2011-08-30 03:38:59 +02:00
|
|
|
#! /usr/bin/env py.test
|
|
|
|
|
|
2016-05-12 03:53:35 +02:00
|
|
|
# Builtin imports
|
2015-09-16 23:54:41 +02:00
|
|
|
import logging
|
2019-09-18 03:29:48 +02:00
|
|
|
import os
|
2015-09-17 19:58:22 +02:00
|
|
|
|
2019-09-02 21:31:59 +02:00
|
|
|
|
|
|
|
|
try: # python 3
|
2016-01-19 12:52:34 +01:00
|
|
|
from html.parser import HTMLParser
|
2019-09-02 21:31:59 +02:00
|
|
|
from html import unescape
|
2016-01-19 12:52:34 +01:00
|
|
|
except ImportError:
|
|
|
|
|
from HTMLParser import HTMLParser
|
2019-09-18 03:29:48 +02:00
|
|
|
|
2019-09-02 21:31:59 +02:00
|
|
|
unescape = HTMLParser().unescape
|
2016-01-19 12:52:34 +01:00
|
|
|
|
2016-05-12 03:53:35 +02:00
|
|
|
try:
|
|
|
|
|
import xmlrpc.client as xmlrpclib
|
|
|
|
|
except ImportError:
|
|
|
|
|
import xmlrpclib # legacy Python
|
|
|
|
|
|
|
|
|
|
# Third party imports
|
|
|
|
|
import pytest
|
|
|
|
|
import webtest
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# Local Imports
|
|
|
|
|
from pypiserver import __main__, bottle
|
2019-01-25 00:48:57 +01:00
|
|
|
|
2016-05-12 03:53:35 +02:00
|
|
|
import tests.test_core as test_core
|
|
|
|
|
|
2011-08-30 03:38:59 +02:00
|
|
|
|
2015-09-17 19:58:22 +02:00
|
|
|
# Enable logging to detect any problems with it
|
2014-11-15 02:37:40 +01:00
|
|
|
##
|
2015-09-15 19:53:59 +02:00
|
|
|
__main__.init_logging(level=logging.NOTSET)
|
2012-04-07 23:10:49 +02:00
|
|
|
|
2015-09-17 19:58:22 +02:00
|
|
|
|
2012-11-26 22:25:30 +01:00
|
|
|
@pytest.fixture()
|
2012-12-02 01:15:18 +01:00
|
|
|
def _app(app):
|
|
|
|
|
return app.module
|
2012-04-07 23:10:49 +02:00
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
@pytest.fixture
|
|
|
|
|
def app(tmpdir):
|
2012-04-07 23:10:49 +02:00
|
|
|
from pypiserver import app
|
2019-09-18 03:29:48 +02:00
|
|
|
|
2015-12-21 00:06:19 +01:00
|
|
|
return app(root=tmpdir.strpath, authenticated=[])
|
2011-08-30 03:38:59 +02:00
|
|
|
|
2012-04-03 22:49:47 +02:00
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
@pytest.fixture
|
|
|
|
|
def testapp(app):
|
2016-05-12 03:53:35 +02:00
|
|
|
"""Return a webtest TestApp initiated with pypiserver app"""
|
2012-12-02 01:15:18 +01:00
|
|
|
return webtest.TestApp(app)
|
2012-04-03 22:49:47 +02:00
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
@pytest.fixture
|
|
|
|
|
def root(tmpdir):
|
2016-05-12 03:53:35 +02:00
|
|
|
"""Return a pytest temporary directory"""
|
2012-12-02 01:15:18 +01:00
|
|
|
return tmpdir
|
2012-04-03 22:49:47 +02:00
|
|
|
|
2011-08-30 03:38:59 +02:00
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
@pytest.fixture
|
|
|
|
|
def priv(app):
|
|
|
|
|
b = bottle.Bottle()
|
|
|
|
|
b.mount("/priv/", app)
|
|
|
|
|
return b
|
2011-09-01 01:08:32 +02:00
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
@pytest.fixture
|
|
|
|
|
def testpriv(priv):
|
|
|
|
|
return webtest.TestApp(priv)
|
2011-08-30 03:38:59 +02:00
|
|
|
|
|
|
|
|
|
2016-05-12 03:53:35 +02:00
|
|
|
@pytest.fixture
|
|
|
|
|
def search_xml():
|
|
|
|
|
"""Return an xml dom suitable for passing to search"""
|
2019-09-18 03:29:48 +02:00
|
|
|
xml = "<xml><methodName>search</methodName><string>test</string></xml>"
|
2016-05-12 03:53:35 +02:00
|
|
|
return xml
|
|
|
|
|
|
|
|
|
|
|
2019-09-18 03:29:48 +02:00
|
|
|
@pytest.fixture(
|
|
|
|
|
params=[
|
|
|
|
|
" ", # Mustcontain test below fails when string is empty.
