o "4gB@s4ddlmZddlmZddlmZddlmZddlZddl m Z m Z ddl m ZddlmZdd lmZmZdd lmZdd lmZdd lmZmZdd lmZejddZejddZddZ ddZ!ddZ"ddZ#ddZ$ddZ%ddZ&d d!Z'd"d#Z(d$d%Z)d&d'Z*d(d)Z+d*d+Z,d,d-Z-dS).)patch)get_user_model) AnonymousUser)reverseN)assertFormErrorassertRedirects) app_settings) EmailAddress) user_email user_username)context)complete_social_login) SocialAccount SocialLogin)signupcfdd}|S)Ncsxd}t|_t|$t||}|j}|jD]\}}|||<q||WdS1s5wYdS)N/) getruserr request_contextr sessionitemssave)client socialloginrequestresprkvrequest_factoryp/var/www/html/authentication-server/venv/lib/python3.10/site-packages/allauth/socialaccount/tests/test_signup.pyfs    $z!setup_sociallogin_flow..fr!)r r#r!rr"setup_sociallogin_flows  r$cr)Nc st}|}t|dd}t|||tjj||dddtddd}|}t||t||t||t|dgd } d }t |_ t |t||} Wd|| fS1s_wY|| fS) Ntesttest@example.comTremailverifiedprimarytwitter123provideruidr()raccountemail_addresses!/accounts/twitter/login/callback/)rr r rr objectscreaterrrrrr rr ) usernamer(Userexi_userexi_user_emailr1rrrrrr!r"_email_address_clash&s0         z1email_address_clash.._email_address_clashr!)r r:r!rr"email_address_clash$s r;cCsd|_d|_tjj|_|dddd}|||tjjditj di}t jj ||j j ds2Jtjj |t|ds@JdS) NTr&Fr%r(email_verifiedr6)rr/)rr(r!)SOCIALACCOUNT_AUTO_SIGNUPACCOUNT_SIGNUP_FORM_CLASSaccount_settingsEmailVerificationMethodNONEACCOUNT_EMAIL_VERIFICATIONrr4rUSER_MODEL_USERNAME_FIELDrfilterr1r/existsr r )settingsdbrr$sociallogin_factoryrrr!r!r"test_email_address_createdEs    rJcCsd|_d|_d|_d|_d|_|dd\}}|dtdks Jd|_dd d |_t | t |}Wd n1s=wY|dd ksJJt j j d itjd i}t|dks_Jd S)z%Test clash on both username and emailTr(r%r&locationsocialaccount_signupPOSTotherother@example.comr6r(N/accounts/profile/r!ACCOUNT_EMAIL_REQUIREDACCOUNT_UNIQUE_EMAILACCOUNT_USERNAME_REQUIREDACCOUNT_AUTHENTICATION_METHODr>rmethodrMr rrrr4rr@USER_MODEL_EMAIL_FIELDr )rHrrGr;rrrr!r!r"*test_email_address_clash_username_requiredXs"    rYcCsd|_d|_d|_d|_d|_|dd\}}|dtdks Jd|_dd i|_t | t |}Wd n1srr4rr@rXr rZr!r!r"-test_email_address_clash_username_auto_signups r\cCsd|_gd|_d|_d|_d|_d|_|d}t|_t }|}t |t j dt |t j dtddd }t||d }t| t||Wdn1sRwY|jjt jvs`JdS) NT)r6 username1 username2r(r3r6zusername@example.comr+r,r-)rr1)rSACCOUNT_USERNAME_BLACKLISTrTrUrVr>rrrrsetattrr@rDrXrrr rr r6USERNAME_BLACKLIST)rHrGr rr7rr1rr!r!r"#test_populate_username_in_blacklists,      rbc Csd|_d|_d|_d|_d|_d|_|dd}||||td}|jd}|d dks2J|j tddd id }t |d dd t j d }t|dksTJtj j|ddddsbJtj j|d dddspJdS)z Test scenario for when the user changes email at social signup. Current behavior is that both the unverified and verified email are added, and that the user is allowed to pass because he did provide a verified one. T mandatoryFr(zverified@example.comr0rLformunverified@example.orgdatarQ)fetch_redirect_responserr'N)rSrCrTrUrVr>rrr valuepostrrr4allr r rErF) rHrrGrIr$rrrdrr!r!r"$test_verified_email_change_at_signupsD    rlc Csd|_d|_d|_d|_d|_d|_t}|ddd}||||td}|j d}|d dks6J|j tddd id }t |td |j d } t| d ksWJtj j| dddd seJtj j| d ddd ssJdS)z Test scenario for when the user changes email at social signup, while his provider did not provide a verified email. In that case, email verification will kick