NgTech-LTD/gns3-server
2
0
Fork 0
mirror of https://github.com/GNS3/gns3-server.git synced 2025-02-08 01:03:48 +02:00
Code Issues Packages Projects Releases Wiki Activity

Do not test authentication on docs endpoints

Browse Source
This commit is contained in:
grossmj 2024-12-19 17:04:00 +07:00
parent 0ee73605c0
commit eca502c49c
No known key found for this signature in database
GPG Key ID: 1E7DD6DBB53FF3D7
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
tests/api/routes/test_routes.py
View File

@ -31,6 +31,9 @@ ALLOWED_CONTROLLER_ENDPOINTS = [
("/", "GET"), ("/", "GET"),
("/debug", "GET"), ("/debug", "GET"),
("/static/web-ui/{file_path:path}", "GET"), ("/static/web-ui/{file_path:path}", "GET"),
("/docs", "GET"),
("/docs/oauth2-redirect", "GET"),
("/redoc", "GET"),
("/v3/version", "GET"), ("/v3/version", "GET"),
("/v3/version", "POST"), ("/v3/version", "POST"),
("/v3/access/users/login", "POST"), ("/v3/access/users/login", "POST"),
@ -49,6 +52,7 @@ async def test_controller_endpoints_require_authentication(app: FastAPI, unautho
if isinstance(route, APIRoute): if isinstance(route, APIRoute):
for method in list(route.methods): for method in list(route.methods):
if (route.path, method) not in ALLOWED_CONTROLLER_ENDPOINTS: if (route.path, method) not in ALLOWED_CONTROLLER_ENDPOINTS:
print(f"Testing {route.path} {method}")
response = await getattr(unauthorized_client, method.lower())(route.path) response = await getattr(unauthorized_client, method.lower())(route.path)
assert response.status_code == status.HTTP_401_UNAUTHORIZED assert response.status_code == status.HTTP_401_UNAUTHORIZED
elif isinstance(route, APIWebSocketRoute): elif isinstance(route, APIWebSocketRoute):