|
|
|
|
|
"Hey there!",
|
|
|
|
|
"<html><body>Hey there!</body></html>",
|
|
|
|
|
]
|
|
|
|
|
)
|
2015-02-23 01:45:35 +01:00
|
|
|
def welcome_file_no_vars(request, root):
|
2016-05-12 03:53:35 +02:00
|
|
|
"""Welcome file fixture
|
|
|
|
|
|
|
|
|
|
:param request: pytest builtin fixture
|
|
|
|
|
:param root: root temporary directory
|
|
|
|
|
"""
|
2015-02-23 01:45:35 +01:00
|
|
|
wfile = root.join("testwelcome.html")
|
2015-02-23 02:19:58 +01:00
|
|
|
wfile.write(request.param)
|
2015-09-16 23:54:41 +02:00
|
|
|
|
2015-02-23 01:45:35 +01:00
|
|
|
return wfile
|
|
|
|
|
|
|
|
|
|
|
2015-09-16 23:54:41 +02:00
|
|
|
@pytest.fixture()
|
2015-02-23 01:45:35 +01:00
|
|
|
def welcome_file_all_vars(request, root):
|
2015-09-17 19:58:22 +02:00
|
|
|
msg = """
|
2015-02-23 01:45:35 +01:00
|
|
|
{{URL}}
|
|
|
|
|
{{VERSION}}
|
|
|
|
|
{{NUMPKGS}}
|
|
|
|
|
{{PACKAGES}}
|
|
|
|
|
{{SIMPLE}}
|
|
|
|
|
"""
|
|
|
|
|
wfile = root.join("testwelcome.html")
|
2015-02-23 02:19:58 +01:00
|
|
|
wfile.write(msg)
|
2015-09-16 23:54:41 +02:00
|
|
|
|
2015-02-23 01:45:35 +01:00
|
|
|
return wfile
|
|
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_root_count(root, testapp):
|
2016-05-12 03:53:35 +02:00
|
|
|
"""Test that the welcome page count updates with added packages
|
|
|
|
|
|
|
|
|
|
:param root: root temporary directory fixture
|
|
|
|
|
:param testapp: webtest TestApp
|
|
|
|
|
"""
|
2012-12-02 01:15:18 +01:00
|
|
|
resp = testapp.get("/")
|
|
|
|
|
resp.mustcontain("PyPI compatible package index serving 0 packages")
|
2011-08-30 03:38:59 +02:00
|
|
|
root.join("Twisted-11.0.0.tar.bz2").write("")
|
2012-12-02 01:15:18 +01:00
|
|
|
resp = testapp.get("/")
|
|
|
|
|
resp.mustcontain("PyPI compatible package index serving 1 packages")
|
2011-08-30 03:38:59 +02:00
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_root_hostname(testapp):
|
|
|
|
|
resp = testapp.get("/", headers={"Host": "systemexit.de"})
|
|
|
|
|
resp.mustcontain("easy_install -i http://systemexit.de/simple/ PACKAGE")
|
|
|
|
|
# go("http://systemexit.de/")
|
2011-08-30 03:38:59 +02:00
|
|
|
|
|
|
|
|
|
2015-02-23 01:45:35 +01:00
|
|
|
def test_root_welcome_msg_no_vars(root, welcome_file_no_vars):
|
|
|
|
|
from pypiserver import app
|
2019-09-18 03:29:48 +02:00
|
|
|
|
2015-02-23 01:45:35 +01:00
|
|
|
app = app(root=root.strpath, welcome_file=welcome_file_no_vars.strpath)
|
|
|
|
|
testapp = webtest.TestApp(app)
|
|
|
|
|
resp = testapp.get("/")
|
|
|
|
|
from pypiserver import __version__ as pver
|
2019-09-18 03:29:48 +02:00
|
|
|
|
2015-02-23 02:19:58 +01:00
|
|
|
resp.mustcontain(welcome_file_no_vars.read(), no=pver)
|
2015-02-23 01:45:35 +01:00
|
|
|
|
2014-11-14 00:36:32 +01:00
|
|
|
|
2015-02-23 01:45:35 +01:00
|
|
|
def test_root_welcome_msg_all_vars(root, welcome_file_all_vars):
|
2014-11-14 00:36:32 +01:00
|
|
|
from pypiserver import app
|
2019-09-18 03:29:48 +02:00
|
|
|
|
2015-02-23 01:45:35 +01:00
|
|
|
app = app(root=root.strpath, welcome_file=welcome_file_all_vars.strpath)
|
2014-11-14 00:36:32 +01:00
|
|
|
testapp = webtest.TestApp(app)
|
|
|
|
|
resp = testapp.get("/")
|
2015-09-16 23:54:41 +02:00
|
|
|
|
2015-02-23 01:45:35 +01:00
|
|
|
from pypiserver import __version__ as pver
|
2019-09-18 03:29:48 +02:00
|
|
|
|
2015-02-23 01:45:35 +01:00
|
|
|
resp.mustcontain(pver)
|
|
|
|
|
|
2014-11-14 00:36:32 +01:00
|
|
|
|
2015-02-21 00:34:37 +01:00
|
|
|
def test_root_welcome_msg_antiXSS(testapp):
|
2015-02-23 01:45:35 +01:00
|
|
|
