ClickHouse/tests/integration/test_external_http_authenticator/test.py
2023-10-20 19:24:19 +02:00

121 lines
3.2 KiB
Python

import json
import logging
import pytest
import os
import sys
from .http_auth_server import GOOD_PASSWORD, USER_RESPONSES
from helpers.cluster import ClickHouseCluster
cluster = ClickHouseCluster(__file__)
instance = cluster.add_instance(
"node",
main_configs=["configs/config.xml"],
user_configs=["configs/users.xml"],
)
SCRIPT_DIR = os.path.dirname(os.path.realpath(__file__))
def run_echo_server():
tmp = instance.copy_file_to_container(
os.path.join(SCRIPT_DIR, "http_auth_server.py"),
"/http_auth_server.py",
)
tmp = instance.exec_in_container(
[
"bash",
"-c",
"python3 /http_auth_server.py > /http_auth_server.log 2>&1",
],
detach=True,
user="root",
)
for _ in range(0, 10):
ping_response = instance.exec_in_container(
["curl", "-s", f"http://localhost:8000/health"],
nothrow=True,
)
logging.debug(f"Reply1: {ping_response}")
if ping_response == "OK":
return
raise Exception("Echo server is not responding")
@pytest.fixture(scope="module")
def started_cluster():
try:
cluster.start()
run_echo_server()
yield cluster
finally:
cluster.shutdown()
def test_user_from_config_basic_auth_pass(started_cluster):
assert (
instance.query("SHOW CREATE USER good_user")
== "CREATE USER good_user IDENTIFIED WITH http SERVER \\'basic_server\\' SCHEME \\'BASIC\\' SETTINGS PROFILE default\n"
)
assert (
instance.query(
"SELECT currentUser()", user="good_user", password="good_password"
)
== "good_user\n"
)
def test_user_create_basic_auth_pass(started_cluster):
instance.query(
"CREATE USER basic_user IDENTIFIED WITH HTTP SERVER 'basic_server' SCHEME 'BASIC'"
)
assert (
instance.query("SHOW CREATE USER basic_user")
== "CREATE USER basic_user IDENTIFIED WITH http SERVER \\'basic_server\\' SCHEME \\'BASIC\\'\n"
)
assert (
instance.query(
"SELECT currentUser()", user="basic_user", password=GOOD_PASSWORD
)
== "basic_user\n"
)
instance.query("DROP USER basic_user")
def test_basic_auth_failed(started_cluster):
assert "good_user: Authentication failed" in instance.query_and_get_error(
"SELECT currentUser()", user="good_user", password="bad_password"
)
def test_session_settings_from_auth_response(started_cluster):
for user, response in USER_RESPONSES.items():
query_id = f"test_query_{user}"
assert (
instance.query(
"SELECT currentUser()",
user=user,
password="good_password",
query_id=query_id,
)
== f"{user}\n"
)
instance.query("SYSTEM FLUSH LOGS")
res = instance.query(
f"select Settings from system.query_log where type = 'QueryFinish' and query_id = '{query_id}' FORMAT JSON"
)
res = json.loads(res)
query_settings = res["data"][0]["Settings"]
if isinstance(response, dict):
for key, value in response.get("settings", {}).items():
assert query_settings.get(key) == value