diff options
| author | Christopher Allan Webber <cwebber@dustycloud.org> | 2011-04-02 12:42:07 -0500 |
|---|---|---|
| committer | Christopher Allan Webber <cwebber@dustycloud.org> | 2011-04-02 12:42:07 -0500 |
| commit | db78002412c588273bc6177bc1c1b6ab6d1c37a0 (patch) | |
| tree | e5e9c0167cbd9c1d266d64db14774b13e58ee0d3 | |
| parent | 62615b8133fcb3ee961a0d81cb01f993b5b34c03 (diff) | |
| download | mediagoblin-db78002412c588273bc6177bc1c1b6ab6d1c37a0.tar.lz mediagoblin-db78002412c588273bc6177bc1c1b6ab6d1c37a0.tar.xz mediagoblin-db78002412c588273bc6177bc1c1b6ab6d1c37a0.zip | |
Also make sure the auth system successfully returns False when login
failboats.
| -rw-r--r-- | mediagoblin/tests/test_auth.py | 14 |
1 files changed, 12 insertions, 2 deletions
diff --git a/mediagoblin/tests/test_auth.py b/mediagoblin/tests/test_auth.py index 5b66bb3c..d7397723 100644 --- a/mediagoblin/tests/test_auth.py +++ b/mediagoblin/tests/test_auth.py @@ -28,9 +28,14 @@ def test_bcrypt_check_password(): 'lollerskates', '$2a$12$PXU03zfrVCujBhVeICTwtOaHTUs5FFwsscvSSTJkqx/2RQ0Lhy/nO') + assert not auth_lib.bcrypt_check_password( + 'notthepassword', + '$2a$12$PXU03zfrVCujBhVeICTwtOaHTUs5FFwsscvSSTJkqx/2RQ0Lhy/nO') + + # Same thing, but with extra fake salt. - assert auth_lib.bcrypt_check_password( - 'lollerskates', + assert not auth_lib.bcrypt_check_password( + 'notthepassword', '$2a$12$ELVlnw3z1FMu6CEGs/L8XO8vl0BuWSlUHgh0rUrry9DUXGMUNWwl6', '3><7R45417') @@ -42,8 +47,13 @@ def test_bcrypt_gen_password_hash(): hashed_pw = auth_lib.bcrypt_gen_password_hash(pw) assert auth_lib.bcrypt_check_password( pw, hashed_pw) + assert not auth_lib.bcrypt_check_password( + 'notthepassword', hashed_pw) + # Same thing, extra salt. hashed_pw = auth_lib.bcrypt_gen_password_hash(pw, '3><7R45417') assert auth_lib.bcrypt_check_password( pw, hashed_pw, '3><7R45417') + assert not auth_lib.bcrypt_check_password( + 'notthepassword', hashed_pw, '3><7R45417') |