"""https://github.com/pypiserver/pypiserver/issues/77"""
|
2019-09-18 03:29:48 +02:00
|
|
|
resp = testapp.get("/?<alert>Red</alert>", headers={"Host": "somehost.org"})
|
2015-02-21 00:34:37 +01:00
|
|
|
resp.mustcontain("alert", "somehost.org", no="<alert>")
|
2014-11-14 00:36:32 +01:00
|
|
|
|
2015-02-23 01:45:35 +01:00
|
|
|
|
|
|
|
|
def test_root_remove_not_found_msg_antiXSS(testapp):
|
|
|
|
|
"""https://github.com/pypiserver/pypiserver/issues/77"""
|
2019-09-18 03:29:48 +02:00
|
|
|
resp = testapp.post(
|
|
|
|
|
"/",
|
|
|
|
|
expect_errors=True,
|
|
|
|
|
headers={"Host": "somehost.org"},
|
|
|
|
|
params={
|
|
|
|
|
":action": "remove_pkg",
|
|
|
|
|
"name": "<alert>Red</alert>",
|
|
|
|
|
"version": "1.1.1",
|
|
|
|
|
},
|
|
|
|
|
)
|
2015-02-23 01:45:35 +01:00
|
|
|
resp.mustcontain("alert", "somehost.org", no="<alert>")
|
|
|
|
|
|
|
|
|
|
|
2016-05-15 04:45:46 +02:00
|
|
|
def test_packages_redirect(testapp):
|
2012-12-02 01:15:18 +01:00
|
|
|
resp = testapp.get("/packages")
|
2016-05-15 04:45:46 +02:00
|
|
|
assert resp.status_code >= 300
|
|
|
|
|
assert resp.status_code < 400
|
2019-09-18 03:29:48 +02:00
|
|
|
assert resp.location.endswith("/packages/")
|
2016-05-15 04:45:46 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_packages_empty(testapp):
|
|
|
|
|
resp = testapp.get("/packages/")
|
2012-12-02 01:15:18 +01:00
|
|
|
assert len(resp.html("a")) == 0
|
2011-08-31 21:22:52 +02:00
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_favicon(testapp):
|
|
|
|
|
testapp.get("/favicon.ico", status=404)
|
2011-08-31 21:22:52 +02:00
|
|
|
|
2011-08-31 22:00:09 +02:00
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_fallback(root, _app, testapp):
|
2012-04-07 22:30:54 +02:00
|
|
|
assert _app.config.redirect_to_fallback
|
2012-12-02 01:15:18 +01:00
|
|
|
resp = testapp.get("/simple/pypiserver/", status=302)
|
2018-06-12 03:27:09 +02:00
|
|
|
assert resp.headers["Location"] == "https://pypi.org/simple/pypiserver/"
|
2011-08-31 22:00:09 +02:00
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_no_fallback(root, _app, testapp):
|
2012-04-07 22:30:54 +02:00
|
|
|
_app.config.redirect_to_fallback = False
|
2012-12-02 01:15:18 +01:00
|
|
|
testapp.get("/simple/pypiserver/", status=404)
|
2011-09-01 00:07:40 +02:00
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_serve_no_dotfiles(root, testapp):
|
2011-09-01 00:07:40 +02:00
|
|
|
root.join(".foo-1.0.zip").write("secret")
|
2012-12-02 01:15:18 +01:00
|
|
|
testapp.get("/packages/.foo-1.0.zip", status=404)
|
2011-09-01 00:07:40 +02:00
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_packages_list_no_dotfiles(root, testapp):
|
2011-09-01 00:07:40 +02:00
|
|
|
root.join(".foo-1.0.zip").write("secret")
|
2012-12-02 01:15:18 +01:00
|
|
|
resp = testapp.get("/packages/")
|
|
|
|
|
assert "foo" not in resp
|
2011-09-01 00:07:40 +02:00
|
|
|
|
|
|
|
|
|
2016-05-15 04:45:46 +02:00
|
|
|
def test_simple_redirect(testapp):
|
|
|
|
|
resp = testapp.get("/simple")
|
|
|
|
|
assert resp.status_code >= 300
|
|
|
|
|
assert resp.status_code < 400
|
2019-09-18 03:29:48 +02:00
|
|
|
assert resp.location.endswith("/simple/")
|
2016-05-15 04:45:46 +02:00
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_simple_list_no_dotfiles(root, testapp):
|
2011-09-01 00:07:40 +02:00
|
|
|
root.join(".foo-1.0.zip").write("secret")
|
2012-12-02 01:15:18 +01:00
|
|
|
resp = testapp.get("/simple/")
|
|
|
|
|
assert "foo" not in resp
|
2011-09-01 00:07:40 +02:00
