keystone.tests.unit.identity package

Subpackages

• keystone.tests.unit.identity.backends package
  • Submodules
  • keystone.tests.unit.identity.backends.test_base module
  • keystone.tests.unit.identity.backends.test_ldap module
  • keystone.tests.unit.identity.backends.test_ldap_common module
  • keystone.tests.unit.identity.backends.test_sql module
  • Module contents
• keystone.tests.unit.identity.shadow_users package
  • Submodules
  • keystone.tests.unit.identity.shadow_users.test_backend module
  • keystone.tests.unit.identity.shadow_users.test_core module
  • Module contents

Submodules

keystone.tests.unit.identity.test_backend_sql module

class keystone.tests.unit.identity.test_backend_sql.ChangePasswordRequiredAfterFirstUse(*args, **kwargs)

Bases: keystone.tests.unit.test_backend_sql.SqlTests

assertPasswordIsExpired(user_id, password)

assertPasswordIsNotExpired(user_id, password)

test_password_expired_after_create()

test_password_expired_after_reset()

test_password_not_expired_for_ignore_user()

test_password_not_expired_when_feature_disabled()

class keystone.tests.unit.identity.test_backend_sql.DisableInactiveUserTests(*args, **kwargs)

Bases: keystone.tests.unit.test_backend_sql.SqlTests

setUp()

test_authenticate_user_disabled_due_to_inactivity()

test_authenticate_user_not_disabled_due_to_inactivity()

test_enabled_after_create_update_user()

test_get_user_disabled_due_to_inactivity()

test_get_user_not_disabled_due_to_inactivity()

class keystone.tests.unit.identity.test_backend_sql.LockingOutUserTests(*args, **kwargs)

Bases: keystone.tests.unit.test_backend_sql.SqlTests

setUp()

test_lock_out_for_ignored_user()

test_locking_out_user_after_max_failed_attempts()

test_lockout_duration()

test_lockout_duration_failed_auth_cnt_resets()

test_set_enabled_unlocks_user()

class keystone.tests.unit.identity.test_backend_sql.MinimumPasswordAgeTests(*args, **kwargs)

Bases: keystone.tests.unit.test_backend_sql.SqlTests

assertValidChangePassword(user_id, password, new_password)

setUp()

test_user_can_change_password_after_admin_reset()

test_user_can_change_password_after_min_age()

test_user_cannot_change_password_before_min_age()

class keystone.tests.unit.identity.test_backend_sql.PasswordExpiresValidationTests(*args, **kwargs)

Bases: keystone.tests.unit.test_backend_sql.SqlTests

setUp()

test_authenticate_with_expired_password()

test_authenticate_with_expired_password_for_ignore_user()

test_authenticate_with_expired_password_for_ignore_user_option()

test_authenticate_with_expired_password_v2()

test_authenticate_with_non_expired_password()

class keystone.tests.unit.identity.test_backend_sql.PasswordHistoryValidationTests(*args, **kwargs)

Bases: keystone.tests.unit.test_backend_sql.SqlTests

assertValidChangePassword(user_id, password, new_password)

setUp()

test_admin_password_reset_is_not_validated_by_password_history()

test_disable_password_history_and_repeat_same_password()

test_truncate_passwords()

test_truncate_passwords_when_max_is_default()

test_truncate_passwords_when_max_is_default_and_no_password()

test_validate_password_history_but_start_with_password_none()

test_validate_password_history_with_invalid_password()

test_validate_password_history_with_valid_password()

class keystone.tests.unit.identity.test_backend_sql.UserResourceOptionTests(*args, **kwargs)

Bases: keystone.tests.unit.test_backend_sql.SqlTests

setUp()

test_unregistered_resource_option_deleted()

test_user_add_delete_resource_option_existing_option_values()

test_user_add_update_delete_option_in_resource_option()

test_user_set_option_in_resource_option()

keystone.tests.unit.identity.test_backends module

class keystone.tests.unit.identity.test_backends.FilterTests

Bases: keystone.tests.unit.filtering.FilterTests

test_filter_value_wider_than_field()

test_groups_for_user_exact_filtered()

Test exact filters doesn’t break groups_for_user listing.

test_groups_for_user_inexact_filtered()

Test use of filtering doesn’t break groups_for_user listing.

Some backends may use filtering to achieve the list of groups for a user, so test that it can combine a second filter.

