tests Package

tests Package

core Module

class keystone.tests.core.BaseTestCase(*args, **kwargs)

Bases: testtools.testcase.TestCase

Light weight base test class.

This is a placeholder that will eventually go away once thc setup/teardown in TestCase is properly trimmed down to the bare essentials. This is really just a play to speed up the tests by eliminating unnecessary work.

cleanup_instance(*names)

Create a function suitable for use with self.addCleanup.

Returns:a callable that uses a closure to delete instance attributes

class keystone.tests.core.SQLDriverOverrides

Bases: object

A mixin for consolidating sql-specific test overrides.

config_overrides()

class keystone.tests.core.TestCase(*args, **kwargs)

Bases: keystone.tests.core.BaseTestCase

add_path(path)

assertCloseEnoughForGovernmentWork(a, b, delta=3)

Asserts that two datetimes are nearly equal within a small delta.

Parameters:delta – Maximum allowable time delta, defined in seconds.

assertDictContainsSubset(expected, actual, msg=None)

Checks whether actual is a superset of expected.

assertDictEqual(d1, d2, msg=None)

assertNotEmpty(l)

assertRaisesRegexp(expected_exception, expected_regexp, callable_obj, *args, **kwargs)

Asserts that the message in a raised exception matches a regexp.

assertSetEqual(set1, set2, msg=None)

clear_auth_plugin_registry()

client(app, *args, **kw)

config(config_files)

config_files()

config_overrides()

ipv6_enabled

load_backends()

Initializes each manager and assigns them to an attribute.

load_fixtures(fixtures)

Hacky basic and naive fixture loading based on a python module.

Expects that the various APIs into the various services are already defined on self.

loadapp(config, name='main')

setUp()

skip_if_env_not_set(env_var)

skip_if_no_ipv6()

class keystone.tests.core.TestClient(app=None, token=None)

Bases: object

get(path, headers=None)

post(path, headers=None, body=None)

put(path, headers=None, body=None)

request(method, path, headers=None, body=None)

exception keystone.tests.core.UnexpectedExit

Bases: exceptions.Exception

keystone.tests.core.checkout_vendor(repo, rev)

class keystone.tests.core.dirs

static etc(*p)

static root(*p)

static tests(*p)

static tests_conf(*p)

static tmp(*p)

keystone.tests.core.generate_paste_config(extension_name)

keystone.tests.core.remove_generated_paste_config(extension_name)

keystone.tests.core.remove_test_databases()

keystone.tests.core.setup_database()

keystone.tests.core.skip_if_cache_disabled(*sections)

This decorator is used to skip a test if caching is disabled either globally or for the specific section.

In the code fragment:

@skip_if_cache_is_disabled('assignment', 'token')
def test_method(*args):
    ...

The method test_method would be skipped if caching is disabled globally via the enabled option in the cache section of the configuration or if the caching option is set to false in either assignment or token sections of the configuration. This decorator can be used with no arguments to only check global caching.

If a specified configuration section does not define the caching option, this decorator makes the same assumption as the should_cache_fn in keystone.common.cache that caching should be enabled.

keystone.tests.core.teardown_database()

default_fixtures Module

fakeldap Module

Fake LDAP server for test harness.

This class does very little error checking, and knows nothing about ldap class definitions. It implements the minimum emulation of the python ldap library to work with nova.

class keystone.tests.fakeldap.FakeLdap(url, *args, **kwargs)

Bases: object

Fake LDAP connection.

add_s(dn, attrs)

Add an object with the specified attributes at dn.

delete_ext_s(dn, serverctrls)

Remove the ldap object at specified dn.

delete_s(dn)

Remove the ldap object at specified dn.

modify_s(dn, attrs)

Modify the object at dn using the attribute list.

Parameters:

• dn – an LDAP DN
• attrs – a list of tuples in the following form: ([MOD_ADD | MOD_DELETE | MOD_REPACE], attribute, value)

search_s(dn, scope, query=None, fields=None)

Search for all matching objects under dn using the query.