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_simple_list_no_dotfiles2(root, testapp):
|
2011-09-01 00:07:40 +02:00
|
|
|
root.join(".foo-1.0.zip").write("secret")
|
2012-12-02 01:15:18 +01:00
|
|
|
resp = testapp.get("/simple/")
|
|
|
|
|
assert resp.html("a") == []
|
2011-09-01 00:19:14 +02:00
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_serve_no_dotdir(root, testapp):
|
2011-10-07 20:31:51 +02:00
|
|
|
root.mkdir(".subdir").join("foo-1.0.zip").write("secret")
|
2012-12-02 01:15:18 +01:00
|
|
|
testapp.get("/packages/.subdir/foo-1.0.zip", status=404)
|
2011-10-07 20:31:51 +02:00
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_packages_list_no_dotdir(root, testapp):
|
2011-10-07 20:31:51 +02:00
|
|
|
root.mkdir(".subdir").join("foo-1.0.zip").write("secret")
|
2012-12-02 01:15:18 +01:00
|
|
|
resp = testapp.get("/packages/")
|
|
|
|
|
assert "foo" not in resp
|
2011-10-07 20:31:51 +02:00
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_simple_list_no_dotdir(root, testapp):
|
2011-10-07 20:31:51 +02:00
|
|
|
root.mkdir(".subdir").join("foo-1.0.zip").write("secret")
|
2012-12-02 01:15:18 +01:00
|
|
|
resp = testapp.get("/simple/")
|
|
|
|
|
assert "foo" not in resp
|
2011-10-07 20:31:51 +02:00
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_simple_list_no_dotdir2(root, testapp):
|
2011-10-07 20:31:51 +02:00
|
|
|
root.mkdir(".subdir").join("foo-1.0.zip").write("secret")
|
2012-12-02 01:15:18 +01:00
|
|
|
resp = testapp.get("/simple/foo/")
|
|
|
|
|
assert resp.html("a") == []
|
2011-10-07 20:31:51 +02:00
|
|
|
|
|
|
|
|
|
2016-05-15 04:45:46 +02:00
|
|
|
def test_simple_name_redirect(testapp):
|
|
|
|
|
resp = testapp.get("/simple/foobar")
|
|
|
|
|
assert resp.status_code >= 300
|
|
|
|
|
assert resp.status_code < 400
|
2019-09-18 03:29:48 +02:00
|
|
|
assert resp.location.endswith("/simple/foobar/")
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
|
|
|
"package,normalized",
|
|
|
|
|
[
|
|
|
|
|
("FooBar", "foobar"),
|
|
|
|
|
("Foo.Bar", "foo-bar"),
|
|
|
|
|
("foo_bar", "foo-bar"),
|
|
|
|
|
("Foo-Bar", "foo-bar"),
|
|
|
|
|
("foo--_.bar", "foo-bar"),
|
|
|
|
|
],
|
|
|
|
|
)
|
2016-05-15 04:45:46 +02:00
|
|
|
def test_simple_normalized_name_redirect(testapp, package, normalized):
|
|
|
|
|
resp = testapp.get("/simple/{0}/".format(package))
|
|
|
|
|
assert resp.status_code >= 300
|
|
|
|
|
assert resp.status_code < 400
|
2019-09-18 03:29:48 +02:00
|
|
|
assert resp.location.endswith("/simple/{0}/".format(normalized))
|
2016-05-15 04:45:46 +02:00
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_simple_index(root, testapp):
|
2011-09-01 00:19:14 +02:00
|
|
|
root.join("foobar-1.0.zip").write("")
|
|
|
|
|
root.join("foobar-1.1.zip").write("")
|
|
|
|
|
root.join("foobarbaz-1.1.zip").write("")
|
|
|
|
|
root.join("foobar.baz-1.1.zip").write("")
|
|
|
|
|
|
2016-05-15 04:45:46 +02:00
|
|
|
resp = testapp.get("/simple/foobar/")
|
2012-12-02 01:15:18 +01:00
|
|
|
assert len(resp.html("a")) == 2
|
2011-09-01 00:19:14 +02:00
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_simple_index_list(root, testapp):
|
2011-09-01 00:19:14 +02:00
|
|
|
root.join("foobar-1.0.zip").write("")
|
|
|
|
|
root.join("foobar-1.1.zip").write("")
|
|
|
|
|
root.join("foobarbaz-1.1.zip").write("")
|
|
|
|
|
root.join("foobar.baz-1.1.zip").write("")
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
resp = testapp.get("/simple/")
|
|
|
|
|
assert len(resp.html("a")) == 3
|
2011-09-01 00:19:14 +02:00
