once unstable revision 0 support is removed
|
|
]
|
|
|
|
def make_homeserver(self, reactor: MemoryReactor, clock: Clock) -> HomeServer:
|
|
self.hs = self.setup_test_homeserver()
|
|
self.hs.config.registration.enable_registration = True
|
|
self.hs.config.registration.registrations_require_3pid = []
|
|
self.hs.config.registration.auto_join_rooms = []
|
|
self.hs.config.captcha.enable_registration_captcha = False
|
|
|
|
return self.hs
|
|
|
|
def prepare(self, reactor: MemoryReactor, clock: Clock, hs: HomeServer) -> None:
|
|
self.user = "user123"
|
|
self.password = "password"
|
|
|
|
def test_disabled(self) -> None:
|
|
channel = self.make_request("POST", GET_TOKEN_ENDPOINT, {}, access_token=None)
|
|
self.assertEqual(channel.code, 404)
|
|
|
|
self.register_user(self.user, self.password)
|
|
token = self.login(self.user, self.password)
|
|
|
|
channel = self.make_request("POST", GET_TOKEN_ENDPOINT, {}, access_token=token)
|
|
self.assertEqual(channel.code, 404)
|
|
|
|
@override_config({"login_via_existing_session": {"enabled": True}})
|
|
def test_require_auth(self) -> None:
|
|
channel = self.make_request("POST", GET_TOKEN_ENDPOINT, {}, access_token=None)
|
|
self.assertEqual(channel.code, 401)
|
|
|
|
@override_config({"login_via_existing_session": {"enabled": True}})
|
|
def test_uia_on(self) -> None:
|
|
user_id = self.register_user(self.user, self.password)
|
|
token = self.login(self.user, self.password)
|
|
|
|
channel = self.make_request("POST", GET_TOKEN_ENDPOINT, {}, access_token=token)
|
|
self.assertEqual(channel.code, 401)
|
|
self.assertIn({"stages": ["m.login.password"]}, channel.json_body["flows"])
|
|
|
|
session = channel.json_body["session"]
|
|
|
|
uia = {
|
|
"auth": {
|
|
"type": "m.login.password",
|
|
"identifier": {"type": "m.id.user", "user": self.user},
|
|
"password": self.password,
|
|
"session": session,
|
|
},
|
|
}
|
|
|
|
channel = self.make_request("POST", GET_TOKEN_ENDPOINT, uia, access_token=token)
|
|
self.assertEqual(channel.code, 200)
|
|
self.assertEqual(channel.json_body["expires_in_ms"], 300000)
|
|
|
|
login_token = channel.json_body["login_token"]
|
|
|
|
channel = self.make_request(
|
|
"POST",
|
|
"/login",
|
|
content={"type": "m.login.token", "token": login_token},
|
|
)
|
|
self.assertEqual(channel.code, 200, channel.result)
|
|
self.assertEqual(channel.json_body["user_id"], user_id)
|
|
|
|
@override_config(
|
|
{"login_via_existing_session": {"enabled": True, "require_ui_auth": False}}
|
|
)
|
|
def test_uia_off(self) -> None:
|
|
user_id = self.register_user(self.user, self.password)
|
|
token = self.login(self.user, self.password)
|
|
|
|
channel = self.make_request("POST", GET_TOKEN_ENDPOINT, {}, access_token=token)
|
|
self.assertEqual(channel.code, 200)
|
|
self.assertEqual(channel.json_body["expires_in_ms"], 300000)
|
|
|
|
login_token = channel.json_body["login_token"]
|
|
|
|
channel = self.make_request(
|
|
"POST",
|
|
"/login",
|
|
content={"type": "m.login.token", "token": login_token},
|
|
)
|
|
self.assertEqual(channel.code, 200, channel.result)
|
|
self.assertEqual(channel.json_body["user_id"], user_id)
|
|
|
|
@override_config(
|
|
{
|
|
"login_via_existing_session": {
|
|
"enabled": True,
|
|
"require_ui_auth": False,
|
|
"token_timeout": "15s",
|
|
}
|
|
}
|
|
)
|
|
def test_expires_in(self) -> None:
|
|
self.register_user(self.user, self.password)
|
|
token = self.login(self.user, self.password)
|
|
|
|
channel = self.make_request("POST", GET_TOKEN_ENDPOINT, {}, access_token=token)
|
|
self.assertEqual(channel.code, 200)
|
|
self.assertEqual(channel.json_body["expires_in_ms"], 15000)
|
|
|
|
@override_config(
|
|
{
|
|
"login_via_existing_session": {
|
|
"enabled": True,
|
|
"require_ui_auth": False,
|
|
"token_timeout": "15s",
|
|
}
|
|
}
|
|
)
|
|
def test_unstable_support(self) -> None:
|
|
# TODO: remove support for unstable MSC3882 is no longer needed
|
|
|
|
# check feature is advertised in versions response:
|
|
channel = self.make_request(
|
|
"GET", "/_matrix/client/versions", {}, access_token=None
|
|
)
|
|
self.assertEqual(channel.code, 200)
|
|
self.assertEqual(
|
|
channel.json_body["unstable_features"]["org.matrix.msc3882"], True
|
|
)
|
|
|
|
self.register_user(self.user, self.password)
|
|
token = self.login(self.user, self.password)
|
|
|
|
# check feature is available via the unstable endpoint and returns an expires_in value in seconds
|
|
channel = self.make_request(
|
|
"POST",
|
|
"/_matrix/client/unstable/org.matrix.msc3882/login/token",
|
|
{},
|
|
access_token=token,
|
|
)
|
|
self.assertEqual(channel.code, 200)
|
|
self.assertEqual(channel.json_body["expires_in"], 15)
|