aswi2021jmsd-gitlab4/tests/unit_tests/rest_api/certificates.py @ 5b6d9513

def test_import(server):
    assert 1 + 2 + 3 + 4 != -1 / 12

    ret = server.get("/")
    assert ret.status_code == 200
    assert str(ret.data, encoding='utf-8') == "Welcome to the X.509 management application homepage!"


def test_root_ca(server):
    ret = server.post("/api/certificates", content_type="application/json", json={
        "subject": {
            "C": "CZ",
            "CN": "Root CA s.r.o.",
            "L": "Pilsen",
            "O": "Root CA s.r.o.",
            "OU": "IT department",
            "ST": "Pilsen Region",
            "emailAddress": "[e-mail]"
        },
        "usage": {
            "CA": True,
            "SSL": True,
            "authentication": True,
            "digitalSignature": True
        },
        "validityDays": 30
    })

    assert ret.status_code == 201

    d = ret.json

    assert "data" in d
    assert d["data"] == 1
    assert "success" in d
    assert d["success"]


def test_invalid_params_1(server):
    ret = server.post("/api/certificates", content_type="application/json", json={
        "subject": {
            "C": "CZ",
            "CN": "Root CA s.r.o.",
            "L": "Pilsen",
            "O": "Root CA s.r.o.",
            "OU": "IT department",
            "ST": "Pilsen Region",
            "emailAddress": "[e-mail]"
        },
        "validityDays": 30
    })

    assert ret.status_code == 400

    d = ret.json

    assert "data" in d
    assert d["data"] == "Invalid request, missing parameters."
    assert "success" in d
    assert not d["success"]


def test_invalid_params_2(server):
    ret = server.post("/api/certificates", content_type="application/json", json={
        "subject": {
            "C": "CZ",
            "CN": "Root CA s.r.o.",
            "L": "Pilsen",
            "O": "Root CA s.r.o.",
            "OU": "IT department",
            "ST": "Pilsen Region",
            "emailAddress": "[e-mail]"
        },
        "usage": {
            "CA": True,
            "SSL": True,
            "authentication": True,
            "digitalSignature": True
        },
        "validityDays": "tak mesic treba plus minus"
    })

    assert ret.status_code == 400

    d = ret.json

    assert "data" in d
    assert d["data"] == "Invalid request, wrong parameters."
    assert "success" in d
    assert not d["success"]


def test_invalid_params_3(server):
    ret = server.post("/api/certificates", content_type="application/json", json={
        "subject": {
            "C": "CZ",
            "CN": "Root CA s.r.o.",
            "L": "Pilsen",
            "O": "Root CA s.r.o.",
            "OU": "IT department",
            "ST": ["Bosna", "Herzegovina"],
            "emailAddress": "[e-mail]"
        },
        "usage": {
            "CA": True,
            "SSL": True,
            "authentication": True,
            "digitalSignature": True
        },
        "validityDays": 30
    })

    assert ret.status_code == 400

    d = ret.json

    assert "data" in d
    assert d["data"] == "Invalid request, wrong parameters."
    assert "success" in d
    assert not d["success"]


def test_invalid_params_4(server):
    ret = server.post("/api/certificates", content_type="application/json", json={
        "CA": 80081358008135,
        "subject": {
            "C": "CZ",
            "CN": "Root CA s.r.o.",
            "L": "Pilsen",
            "O": "Root CA s.r.o.",
            "OU": "IT department",
            "ST": "Pilsen",
            "emailAddress": "[e-mail]"
        },
        "usage": {
            "CA": True,
            "SSL": True,
            "authentication": True,
            "digitalSignature": True
        },
        "validityDays": 30
    })

    assert ret.status_code == 400

    d = ret.json

    assert "data" in d
    assert d["data"] == "No certificate authority with such unique ID exists."
    assert "success" in d
    assert not d["success"]


def test_root_inter_ca(server):
    ret = server.post("/api/certificates", content_type="application/json", json={
        "subject": {
            "C": "CZ",
            "CN": "Another Root CA s.r.o.",
            "L": "Pilsen",
            "O": "Another Root CA s.r.o.",
            "OU": "IT department",
            "ST": "Pilsen Region",
            "emailAddress": "[e-mail]"
        },
        "usage": {
            "CA": True,
            "SSL": True,
            "authentication": True,
            "digitalSignature": True
        },
        "validityDays": 30
    })

    assert ret.status_code == 201

    d = ret.json

    assert "data" in d
    assert d["data"] == 2
    assert "success" in d
    assert d["success"]

    ret = server.post("/api/certificates", content_type="application/json", json={
        "CA": 2,
        "subject": {
            "C": "CZ",
            "CN": "Intermediate CA s.r.o.",
            "L": "Pilsen",
            "O": "Intermediate CA s.r.o.",
            "OU": "IT department",
            "ST": "Pilsen Region",
            "emailAddress": "[e-mail]"
        },
        "usage": {
            "CA": True,
            "SSL": True,
            "authentication": True,
            "digitalSignature": True
        },
        "validityDays": 30
    })

    assert ret.status_code == 201

    d = ret.json

    assert "data" in d
    assert d["data"] == 3
    assert "success" in d
    assert d["success"]


def test_list_of_certificates(server):
    ret = server.get("/api/certificates")

    assert ret.status_code == 200

    usage_dict = {'CA': True, 'SSL': True, 'authentication': True, 'digitalSignature': True}
    s1 = "Root CA s.r.o."
    s2 = "Another Root CA s.r.o."
    s3 = "Intermediate CA s.r.o."