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_simple_index_case(root, testapp):
|
2011-09-01 00:19:14 +02:00
|
|
|
root.join("FooBar-1.0.zip").write("")
|
|
|
|
|
root.join("FooBar-1.1.zip").write("")
|
2016-05-15 04:45:46 +02:00
|
|
|
resp = testapp.get("/simple/foobar/")
|
2012-12-02 01:15:18 +01:00
|
|
|
assert len(resp.html("a")) == 2
|
2012-04-03 22:49:47 +02:00
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_nonroot_root(testpriv):
|
|
|
|
|
resp = testpriv.get("/priv/", headers={"Host": "nonroot"})
|
|
|
|
|
resp.mustcontain("easy_install -i http://nonroot/priv/simple/ PACKAGE")
|
2012-04-03 22:49:47 +02:00
|
|
|
|
|
|
|
|
|
2019-04-29 11:22:35 +02:00
|
|
|
def test_nonroot_root_with_x_forwarded_host(testapp):
|
|
|
|
|
resp = testapp.get("/", headers={"X-Forwarded-Host": "forward.ed/priv/"})
|
|
|
|
|
resp.mustcontain("easy_install -i http://forward.ed/priv/simple/ PACKAGE")
|
|
|
|
|
resp.mustcontain("""<a href="/priv/packages/">here</a>""")
|
|
|
|
|
|
|
|
|
|
|
2019-05-02 16:14:31 +02:00
|
|
|
def test_nonroot_root_with_x_forwarded_host_without_trailing_slash(testapp):
|
|
|
|
|
resp = testapp.get("/", headers={"X-Forwarded-Host": "forward.ed/priv"})
|
2019-04-29 11:22:35 +02:00
|
|
|
resp.mustcontain("easy_install -i http://forward.ed/priv/simple/ PACKAGE")
|
|
|
|
|
resp.mustcontain("""<a href="/priv/packages/">here</a>""")
|
|
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_nonroot_simple_index(root, testpriv):
|
2012-04-03 22:49:47 +02:00
|
|
|
root.join("foobar-1.0.zip").write("")
|
2016-05-15 04:45:46 +02:00
|
|
|
resp = testpriv.get("/priv/simple/foobar/")
|
|
|
|
|
links = resp.html("a")
|
|
|
|
|
assert len(links) == 1
|
|
|
|
|
assert links[0]["href"].startswith("/priv/packages/foobar-1.0.zip#")
|
2012-04-03 22:49:47 +02:00
|
|
|
|
|
|
|
|
|
2019-04-29 11:22:35 +02:00
|
|
|
def test_nonroot_simple_index_with_x_forwarded_host(root, testapp):
|
|
|
|
|
root.join("foobar-1.0.zip").write("")
|
2019-09-18 03:29:48 +02:00
|
|
|
resp = testapp.get(
|
|
|
|
|
"/simple/foobar/", headers={"X-Forwarded-Host": "forwarded.ed/priv/"}
|
|
|
|
|
)
|
2019-04-29 11:22:35 +02:00
|
|
|
links = resp.html("a")
|
|
|
|
|
assert len(links) == 1
|
|
|
|
|
assert links[0]["href"].startswith("/priv/packages/foobar-1.0.zip#")
|
|
|
|
|
|
|
|
|
|
|
2012-12-02 01:15:18 +01:00
|
|
|
def test_nonroot_simple_packages(root, testpriv):
|
2012-04-03 22:49:47 +02:00
|
|
|
root.join("foobar-1.0.zip").write("123")
|
2016-05-15 04:45:46 +02:00
|
|
|
resp = testpriv.get("/priv/packages/")
|
|
|
|
|
links = resp.html("a")
|
|
|
|
|
assert len(links) == 1
|
|
|
|
|
assert links[0]["href"].startswith("/priv/packages/foobar-1.0.zip#")
|
2012-12-02 23:07:48 +01:00
|
|
|
|
|
|
|
|
|
2019-04-29 11:22:35 +02:00
|
|
|
def test_nonroot_simple_packages_with_x_forwarded_host(root, testapp):
|
|
|
|
|
root.join("foobar-1.0.zip").write("123")
|
2019-09-18 03:29:48 +02:00
|
|
|
resp = testapp.get(
|
|
|
|
|
"/packages/", headers={"X-Forwarded-Host": "forwarded/priv/"}
|
|
|
|
|
)
|
2019-04-29 11:22:35 +02:00
|
|
|
links = resp.html("a")
|
|
|
|
|
assert len(links) == 1
|
|
|
|
|
assert links[0]["href"].startswith("/priv/packages/foobar-1.0.zip#")
|
|
|
|
|
|
|
|
|
|
|
2012-12-02 23:07:48 +01:00
|
|
|
def test_root_no_relative_paths(testpriv):
|
2015-02-27 23:02:07 +01:00
|
|
|
"""https://github.com/pypiserver/pypiserver/issues/25"""
|
2012-12-02 23:07:48 +01:00
|
|
|
resp = testpriv.get("/priv/")
|
|
|
|
|
hrefs = [x["href"] for x in resp.html("a")]
|