in. Here, both email addresses are added as well. TrcFr(zunverified@example.comr(r=rLrdrerfaccount_email_verification_sentrr'N)rSrCrTrUrVr>rrrr rirjrr4rkr r rErF) rHrrGrIr$r7rrrdrr!r!r"&test_unverified_email_change_at_signupsJ    roc Csd|_d|_d|_d|_d|_d|_d|_t}d}|jj |d}t jj ||dd|dd}|||| t d} | j d } | d|ksJJ|jt dd|id } t| j d dd dS) NFTrcr(zme@example.comr0)r(rr)rLrdrfzAn account already exists with this email address. Please sign in to that account first, then connect your Unittest Server account.)ACCOUNT_PREVENT_ENUMERATIONrSrCrTrUrVr>rr4r5r rrr rirjr) rHrrIrGr$r7r(rrrrdr!r!r"#test_unique_email_validation_signups,   rqc Csd|_d|_d|_d|_d|_d|_t}|ddd}||||td}|j d}|d dks6J|j tdd dd d }|j d ksIJ|j d ksRJtj d ks[J|td}t|tddS)a Test scenario for when the user signs up with a social account and uses email address in that social account. But upon seeing the verification screen, they realize that email address is somehow unusable for them, and so backs up and enters a different email address (and is forced to choose a new username) while providing the same social account token which is owned by their first attempt. Trcr(Fzme1@example.comrmrLrdme1rPrfi. account_loginN)rSrCrTrUrVr>rrrr rirj status_coder4countrr) rHrrIrGr$r7rrrdr!r!r"#test_social_account_taken_at_signup$s*    rwcCsxd|_d|_d|_d|_d|_d|_|dd}|||}|dtdks&J|tdddi}|dtd ks:Jd S) zgTests that when the email address is missing from the sociallogin email verification kicks in. TFr(rc with_emailrKrLzother@example.orgrnN)rSrTrUrVrCr>rrj)rHrGrIrr$rrr!r!r"4test_email_address_required_missing_from_socialloginHs  rzc Csd|_d|_d|_d|_d|_d|_|}|dd}|||} | dtdks)J|tdd|ji} |dj d ks=J| dtd ksGJd S) yTests that when an already existing email is given at the social signup form, enumeration preventation kicks in. TFr(rcrxrKrLr$[example.com] Account Already ExistsrnN) rSrTrUrVrCr>rrjr(subject) rHrG user_factoryrIrr$ mailoutboxrrrr!r!r"1test_email_address_conflict_at_social_signup_form]s   rc Csld|_d|_d|_d|_d|_d|_|}||jdd}|||} | dtdks+J|djd ks4Jd S) ztTests that when an already existing email is received from the provider, enumeration preventation kicks in. TFr(rc)r(ryrKrnrr|N) rSrTrUrVrCr>r(rr} rHrGr~rIrrr$rrrr!r!r".test_email_address_conflict_during_auto_signup}s  rc Csd|_d|_d|_d|_d|_d|_d|_|dd}||jdd}|||} | dtdks0J| tddd i} |d j d ksCJ| d|j ksLJt j j|jd d ksZJdS)r{TFr(optional)r=rmrKrLzother@email.orgrz/[example.com] Please Confirm Your Email Addressr0rsN)rSrTrUrVrCr>"SOCIALACCOUNT_EMAIL_AUTHENTICATIONr(rrjr}LOGIN_REDIRECT_URLr r4rErvrr!r!r"5test_email_address_conflict_removes_conflicting_emails    rcCsh|dddd}td}d|_|||}Wdn1swYd|jvs*Jtjr2JdS)Nr&Fr%r<zLallauth.socialaccount.adapter.DefaultSocialAccountAdapter.is_open_for_signupsSign Up Closed)r return_valuecontentrr4rF)rGrHrr$rIriofsrr!r!r"test_signup_closeds r). unittest.mockrdjango.contrib.authrdjango.contrib.auth.modelsr django.urlsrpytestpytest_django.assertsrrallauth.accountrr@allauth.account.modelsr allauth.account.utilsr r allauth.corer allauth.socialaccount.helpersr allauth.socialaccount.modelsrrallauth.socialaccount.viewsrfixturer$r;rJrYr[r\rbrlrorqrwrzrrrrr!r!r!r"s>           ).$  #