Args: dn – dn to search under scope – only SCOPE_BASE and SCOPE_SUBTREE are supported query – query to filter objects by fields – fields to return. Returns all fields if not specified

simple_bind_s(dn, password)

This method is ignored, but provided for compatibility.

unbind_s()

This method is ignored, but provided for compatibility.

class keystone.tests.fakeldap.FakeShelve

Bases: dict

sync()

filtering Module

class keystone.tests.filtering.FilterTests

Bases: object

mapping_fixtures Module

Fixtures for Federation Mapping.

matchers Module

class keystone.tests.matchers.XMLEquals(expected)

Bases: object

Parses two XML documents from strings and compares the results.

match(other)

class keystone.tests.matchers.XMLMismatch(expected, other)

Bases: testtools.matchers._impl.Mismatch

describe()

rest Module

class keystone.tests.rest.RestfulTestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

Performs restful tests against the WSGI app over HTTP.

This class launches public & admin WSGI servers for every test, which can be accessed by calling public_request() or admin_request(), respectfully.

restful_request() and request() methods are also exposed if you need to bypass restful conventions or access HTTP details in your test implementation.

Three new asserts are provided:

• assertResponseSuccessful: called automatically for every request

  unless an expected_status is provided

• assertResponseStatus: called instead of assertResponseSuccessful,

  if an expected_status is provided

• assertValidResponseHeaders: validates that the response headers

  appear as expected

Requests are automatically serialized according to the defined content_type. Responses are automatically deserialized as well, and available in the response.body attribute. The original body content is available in the response.raw attribute.

admin_request(**kwargs)

assertResponseStatus(response, expected_status)

Asserts a specific status code on the response.

Parameters:

• response – httplib.HTTPResponse
• expected_status – The specific status result expected

example:

self.assertResponseStatus(response, 203)

assertResponseSuccessful(response)

Asserts that a status code lies inside the 2xx range.

Parameters:response – httplib.HTTPResponse to be verified to have a status code between 200 and 299.

example:

self.assertResponseSuccessful(response, 203)

assertValidErrorResponse(response, expected_status=400)

Verify that the error response is valid.

Subclasses can override this function based on the expected response.

assertValidResponseHeaders(response)

Ensures that response headers appear as expected.

content_type = 'json'

get_scoped_token(tenant_id=None)

Convenience method so that we can test authenticated requests.

get_unscoped_token()

Convenience method so that we can test authenticated requests.

public_request(**kwargs)

request(app, path, body=None, headers=None, token=None, expected_status=None, **kwargs)

restful_request(method='GET', headers=None, body=None, content_type=None, **kwargs)

Serializes/deserializes json/xml as request/response body.

Warning

• Existing Accept header will be overwritten.
• Existing Content-Type header will be overwritten.

setUp(app_conf='keystone')

test_associate_project_endpoint_extension Module

class keystone.tests.test_associate_project_endpoint_extension.AssociateEndpointProjectFilterCRUDTestCase(*args, **kwargs)

Bases: keystone.tests.test_associate_project_endpoint_extension.TestExtensionCase

Test OS-EP-FILTER endpoint to project associations extension.

test_check_endpoint_project_assoc()

HEAD /OS-EP-FILTER/projects/{project_id}/endpoints/{endpoint_id}

Valid project and endpoint id test case.

test_check_endpoint_project_assoc_noendp()

HEAD /OS-EP-FILTER/projects/{project_id}/endpoints/{endpoint_id}

Invalid endpoint id test case.

test_check_endpoint_project_assoc_noproj()

HEAD /OS-EP-FILTER/projects/{project_id}/endpoints/{endpoint_id}

Invalid project id test case.

test_create_endpoint_project_assoc()

PUT /OS-EP-FILTER/projects/{project_id}/endpoints/{endpoint_id}

Valid endpoint and project id test case.

test_create_endpoint_project_assoc_noendp()

PUT /OS-EP-FILTER/projects/{project_id}/endpoints/{endpoint_id}

Invalid endpoint id test case.

test_create_endpoint_project_assoc_noproj()

PUT OS-EP-FILTER/projects/{project_id}/endpoints/{endpoint_id}

Invalid project id test case.

test_create_endpoint_project_assoc_unexpected_body()

PUT /OS-EP-FILTER/projects/{project_id}/endpoints/{endpoint_id}

Unexpected body in request. The body should be ignored.

test_get_endpoint_project_assoc()

GET /OS-EP-FILTER/projects/{project_id}/endpoints success.

test_get_endpoint_project_assoc_noproj()

GET /OS-EP-FILTER/projects/{project_id}/endpoints no project.

