Mercurial > hg > nginx-tests

annotate auth_basic.t @ 229:9969fcf1f27e

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Tests: corrupted password entries tests.
author Maxim Dounin <mdounin@mdounin.ru>
date Fri, 10 Aug 2012 20:51:43 +0400
parents f9325406df0b
children 8d58b624a142
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
150
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
1 #!/usr/bin/perl
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
2
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
3 # (C) Maxim Dounin
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
4
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
5 # Tests for auth basic module.
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
6
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
7 ###############################################################################
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
8
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
9 use warnings;
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
10 use strict;
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
11
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
12 use Test::More;
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
13
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
14 use MIME::Base64;
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
15
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
16 BEGIN { use FindBin; chdir($FindBin::Bin); }
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
17
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
18 use lib 'lib';
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
19 use Test::Nginx;
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
20
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
21 ###############################################################################
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
22
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
23 select STDERR; $| = 1;
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
24 select STDOUT; $| = 1;
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
25
229
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
26 my $t = Test::Nginx->new()->has(qw/http auth_basic/)->plan(15)
150
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
27 ->write_file_expand('nginx.conf', <<'EOF');
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
28
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
29 %%TEST_GLOBALS%%
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
30
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
31 daemon off;
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
32
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
33 events {
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
34 }
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
35
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
36 http {
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
37 %%TEST_GLOBALS_HTTP%%
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
38
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
39 server {
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
40 listen 127.0.0.1:8080;
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
41 server_name localhost;
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
42
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
43 location / {
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
44 auth_basic "closed site";
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
45 auth_basic_user_file %%TESTDIR%%/htpasswd;
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
46 }
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
47 }
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
48 }
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
49
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
50 EOF
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
51
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
52 my $d = $t->testdir();
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
53
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
54 $t->write_file('index.html', 'SEETHIS');
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
55
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
56 $t->write_file(
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
57 'htpasswd',
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
58 'crypt:' . crypt('password', 'salt') . "\n" .
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
59 'crypt1:' . crypt('password', '$1$salt$') . "\n" .
229
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
60 'crypt2:' . '$1$' . "\n" .
150
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
61 'apr1:' . '$apr1$salt$Xxd1irWT9ycqoYxGFn4cb.' . "\n" .
229
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
62 'apr12:' . '$apr1$' . "\n" .
150
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
63 'plain:' . '{PLAIN}password' . "\n" .
229
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
64 'ssha:' . '{SSHA}yI6cZwQadOA1e+/f+T+H3eCQQhRzYWx0' . "\n" .
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
65 'ssha2:' . '{SSHA}_____wQadOA1e+/f+T+H3eCQQhRzYWx0' . "\n" .
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
66 'ssha3:' . '{SSHA}Zm9vCg==' . "\n"
150
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
67 );
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
68
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
69 $t->run();
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
70
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
71 ###############################################################################
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
72
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
73 like(http_get('/'), qr!401 Unauthorized!ms, 'rejects unathorized');
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
74
223
f9325406df0b Tests: skip tests not appropriate for win32.
Maxim Dounin <mdounin@mdounin.ru>
parents: 166
diff changeset
75 SKIP: {
f9325406df0b Tests: skip tests not appropriate for win32.
Maxim Dounin <mdounin@mdounin.ru>
parents: 166
diff changeset
76
f9325406df0b Tests: skip tests not appropriate for win32.
Maxim Dounin <mdounin@mdounin.ru>
parents: 166
diff changeset
77 skip 'no crypt on win32', 4 if $^O eq 'MSWin32';
f9325406df0b Tests: skip tests not appropriate for win32.
Maxim Dounin <mdounin@mdounin.ru>
parents: 166
diff changeset
78
150
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
79 like(http_get_auth('/', 'crypt', 'password'), qr!SEETHIS!, 'normal crypt');
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
80 unlike(http_get_auth('/', 'crypt', '123'), qr!SEETHIS!, 'normal wrong');
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
81
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
82 like(http_get_auth('/', 'crypt1', 'password'), qr!SEETHIS!, 'crypt $1$ (md5)');
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
83 unlike(http_get_auth('/', 'crypt1', '123'), qr!SEETHIS!, 'crypt $1$ wrong');
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
84
229
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
85 like(http_get_auth('/', 'crypt2', '1'), qr!401 Unauthorized!,
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
86 'crypt $1$ broken');
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
87
223
f9325406df0b Tests: skip tests not appropriate for win32.
