Method login_as

src/sentry/testutils/cases.py:318–396

(
        self,
        user,
        organization_id=None,
        organization_ids=None,
        superuser=False,
        staff=False,
        staff_sso=True,
        superuser_sso=True,
    )

    # TODO(dcramer): ideally superuser_sso would be False by default, but that would require
    # a lot of tests changing
    def login_as(
        self,
        user,
        organization_id=None,
        organization_ids=None,
        superuser=False,
        staff=False,
        staff_sso=True,
        superuser_sso=True,
    ):
        if isinstance(user, OrganizationMember):
            with assume_test_silo_mode(SiloMode.CONTROL):
                user = User.objects.get(id=user.user_id)

        user.backend = settings.AUTHENTICATION_BACKENDS[0]

        request = self.make_request()
        with assume_test_silo_mode(SiloMode.CONTROL):
            login(request, user)
        request.user = user

        if organization_ids is None:
            organization_ids = set()
        else:
            organization_ids = set(organization_ids)
        if superuser and superuser_sso is not False:
            if SUPERUSER_ORG_ID:
                organization_ids.add(SUPERUSER_ORG_ID)
        if staff and staff_sso is not False:
            if STAFF_ORG_ID:
                organization_ids.add(SUPERUSER_ORG_ID)
        if organization_id:
            organization_ids.add(organization_id)

        # TODO(dcramer): ideally this would get abstracted
        if organization_ids:
            for o in organization_ids:
                sso_session = SsoSession.create(o)
                self.session[sso_session.session_key] = sso_session.to_dict()

        # logging in implicitly binds superuser, but for test cases we
        # want that action to be explicit to avoid accidentally testing
        # superuser-only code
        if not superuser:
            # XXX(dcramer): we're calling the internal method to avoid logging
            request.superuser._set_logged_out()
        elif request.user.is_superuser and superuser:
            request.superuser.set_logged_in(request.user)
            # XXX(dcramer): awful hack to ensure future attempts to instantiate
            # the Superuser object are successful
            self.save_cookie(
                name=SU_COOKIE_NAME,
                value=signing.get_cookie_signer(salt=SU_COOKIE_NAME + SU_COOKIE_SALT).sign(
                    request.superuser.token
                ),
                max_age=None,
                path=SU_COOKIE_PATH,
                domain=SU_COOKIE_DOMAIN,