test_list_projects_for_endpoint_assoc()

GET /OS-EP-FILTER/endpoints/{endpoint_id}/projects success

Associate default project and endpoint, then get it.

test_list_projects_for_endpoint_default()

GET /OS-EP-FILTER/endpoints/{endpoint_id}/projects success

Don’t associate project and endpoint, then get empty list.

test_list_projects_for_endpoint_noendpoint()

GET /OS-EP-FILTER/endpoints/{endpoint_id}/projects

Invalid endpoint id test case.

test_remove_endpoint_project_assoc()

DELETE /OS-EP-FILTER/projects/{project_id}/endpoints/{endpoint_id}

Valid project id and endpoint id test case.

test_remove_endpoint_project_assoc_noendp()

DELETE /OS-EP-FILTER/projects/{project_id}/endpoints/{endpoint_id}

Invalid endpoint id test case.

test_remove_endpoint_project_assoc_noproj()

DELETE /OS-EP-FILTER/projects/{project_id}/endpoints/{endpoint_id}

Invalid project id test case.

class keystone.tests.test_associate_project_endpoint_extension.AssociateProjectEndpointFilterTokenRequestTestCase(*args, **kwargs)

Bases: keystone.tests.test_associate_project_endpoint_extension.TestExtensionCase

Test OS-EP-FILTER catalog filtering extension.

test_default_project_id_scoped_token_ep_filter_full_catalog()

test_default_project_id_scoped_token_ep_filter_no_catalog()

test_default_project_id_scoped_token_with_user_id_ep_filter()

test_disabled_endpoint()

The catalog contains only enabled endpoints.

test_implicit_project_id_scoped_token_ep_filter_full_catalog()

test_implicit_project_id_scoped_token_ep_filter_no_catalog()

test_implicit_project_id_scoped_token_handling_bad_reference()

test_implicit_project_id_scoped_token_with_user_id_ep_filter()

class keystone.tests.test_associate_project_endpoint_extension.TestExtensionCase(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

EXTENSION_NAME = 'endpoint_filter'

EXTENSION_TO_ADD = 'endpoint_filter_extension'

config_overrides()

setUp()

setup_database()

test_auth Module

class keystone.tests.test_auth.AuthBadRequests(*args, **kwargs)

Bases: keystone.tests.test_auth.AuthTest

setUp()

test_authenticate_blank_auth()

Verify sending blank ‘auth’ raises the right exception.

test_authenticate_blank_request_body()

Verify sending empty json dict raises the right exception.

test_authenticate_invalid_auth_content()

Verify sending invalid ‘auth’ raises the right exception.

test_authenticate_password_too_large()

Verify sending large ‘password’ raises the right exception.

test_authenticate_tenant_id_too_large()

Verify sending large ‘tenantId’ raises the right exception.

test_authenticate_tenant_name_too_large()

Verify sending large ‘tenantName’ raises the right exception.

test_authenticate_token_too_large()

Verify sending large ‘token’ raises the right exception.

test_authenticate_user_id_too_large()

Verify sending large ‘userId’ raises the right exception.

test_authenticate_username_too_large()

Verify sending large ‘username’ raises the right exception.

test_no_credentials_in_auth()

Verify that _authenticate_local() raises exception if no creds.

test_no_external_auth()

Verify that _authenticate_external() raises exception if N/A.

test_no_token_in_auth()

Verify that _authenticate_token() raises exception if no token.

class keystone.tests.test_auth.AuthCatalog(*args, **kwargs)

Bases: keystone.tests.core.SQLDriverOverrides, keystone.tests.test_auth.AuthTest

Tests for the catalog provided in the auth response.

config_files()

test_auth_catalog_disabled_endpoint()

On authenticate, get a catalog that excludes disabled endpoints.

test_validate_catalog_disabled_endpoint()

On validate, get back a catalog that excludes disabled endpoints.

class keystone.tests.test_auth.AuthTest(*args, **kwargs)

Bases: keystone.tests.core.TestCase

assertEqualTokens(a, b)

Assert that two tokens are equal.