Test Plan:

• Create 10 groups, some with names we can filter on
• Create 2 users
• Assign 1 of those users to most of the groups, including some of the well known named ones
• Assign the other user to other groups as spoilers
• Ensure that when we list groups for users with a filter on the group name, both restrictions have been enforced on what is returned.

test_list_entities_filtered()

test_list_users_in_group_exact_filtered()

test_list_users_in_group_inexact_filtered()

test_list_users_inexact_filtered()

class keystone.tests.unit.identity.test_backends.IdentityTests

Bases: object

test_add_user_to_group()

test_add_user_to_group_returns_not_found()

test_arbitrary_attributes_are_returned_from_create_user()

test_arbitrary_attributes_are_returned_from_get_user()

test_authenticate()

test_authenticate_and_get_roles_no_metadata()

test_authenticate_bad_password()

test_authenticate_bad_user()

test_authenticate_if_no_password_set()

test_cache_layer_get_user(*args, **kwargs)

test_cache_layer_get_user_by_name(*args, **kwargs)

test_cache_layer_group_crud(*args, **kwargs)

test_check_user_in_group()

test_check_user_in_group_returns_not_found()

test_check_user_not_in_group()

test_create_duplicate_group_name_fails()

test_create_duplicate_group_name_in_different_domains()

test_create_duplicate_user_name_fails()

test_create_duplicate_user_name_in_different_domains()

test_create_group_name_with_trailing_whitespace()

test_create_unicode_user_name()

test_create_user_blank_name_fails()

test_create_user_doesnt_modify_passed_in_dict()

test_create_user_invalid_enabled_type_string()

test_create_user_invalid_name_fails()

test_create_user_long_name_fails()

test_create_user_missed_password()

test_create_user_none_password()

test_delete_group_with_user_project_domain_links()

test_delete_user_returns_not_found()

test_delete_user_with_group_project_domain_links()

test_get_group_by_name()

test_get_group_by_name_returns_not_found()

test_get_user()

test_get_user_by_name()

test_get_user_by_name_returns_not_found()

test_get_user_returns_not_found()

test_get_user_returns_required_attributes()

test_group_crud()

test_list_domains_filtered_and_limited(*args, **kwargs)

test_list_groups()

test_list_groups_for_user()

test_list_users()

test_list_users_in_group()

test_list_users_in_group_returns_not_found()

test_list_users_with_all_federated_attributes()

test_list_users_with_idp_id()

test_list_users_with_idp_id_protocol_id()

test_list_users_with_protocol_id()

test_list_users_with_unique_id()

test_list_users_with_unique_id_and_idp_id()

test_list_users_with_unique_id_and_protocol_id()

test_move_group_between_domains()

test_move_user_between_domains()

test_new_arbitrary_attributes_are_returned_from_update_user()

test_remove_user_from_group()

test_remove_user_from_group_returns_not_found()

test_rename_duplicate_user_name_fails()

test_update_group_name_with_trailing_whitespace()

test_update_user_enable()

test_update_user_id_fails()

test_update_user_long_name_fails()

test_update_user_name()

test_update_user_returns_not_found()

test_updated_arbitrary_attributes_are_returned_from_update_user()

test_user_crud()

test_user_update_and_user_get_return_same_response()

class keystone.tests.unit.identity.test_backends.LimitTests

Bases: keystone.tests.unit.filtering.FilterTests

ENTITIES = ['user', 'group', 'project']

clean_up_entities()

Clean up entity test data from Limit Test Cases.

setUp()

Setup for Limit Test Cases.

test_list_groups_filtered_and_limited()

test_list_projects_filtered_and_limited()

test_list_users_filtered_and_limited()

keystone.tests.unit.identity.test_controllers module

class keystone.tests.unit.identity.test_controllers.UserTestCaseNoDefaultDomain(*args, **kwargs)

Bases: keystone.tests.unit.core.TestCase

setUp()

test_create_user()

test_get_user_by_name()

test_get_users()

test_setup()

keystone.tests.unit.identity.test_core module

Unit tests for core identity behavior.

class keystone.tests.unit.identity.test_core.TestDatabaseDomainConfigs(*args, **kwargs)

Bases: keystone.tests.unit.core.TestCase

setUp()

test_domain_config_in_database_disabled_by_default()

test_loading_config_from_database()

class keystone.tests.unit.identity.test_core.TestDomainConfigs(*args, **kwargs)

Bases: keystone.tests.unit.core.BaseTestCase

setUp()

test_config_for_dot_name_domain()

test_config_for_multiple_sql_backend()

test_config_for_nonexistent_domain()

Having a config for a non-existent domain will be ignored.

There are no assertions in this test because there are no side effects. If there is a config file for a domain that does not exist it should be ignored.

Module contents