121 lines
4.9 KiB
Python
121 lines
4.9 KiB
Python
# -*- coding: utf-8 -*-
|
|
"""
|
|
proxy.py
|
|
~~~~~~~~
|
|
⚡⚡⚡ Fast, Lightweight, Pluggable, TLS interception capable proxy server focused on
|
|
Network monitoring, controls & Application development, testing, debugging.
|
|
|
|
:copyright: (c) 2013-present by Abhinav Singh and contributors.
|
|
:license: BSD, see LICENSE for more details.
|
|
"""
|
|
import selectors
|
|
import unittest
|
|
from unittest import mock
|
|
|
|
from proxy.proxy import Proxy
|
|
from proxy.http.exception.proxy_auth_failed import ProxyAuthenticationFailed
|
|
from proxy.http.handler import HttpProtocolHandler
|
|
from proxy.core.connection import TcpClientConnection
|
|
from proxy.common.utils import build_http_request
|
|
|
|
|
|
class TestHttpProxyAuthFailed(unittest.TestCase):
|
|
|
|
@mock.patch('selectors.DefaultSelector')
|
|
@mock.patch('socket.fromfd')
|
|
def setUp(self,
|
|
mock_fromfd: mock.Mock,
|
|
mock_selector: mock.Mock) -> None:
|
|
self.mock_fromfd = mock_fromfd
|
|
self.mock_selector = mock_selector
|
|
|
|
self.fileno = 10
|
|
self._addr = ('127.0.0.1', 54382)
|
|
self.flags = Proxy.initialize(["--basic-auth", "user:pass"])
|
|
self._conn = mock_fromfd.return_value
|
|
self.protocol_handler = HttpProtocolHandler(
|
|
TcpClientConnection(self._conn, self._addr),
|
|
flags=self.flags)
|
|
self.protocol_handler.initialize()
|
|
|
|
@mock.patch('proxy.http.proxy.server.TcpServerConnection')
|
|
def test_proxy_auth_fails_without_cred(self, mock_server_conn: mock.Mock) -> None:
|
|
self._conn.recv.return_value = build_http_request(
|
|
b'GET', b'http://upstream.host/not-found.html',
|
|
headers={
|
|
b'Host': b'upstream.host'
|
|
})
|
|
self.mock_selector.return_value.select.side_effect = [
|
|
[(selectors.SelectorKey(
|
|
fileobj=self._conn,
|
|
fd=self._conn.fileno,
|
|
events=selectors.EVENT_READ,
|
|
data=None), selectors.EVENT_READ)], ]
|
|
|
|
self.protocol_handler.run_once()
|
|
mock_server_conn.assert_not_called()
|
|
self.assertEqual(self.protocol_handler.client.has_buffer(), True)
|
|
self.assertEqual(
|
|
self.protocol_handler.client.buffer[0], ProxyAuthenticationFailed.RESPONSE_PKT)
|
|
self._conn.send.assert_not_called()
|
|
|
|
@mock.patch('proxy.http.proxy.server.TcpServerConnection')
|
|
def test_proxy_auth_fails_with_invalid_cred(self, mock_server_conn: mock.Mock) -> None:
|
|
self._conn.recv.return_value = build_http_request(
|
|
b'GET', b'http://upstream.host/not-found.html',
|
|
headers={
|
|
b'Host': b'upstream.host',
|
|
b'Proxy-Authorization': b'Basic hello',
|
|
})
|
|
self.mock_selector.return_value.select.side_effect = [
|
|
[(selectors.SelectorKey(
|
|
fileobj=self._conn,
|
|
fd=self._conn.fileno,
|
|
events=selectors.EVENT_READ,
|
|
data=None), selectors.EVENT_READ)], ]
|
|
|
|
self.protocol_handler.run_once()
|
|
mock_server_conn.assert_not_called()
|
|
self.assertEqual(self.protocol_handler.client.has_buffer(), True)
|
|
self.assertEqual(
|
|
self.protocol_handler.client.buffer[0], ProxyAuthenticationFailed.RESPONSE_PKT)
|
|
self._conn.send.assert_not_called()
|
|
|
|
@mock.patch('proxy.http.proxy.server.TcpServerConnection')
|
|
def test_proxy_auth_works_with_valid_cred(self, mock_server_conn: mock.Mock) -> None:
|
|
self._conn.recv.return_value = build_http_request(
|
|
b'GET', b'http://upstream.host/not-found.html',
|
|
headers={
|
|
b'Host': b'upstream.host',
|
|
b'Proxy-Authorization': b'Basic dXNlcjpwYXNz',
|
|
})
|
|
self.mock_selector.return_value.select.side_effect = [
|
|
[(selectors.SelectorKey(
|
|
fileobj=self._conn,
|
|
fd=self._conn.fileno,
|
|
events=selectors.EVENT_READ,
|
|
data=None), selectors.EVENT_READ)], ]
|
|
|
|
self.protocol_handler.run_once()
|
|
mock_server_conn.assert_called_once()
|
|
self.assertEqual(self.protocol_handler.client.has_buffer(), False)
|
|
|
|
@mock.patch('proxy.http.proxy.server.TcpServerConnection')
|
|
def test_proxy_auth_works_with_mixed_case_basic_string(self, mock_server_conn: mock.Mock) -> None:
|
|
self._conn.recv.return_value = build_http_request(
|
|
b'GET', b'http://upstream.host/not-found.html',
|
|
headers={
|
|
b'Host': b'upstream.host',
|
|
b'Proxy-Authorization': b'bAsIc dXNlcjpwYXNz',
|
|
})
|
|
self.mock_selector.return_value.select.side_effect = [
|
|
[(selectors.SelectorKey(
|
|
fileobj=self._conn,
|
|
fd=self._conn.fileno,
|
|
events=selectors.EVENT_READ,
|
|
data=None), selectors.EVENT_READ)], ]
|
|
|
|
self.protocol_handler.run_once()
|
|
mock_server_conn.assert_called_once()
|
|
self.assertEqual(self.protocol_handler.client.has_buffer(), False)
|