2019-09-18 03:29:48 +02:00
|
|
|
assert hrefs == [
|
|
|
|
|
"/priv/packages/",
|
|
|
|
|
"/priv/simple/",
|
|
|
|
|
"https://pypi.org/project/pypiserver/",
|
|
|
|
|
]
|
2013-04-02 01:49:15 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_simple_index_list_no_duplicates(root, testapp):
|
|
|
|
|
root.join("foo-bar-1.0.tar.gz").write("")
|
|
|
|
|
root.join("foo_bar-1.0-py2.7.egg").write("")
|
|
|
|
|
|
|
|
|
|
resp = testapp.get("/simple/")
|
|
|
|
|
assert len(resp.html("a")) == 1
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_simple_index_list_name_with_underscore(root, testapp):
|
|
|
|
|
root.join("foo_bar-1.0.tar.gz").write("")
|
|
|
|
|
root.join("foo_bar-1.0-py2.7.egg").write("")
|
|
|
|
|
|
|
|
|
|
resp = testapp.get("/simple/")
|
|
|
|
|
assert len(resp.html("a")) == 1
|
|
|
|
|
hrefs = [x["href"] for x in resp.html("a")]
|
2016-05-15 04:45:46 +02:00
|
|
|
assert hrefs == ["foo-bar/"]
|
2013-04-02 01:49:15 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_simple_index_egg_and_tarball(root, testapp):
|
|
|
|
|
root.join("foo-bar-1.0.tar.gz").write("")
|
|
|
|
|
root.join("foo_bar-1.0-py2.7.egg").write("")
|
|
|
|
|
|
2016-05-15 04:45:46 +02:00
|
|
|
resp = testapp.get("/simple/foo-bar/")
|
2013-04-02 01:49:15 +02:00
|
|
|
assert len(resp.html("a")) == 2
|
2013-04-02 22:03:50 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_simple_index_list_name_with_underscore_no_egg(root, testapp):
|
|
|
|
|
root.join("foo_bar-1.0.tar.gz").write("")
|
|
|
|
|
root.join("foo-bar-1.1.tar.gz").write("")
|
|
|
|
|
|
|
|
|
|
resp = testapp.get("/simple/")
|
2016-05-15 04:45:46 +02:00
|
|
|
assert len(resp.html("a")) == 1
|
2013-04-02 22:03:50 +02:00
|
|
|
hrefs = set([x["href"] for x in resp.html("a")])
|
2017-12-18 12:55:30 +01:00
|
|
|
assert hrefs == {"foo-bar/"}
|
2015-01-10 18:18:47 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_no_cache_control_set(root, _app, testapp):
|
|
|
|
|
assert not _app.config.cache_control
|
|
|
|
|
root.join("foo_bar-1.0.tar.gz").write("")
|
|
|
|
|
resp = testapp.get("/packages/foo_bar-1.0.tar.gz")
|
|
|
|
|
assert "Cache-Control" not in resp.headers
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_cache_control_set(root):
|
|
|
|
|
from pypiserver import app
|
2019-09-18 03:29:48 +02:00
|
|
|
|
2015-01-10 18:18:47 +01:00
|
|
|
AGE = 86400
|
2017-11-14 15:41:26 +01:00
|
|
|
app_with_cache = webtest.TestApp(app(root=root.strpath, cache_control=AGE))
|
2015-01-10 18:18:47 +01:00
|
|
|
root.join("foo_bar-1.0.tar.gz").write("")
|
|
|
|
|
resp = app_with_cache.get("/packages/foo_bar-1.0.tar.gz")
|
|
|
|
|
assert "Cache-Control" in resp.headers
|
2019-09-18 03:29:48 +02:00
|
|
|
assert resp.headers["Cache-Control"] == "public, max-age=%s" % AGE
|
2016-01-17 21:57:16 +01:00
|
|
|
|
2016-05-12 03:53:35 +02:00
|
|
|
|
2016-01-17 21:57:16 +01:00
|
|
|
def test_upload_noAction(root, testapp):
|
|
|
|
|
resp = testapp.post("/", expect_errors=1)
|
2019-09-18 03:29:48 +02:00
|
|
|
assert resp.status == "400 Bad Request"
|
2019-09-02 21:31:59 +02:00
|
|
|
assert "Missing ':action' field!" in unescape(resp.text)
|
2016-01-17 21:57:16 +01:00
|
|
|
|
2016-05-12 03:53:35 +02:00
|
|
|
|
2016-01-17 21:57:16 +01:00
|
|
|
def test_upload_badAction(root, testapp):
|
2019-09-18 03:29:48 +02:00
|
|
|
resp = testapp.post("/", params={":action": "BAD"}, expect_errors=1)
|
|
|
|
|
assert resp.status == "400 Bad Request"
|
2019-09-02 21:31:59 +02:00
|
|
|
assert "Unsupported ':action' field: BAD" in unescape(resp.text)
