p31829507
/
django
mirror of https://github.com/django/django.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Refs #28017 -- Added test for PasswordResetTokenGenerator subclass with a custom secret.

This commit is contained in:
François Freitag 2021-04-20 06:58:51 +02:00 committed by Mariusz Felisiak
parent 3fec16e8ac
commit b13af4752f
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
tests/auth_tests/test_tokens.py
View File

@ -111,3 +111,23 @@ class TokenGeneratorTest(TestCase):
# Tokens created with a different secret don't validate. # Tokens created with a different secret don't validate.
self.assertIs(p0.check_token(user, tk1), False) self.assertIs(p0.check_token(user, tk1), False)
self.assertIs(p1.check_token(user, tk0), False) self.assertIs(p1.check_token(user, tk0), False)
def test_token_with_different_secret_subclass(self):
class CustomPasswordResetTokenGenerator(PasswordResetTokenGenerator):
secret = 'test-secret'
user = User.objects.create_user('tokentestuser', 'test2@example.com', 'testpw')
custom_password_generator = CustomPasswordResetTokenGenerator()
tk_custom = custom_password_generator.make_token(user)
self.assertIs(custom_password_generator.check_token(user, tk_custom), True)
default_password_generator = PasswordResetTokenGenerator()
self.assertNotEqual(
custom_password_generator.secret,
default_password_generator.secret,
)
self.assertEqual(default_password_generator.secret, settings.SECRET_KEY)
# Tokens created with a different secret don't validate.
tk_default = default_password_generator.make_token(user)
self.assertIs(custom_password_generator.check_token(user, tk_default), False)
self.assertIs(default_password_generator.check_token(user, tk_custom), False)