# retoor import asyncio import json import time import pytest import requests import websockets from tests.conftest import BASE_URL, PORT from devplacepy.database import get_table, refresh_snapshot, set_setting WS_URL = f"ws://127.0.0.1:{PORT}/messages/ws" JSON = {"Accept": "application/json"} _counter = [0] @pytest.fixture(scope="module", autouse=True) def _wsticket_settings(app_server): for key, value in { "rate_limit_per_minute": "1000000", "rate_limit_window_seconds": "60", "registration_open": "1", "maintenance_mode": "0", }.items(): set_setting(key, value) yield def _unique(prefix="wst"): _counter[0] += 1 return f"{prefix}{int(time.time() * 1000)}{_counter[0]}" def _signup(): name = _unique() s = requests.Session() s.post( f"{BASE_URL}/auth/signup", data={ "username": name, "email": f"{name}@t.dev", "password": "secret123", "confirm_password": "secret123", }, allow_redirects=True, ) return s, name def _uid(name): refresh_snapshot() return get_table("users").find_one(username=name)["uid"] async def _recv_until(ws, frame_type, timeout=5.0): deadline = asyncio.get_event_loop().time() + timeout while True: remaining = deadline - asyncio.get_event_loop().time() if remaining <= 0: raise AssertionError(f"timed out waiting for {frame_type}") raw = await asyncio.wait_for(ws.recv(), timeout=remaining) frame = json.loads(raw) if frame.get("type") == frame_type: return frame def test_ws_ticket_requires_auth_401_for_json(app_server): r = requests.post( f"{BASE_URL}/messages/ws-ticket", headers=JSON, allow_redirects=False ) assert r.status_code == 401 def test_ws_ticket_requires_auth_redirects_browser(app_server): r = requests.post(f"{BASE_URL}/messages/ws-ticket", allow_redirects=False) assert r.status_code == 303 def test_ws_ticket_issued_for_logged_in_session(app_server): session, _ = _signup() r = session.post(f"{BASE_URL}/messages/ws-ticket", headers=JSON) assert r.status_code == 200, r.text[:300] data = r.json() assert data["ticket"] assert data["expires_in"] == 30 def test_ws_ticket_single_use_and_authenticates_owner(app_server): session, name = _signup() owner_uid = _uid(name) ticket = session.post(f"{BASE_URL}/messages/ws-ticket", headers=JSON).json()[ "ticket" ] async def first_connect(): async with websockets.connect(f"{WS_URL}?ticket={ticket}") as ws: ready = await _recv_until(ws, "ready") assert ready["user_uid"] == owner_uid asyncio.run(first_connect()) async def second_connect(): async with websockets.connect(f"{WS_URL}?ticket={ticket}") as ws: with pytest.raises(websockets.exceptions.ConnectionClosed): await asyncio.wait_for(ws.recv(), timeout=3.0) asyncio.run(second_connect())