/usr/share/pyshared/cherrypy/test/test_sessionauthenticate_filter.py is in python-cherrypy 2.3.0-3.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 | import test
test.prefer_parent_path()
import cherrypy
def setup_server():
class Test:
def index(self):
return "Hi, you are logged in"
index.exposed = True
cherrypy.root = Test()
cherrypy.config.update({
'server.log_to_screen': False,
'server.environment': 'production',
'session_filter.on': True,
'/': {'session_authenticate_filter.on':True},
})
import helper
class SessionAuthenticateFilterTest(helper.CPWebCase):
def testSessionAuthenticateFilter(self):
# request a page and check for login form
self.getPage('/')
self.assertInBody('<form method="post" action="do_login">')
# setup credentials
login_body = 'login=login&password=password&from_page=/'
# attempt a login
self.getPage('/do_login', method='POST', body=login_body)
self.assert_(self.status in ('302 Found', '303 See Other'))
# get the page now that we are logged in
self.getPage('/', self.cookies)
self.assertBody('Hi, you are logged in')
# do a logout
self.getPage('/do_logout', self.cookies)
self.assert_(self.status in ('302 Found', '303 See Other'))
# verify we are logged out
self.getPage('/', self.cookies)
self.assertInBody('<form method="post" action="do_login">')
if __name__ == "__main__":
setup_server()
helper.testmain()
|