|
2016-01-17 21:57:16 +01:00
|
|
|
|
2016-05-12 03:53:35 +02:00
|
|
|
|
2019-09-18 03:29:48 +02:00
|
|
|
@pytest.mark.parametrize(
|
|
|
|
|
"package", [f[0] for f in test_core.files if f[1] and "/" not in f[0]]
|
|
|
|
|
)
|
2016-01-17 21:57:16 +01:00
|
|
|
def test_upload(package, root, testapp):
|
2019-09-18 03:29:48 +02:00
|
|
|
resp = testapp.post(
|
|
|
|
|
"/",
|
|
|
|
|
params={":action": "file_upload"},
|
|
|
|
|
upload_files=[("content", package, b"")],
|
|
|
|
|
)
|
2016-01-17 21:57:16 +01:00
|
|
|
assert resp.status_int == 200
|
|
|
|
|
uploaded_pkgs = [f.basename for f in root.listdir()]
|
|
|
|
|
assert len(uploaded_pkgs) == 1
|
|
|
|
|
assert uploaded_pkgs[0].lower() == package.lower()
|
|
|
|
|
|
2016-05-12 03:53:35 +02:00
|
|
|
|
2019-09-18 03:29:48 +02:00
|
|
|
@pytest.mark.parametrize(
|
|
|
|
|
"package", [f[0] for f in test_core.files if f[1] and "/" not in f[0]]
|
|
|
|
|
)
|
2016-01-19 18:46:51 +01:00
|
|
|
def test_upload_with_signature(package, root, testapp):
|
2019-09-18 03:29:48 +02:00
|
|
|
resp = testapp.post(
|
|
|
|
|
"/",
|
|
|
|
|
params={":action": "file_upload"},
|
|
|
|
|
upload_files=[
|
|
|
|
|
("content", package, b""),
|
|
|
|
|
("gpg_signature", "%s.asc" % package, b""),
|
|
|
|
|
],
|
|
|
|
|
)
|
2016-01-19 18:46:51 +01:00
|
|
|
assert resp.status_int == 200
|
2016-04-21 17:08:18 +02:00
|
|
|
uploaded_pkgs = [f.basename.lower() for f in root.listdir()]
|
2016-01-19 18:46:51 +01:00
|
|
|
assert len(uploaded_pkgs) == 2
|
2016-04-21 17:08:18 +02:00
|
|
|
assert package.lower() in uploaded_pkgs
|
2019-09-18 03:29:48 +02:00
|
|
|
assert "%s.asc" % package.lower() in uploaded_pkgs
|
2016-01-19 18:46:51 +01:00
|
|
|
|
2016-05-12 03:53:35 +02:00
|
|
|
|
2019-09-18 03:29:48 +02:00
|
|
|
@pytest.mark.parametrize(
|
|
|
|
|
"package", [f[0] for f in test_core.files if f[1] is None]
|
|
|
|
|
)
|
2016-01-17 21:57:16 +01:00
|
|
|
def test_upload_badFilename(package, root, testapp):
|
2019-09-18 03:29:48 +02:00
|
|
|
resp = testapp.post(
|
|
|
|
|
"/",
|
|
|
|
|
params={":action": "file_upload"},
|
|
|
|
|
upload_files=[("content", package, b"")],
|
|
|
|
|
expect_errors=1,
|
|
|
|
|
)
|
|
|
|
|
assert resp.status == "400 Bad Request"
|
2016-01-19 12:52:34 +01:00
|
|
|
assert "Bad filename: %s" % package in resp.text
|
|
|
|
|
|
|
|
|
|
|
2019-09-18 03:29:48 +02:00
|
|
|
@pytest.mark.parametrize(
|
|
|
|
|
("name", "version"),
|
|
|
|
|
[
|
2016-01-19 12:52:34 +01:00
|
|
|
(None, None),
|
2019-09-18 03:29:48 +02:00
|
|
|
(None, ""),
|
|
|
|
|
("", None),
|
|
|
|
|
(None, "1"),
|
|
|
|
|
("pkg", None),
|
|
|
|
|
("", "1"),
|
|
|
|
|
("pkg", ""),
|
|
|
|
|
],
|
|
|
|
|
)
|
2016-01-19 12:52:34 +01:00
|
|
|
def test_remove_pkg_missingNaveVersion(name, version, root, testapp):
|
|
|
|
|
msg = "Missing 'name'/'version' fields: name=%s, version=%s"
|
2019-09-18 03:29:48 +02:00
|
|
|
params = {":action": "remove_pkg", "name": name, "version": version}
|
2019-01-25 00:48:57 +01:00
|
|
|
params = dict((k, v) for k, v in params.items() if v is not None)
|
2016-01-19 12:52:34 +01:00
|
|
|
resp = testapp.post("/", expect_errors=1, params=params)
|
2018-06-12 03:27:09 +02:00
|
|
|
|
2019-09-18 03:29:48 +02:00
|
|
|
assert resp.status == "400 Bad Request"
|
2019-09-02 21:31:59 +02:00
|
|
|
assert msg % (name, version) in unescape(resp.text)
|
2016-01-17 21:57:16 +01:00
|
|
|
|
2016-05-12 03:53:35 +02:00
|
|
|
|
2016-01-17 21:57:16 +01:00
|
|
|
def test_remove_pkg_notFound(root, testapp):
|