Maxim Dounin <mdounin@mdounin.ru>
parents: 166
diff changeset
88 }
f9325406df0b Tests: skip tests not appropriate for win32.
Maxim Dounin <mdounin@mdounin.ru>
parents: 166
diff changeset
89
150
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
90 like(http_get_auth('/', 'apr1', 'password'), qr!SEETHIS!, 'apr1 md5');
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
91 like(http_get_auth('/', 'plain', 'password'), qr!SEETHIS!, 'plain password');
152
c9be30f65be7 Tests: various password schemes are in 1.0.3.
Maxim Dounin <mdounin@mdounin.ru>
parents: 150
diff changeset
92
c9be30f65be7 Tests: various password schemes are in 1.0.3.
Maxim Dounin <mdounin@mdounin.ru>
parents: 150
diff changeset
93 SKIP: {
c9be30f65be7 Tests: various password schemes are in 1.0.3.
Maxim Dounin <mdounin@mdounin.ru>
parents: 150
diff changeset
94 # SHA1 may not be available unless we have OpenSSL
c9be30f65be7 Tests: various password schemes are in 1.0.3.
Maxim Dounin <mdounin@mdounin.ru>
parents: 150
diff changeset
95
c9be30f65be7 Tests: various password schemes are in 1.0.3.
Maxim Dounin <mdounin@mdounin.ru>
parents: 150
diff changeset
96 skip 'no sha1', 1 unless $t->has_module('--with-http_ssl_module')
c9be30f65be7 Tests: various password schemes are in 1.0.3.
Maxim Dounin <mdounin@mdounin.ru>
parents: 150
diff changeset
97 or $t->has_module('--with-sha1')
c9be30f65be7 Tests: various password schemes are in 1.0.3.
Maxim Dounin <mdounin@mdounin.ru>
parents: 150
diff changeset
98 or $t->has_module('--with-openssl');
c9be30f65be7 Tests: various password schemes are in 1.0.3.
Maxim Dounin <mdounin@mdounin.ru>
parents: 150
diff changeset
99
c9be30f65be7 Tests: various password schemes are in 1.0.3.
Maxim Dounin <mdounin@mdounin.ru>
parents: 150
diff changeset
100 like(http_get_auth('/', 'ssha', 'password'), qr!SEETHIS!, 'ssha');
150
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
101 }
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
102
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
103 unlike(http_get_auth('/', 'apr1', '123'), qr!SEETHIS!, 'apr1 md5 wrong');
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
104 unlike(http_get_auth('/', 'plain', '123'), qr!SEETHIS!, 'plain wrong');
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
105 unlike(http_get_auth('/', 'ssha', '123'), qr!SEETHIS!, 'ssha wrong');
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
106
229
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
107 like(http_get_auth('/', 'apr12', '1'), qr!401 Unauthorized!, 'apr1 md5 broken');
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
108
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
109 SKIP: {
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
110 skip 'unsafe', 2 unless $ENV{TEST_NGINX_UNSAFE};
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
111 local $TODO = 'not yet';
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
112
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
113 like(http_get_auth('/', 'ssha2', '1'), qr!401 Unauthorized!, 'ssha broken 1');
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
114 like(http_get_auth('/', 'ssha3', '1'), qr!401 Unauthorized!, 'ssha broken 2');
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
115
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
116 }
9969fcf1f27e Tests: corrupted password entries tests.
Maxim Dounin <mdounin@mdounin.ru>
parents: 223
diff changeset
117
150
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
118 ###############################################################################
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
119
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
120 sub http_get_auth {
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
121 my ($url, $user, $password) = @_;
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
122
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
123 my $auth = encode_base64($user . ':' . $password);
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
124
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
125 my $r = http(<<EOF);
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
126 GET $url HTTP/1.0
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
127 Host: localhost
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
128 Authorization: Basic $auth
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
129
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
130 EOF
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
131 }
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
132
6b73d6c8f26c Tests: add some auth basic module tests.
Maxim Dounin <mdounin@mdounin.ru>
parents:
diff changeset
133 ###############################################################################