    assert "data" in ret.json
    assert "success" in ret.json
    assert ret.json["success"]

    d = ret.json["data"]

    # print(d)

    assert d[0]['CN'] == s1
    assert d[1]['CN'] == s2
    assert d[2]['CN'] == s3

    assert all(d[i]['id'] == i + 1 for i in range(3))
    assert all(d[i]['usage'] == usage_dict for i in range(3))

    assert d[0]['issuer']['CN'] == s1
    assert d[1]['issuer']['CN'] == s2
    assert d[2]['issuer']['CN'] == s2

    assert d[0]['issuer']['id'] == 1
    assert d[1]['issuer']['id'] == 2
    assert d[2]['issuer']['id'] == 2


def test_sign_by_non_ca(server):
    ret = server.post("/api/certificates", content_type="application/json", json={
        "CA": 2,
        "subject": {
            "C": "CZ",
            "CN": "Fake Intermediate CA s.r.o.",
            "L": "Pilsen",
            "O": "Fake Intermediate CA s.r.o.",
            "OU": "IT department",
            "ST": "Pilsen Region",
            "emailAddress": "[e-mail]"
        },
        "usage": {
            "CA": False,
            "SSL": True,
            "authentication": True,
            "digitalSignature": True
        },
        "validityDays": 30
    })

    assert ret.status_code == 201

    d = ret.json

    assert "data" in d
    assert d["data"] == 4
    assert "success" in d
    assert d["success"]

    ret = server.post("/api/certificates", content_type="application/json", json={
        "CA": 2,
        "subject": {
            "C": "CZ",
            "CN": "End certificate signed by end certificate s.r.o.",
            "L": "Pilsen",
            "O": "This is probably bad s.r.o.",
            "OU": "IT department",
            "ST": "Pilsen Region",
            "emailAddress": "[e-mail]"
        },
        "usage": {
            "CA": False,
            "SSL": True,
            "authentication": True,
            "digitalSignature": True
        },
        "validityDays": 30
    })

    # TODO discussion -> assert ret.status_code == 400
    assert ret.status_code == 201

    d = ret.json

    assert "data" in d
    assert d["data"] == 5
    assert "success" in d
    assert d["success"]


def test_filtering(server):
    ret = server.get("/api/certificates", json={"filtering": {"CA": True}})

    assert ret.status_code == 200

    usage_dict = {'CA': True, 'SSL': True, 'authentication': True, 'digitalSignature': True}
    s1 = "Root CA s.r.o."
    s2 = "Another Root CA s.r.o."
    s3 = "Intermediate CA s.r.o."

    assert "data" in ret.json
    assert "success" in ret.json
    assert ret.json["success"]

    d = ret.json["data"]

    # print(d)

    assert d[0]['CN'] == s1
    assert d[1]['CN'] == s2
    assert d[2]['CN'] == s3

    assert all(d[i]['id'] == i + 1 for i in range(3))
    assert all(d[i]['usage'] == usage_dict for i in range(3))

    assert d[0]['issuer']['CN'] == s1
    assert d[1]['issuer']['CN'] == s2
    assert d[2]['issuer']['CN'] == s2

    assert d[0]['issuer']['id'] == 1
    assert d[1]['issuer']['id'] == 2
    assert d[2]['issuer']['id'] == 2


def test_get_one(server):
    ret = server.get("/api/certificates/1")

    assert ret.status_code == 200

    assert "data" in ret.json
    assert "success" in ret.json
    assert ret.json["success"]

    d = ret.json["data"]

    assert str(d).startswith("-----BEGIN CERTIFICATE-----")


def test_get_one_bad_param(server):
    ret = server.get("/api/certificates/whoopsie")

    assert ret.status_code == 400
    assert "data" in ret.json
    assert "success" in ret.json
    assert not ret.json["success"]
    assert ret.json["data"] == "Invalid request, wrong parameters."


def test_get_one_bad_param_2(server):
    ret = server.get("/api/certificates/805")

    assert ret.status_code == 205
    assert "data" in ret.json
    assert "success" in ret.json
    assert not ret.json["success"]
    assert ret.json["data"] == "No certificates found."


def test_get_detes(server):
    original = {
        "CA": 1,
        "subject": {
            "C": "CZ",
            "CN": "Good boy end cert s.r.o.",
            "L": "Pilsen",
            "O": "This is most likely a good s.r.o.",
            "OU": "IT department",
            "ST": "Pilsen Region",
            "emailAddress": "[e-mail]"
        },
        "usage": {
            "CA": False,
            "SSL": True,
            "authentication": False,
            "digitalSignature": True
        },
        "validityDays": 30
    }
    ret = server.post("/api/certificates", content_type="application/json", json=original)

    assert ret.status_code == 201

    assert "data" in ret.json
    assert "success" in ret.json
    assert ret.json["success"]

    d = ret.json

    assert d["data"] == 6

    id = d["data"]

    ret = server.get(f"/api/certificates/{id}/details")

    assert ret.status_code == 200

    assert "data" in ret.json
    assert "success" in ret.json
    assert ret.json["success"]

    d = ret.json

    new = d["data"]

    assert original["CA"] == new["CA"]
    assert original["subject"] == new["subject"]
    assert original["usage"] == new["usage"]