Function simple_webapp

tests/api/v2/test_security.py:30–67

(event_loop, base_world)

@pytest.fixture
def simple_webapp(event_loop, base_world):
    async def index(request):
        return web.Response(status=200, text='hello!')

    @security.authentication_exempt
    async def public(request):
        return web.Response(status=200, text='public')

    async def private(request):
        return web.Response(status=200, text='private')

    @security.authentication_exempt
    async def login(request):
        await auth_svc.login_user(request)  # Note: auth_svc defined in context function

    app = web.Application()
    app.router.add_get('/', index)
    app.router.add_post('/login', login)
    app.router.add_get('/public', public)
    app.router.add_get('/private', private)

    auth_svc = AuthService()

    event_loop.run_until_complete(
        auth_svc.apply(
            app=app,
            users=base_world.get_config('users')
        )
    )
    event_loop.run_until_complete(auth_svc.set_login_handlers(auth_svc.get_services()))

    # The authentication_required middleware needs to run after the session middleware.
    # AuthService.apply(...) adds session middleware to the app, so we can append the
    # the auth middleware after. Not doing this will cause a 500 in regards to the
    # session middleware not being set up correctly.
    app.middlewares.append(security.authentication_required_middleware_factory(auth_svc))

    return app


def test_function_is_authentication_exempt():