2019-09-18 03:29:48 +02:00
|
|
|
resp = testapp.post(
|
|
|
|
|
"/",
|
|
|
|
|
expect_errors=1,
|
|
|
|
|
params={":action": "remove_pkg", "name": "foo", "version": "123"},
|
|
|
|
|
)
|
|
|
|
|
assert resp.status == "404 Not Found"
|
2019-09-02 21:31:59 +02:00
|
|
|
assert "foo (123) not found" in unescape(resp.text)
|
2016-01-17 21:57:16 +01:00
|
|
|
|
2016-05-12 03:53:35 +02:00
|
|
|
|
2019-09-18 03:29:48 +02:00
|
|
|
@pytest.mark.parametrize(
|
|
|
|
|
"pkgs,matches",
|
|
|
|
|
[
|
|
|
|
|
([], []),
|
|
|
|
|
(["test-1.0.tar.gz"], [("test", "1.0")]),
|
|
|
|
|
(
|
|
|
|
|
["test-1.0.tar.gz", "test-test-2.0.1.tar.gz"],
|
|
|
|
|
[("test", "1.0"), ("test-test", "2.0.1")],
|
|
|
|
|
),
|
|
|
|
|
(["test-1.0.tar.gz", "other-2.0.tar.gz"], [("test", "1.0")]),
|
|
|
|
|
(["test-2.0-py2.py3-none-any.whl"], [("test", "2.0")]),
|
|
|
|
|
(["other-2.0.tar.gz"], []),
|
|
|
|
|
],
|
|
|
|
|
)
|
2016-05-12 03:53:35 +02:00
|
|
|
def test_search(root, testapp, search_xml, pkgs, matches):
|
|
|
|
|
"""Test the search functionality at the RPC2 endpoint
|
|
|
|
|
|
|
|
|
|
Calls the handle_rpc function by posting to the WebTest server with
|
|
|
|
|
the string returned by the ``search_xml`` fixture as the request
|
|
|
|
|
body. The result is parsed for convenience by the xmlrpc.client
|
|
|
|
|
(xmlrpclib in Python 2.x). The parsed result is a 2-tuple. The
|
|
|
|
|
second item is the method called, in this case always "search". The
|
|
|
|
|
first item is a 1-tuple which contains a list of match information
|
|
|
|
|
as dicts, e.g:
|
|
|
|
|
|
|
|
|
|
``(([{'version': '2.0', '_pypi_ordering': 0,
|
|
|
|
|
'name': 'test', 'summary': '2.0'}],), 'search')``
|
|
|
|
|
|
|
|
|
|
The pkgs parameter is a list of items to write to the packages
|
|
|
|
|
directory, which should then be available for the subsequent
|
|
|
|
|
search. The matches parameter is a list of 2-tuples of the form
|
|
|
|
|
(``name``, ``version``), where ``name`` and ``version`` are the
|
|
|
|
|
expected name and version matches for a search for the "test"
|
|
|
|
|
package as specified by the search_xml fixture.
|
|
|
|
|
|
|
|
|
|
:param root: root temporry directory fixture; used as packages dir
|
|
|
|
|
for testapp
|
|
|
|
|
:param testapp: webtest TestApp
|
|
|
|
|
:param str search_xml: XML string roughly equivalent to a pip search
|
|
|
|
|
for "test"
|
|
|
|
|
:param pkgs: package file names to be written into packages
|
|
|
|
|
directory
|
|
|
|
|
:param matches: a list of 2-tuples containing expected (name,
|
|
|
|
|
version) matches for the "test" query
|
|
|
|
|
"""
|
|
|
|
|
for pkg in pkgs:
|
2019-09-18 03:29:48 +02:00
|
|
|
root.join(pkg).write("")
|
|
|
|
|
resp = testapp.post("/RPC2", search_xml)
|
2016-05-12 03:53:35 +02:00
|
|
|
parsed = xmlrpclib.loads(resp.text)
|
2019-09-18 03:29:48 +02:00
|
|
|
assert len(parsed) == 2 and parsed[1] == "search"
|
2016-05-12 03:53:35 +02:00
|
|
|
if not matches:
|
|
|
|
|
assert len(parsed[0]) == 1 and not parsed[0][0]
|
|
|
|
|
else:
|
|
|
|
|
assert len(parsed[0][0]) == len(matches) and parsed[0][0]
|
|
|
|
|
for returned in parsed[0][0]:
|
|
|
|
|
print(returned)
|
2019-09-18 03:29:48 +02:00
|
|
|
assert returned["name"] in [match[0] for match in matches]
|
|
|
|
|
assert returned["version"] in [match[1] for match in matches]
|
2016-05-12 03:53:35 +02:00
|
|
|
|
|
|
|
|
|
2016-01-17 21:57:16 +01:00
|
|
|
@pytest.mark.xfail()
|
|
|
|
|
def test_remove_pkg(root, testapp):
|
2016-04-21 17:08:18 +02:00
|
|
|
assert 0
|