Compare two tokens except for their ids. This also truncates the time in the comparison.

setUp()

class keystone.tests.test_auth.AuthWithPasswordCredentials(*args, **kwargs)

Bases: keystone.tests.test_auth.AuthTest

setUp()

test_auth_empty_password()

Verify exception is raised if empty password.

test_auth_invalid_user()

Verify exception is raised if invalid user.

test_auth_no_password()

Verify exception is raised if empty password.

test_auth_valid_user_invalid_password()

Verify exception is raised if invalid password.

test_authenticate_blank_password_credentials()

Sending empty dict as passwordCredentials raises a 400 error.

test_authenticate_no_username()

Verify skipping username raises the right exception.

test_bind_without_remote_user()

test_change_default_domain_id()

class keystone.tests.test_auth.AuthWithRemoteUser(*args, **kwargs)

Bases: keystone.tests.test_auth.AuthTest

setUp()

test_bind_with_kerberos()

test_bind_without_config_opt()

test_scoped_nometa_remote_authn()

Verify getting a token with external authn and no metadata.

test_scoped_remote_authn()

Verify getting a token with external authn.

test_scoped_remote_authn_invalid_user()

Verify that external auth with invalid user fails.

test_unscoped_remote_authn()

Verify getting an unscoped token with external authn.

test_unscoped_remote_authn_jsonless()

Verify that external auth with invalid request fails.

class keystone.tests.test_auth.AuthWithToken(*args, **kwargs)

Bases: keystone.tests.test_auth.AuthTest

setUp()

test_auth_bad_formatted_token()

Verify exception is raised if invalid token.

test_auth_invalid_token()

Verify exception is raised if invalid token.

test_auth_token_cross_domain_group_and_project()

Verify getting a token in cross domain group/project roles.

test_auth_token_project_group_role()

Verify getting a token in a tenant with group roles.

test_auth_unscoped_token_no_project()

Verify getting an unscoped token with an unscoped token.

test_auth_unscoped_token_project()

Verify getting a token in a tenant with an unscoped token.

test_belongs_to()

test_belongs_to_no_tenant()

test_deleting_role_revokes_token()

test_token_auth_with_binding()

test_unscoped_token()

Verify getting an unscoped token with password creds.

class keystone.tests.test_auth.AuthWithTrust(*args, **kwargs)

Bases: keystone.tests.test_auth.AuthTest

assert_token_count_for_trust(expected_value)

build_v2_token_request(username, password, tenant_id=None)

config_overrides()

create_trust(expires_at=None, impersonation=True)

fetch_v2_token_from_trust()

fetch_v3_token_from_trust()

setUp()

test_create_trust()

test_create_trust_bad_data_fails()

test_create_trust_expires_bad()

test_create_trust_impersonation()

test_create_trust_no_impersonation()

test_create_trust_no_roles()

test_create_v3_token_from_trust()

test_delete_tokens_for_user_invalidates_tokens_from_trust()

test_delete_trust_revokes_token()

test_expired_trust_get_token_fails()

test_get_trust()

test_token_from_trust()

test_token_from_trust_cant_get_another_token()

test_token_from_trust_with_no_role_fails()

test_token_from_trust_with_wrong_role_fails()

test_token_from_trust_wrong_project_fails()

test_token_from_trust_wrong_user_fails()

test_v3_trust_token_get_token_fails()

class keystone.tests.test_auth.NonDefaultAuthTest(*args, **kwargs)

Bases: keystone.tests.core.TestCase

test_add_non_default_auth_method()

class keystone.tests.test_auth.TokenExpirationTest(*args, **kwargs)

Bases: keystone.tests.test_auth.AuthTest

test_maintain_uuid_token_expiration()

test_auth_plugin Module

class keystone.tests.test_auth_plugin.DuplicateAuthPlugin

Bases: keystone.tests.test_auth_plugin.SimpleChallengeResponse

Duplicate simple challenge response auth plugin.

class keystone.tests.test_auth_plugin.MismatchedAuthPlugin

Bases: keystone.tests.test_auth_plugin.SimpleChallengeResponse

method = 'dfffa3afd42449a08d662ee72a5e1023'

class keystone.tests.test_auth_plugin.NoMethodAuthPlugin

Bases: keystone.auth.core.AuthMethodHandler

An auth plugin that does not supply a method attribute.

authenticate(context, auth_payload, auth_context)

class keystone.tests.test_auth_plugin.SimpleChallengeResponse

Bases: keystone.auth.core.AuthMethodHandler

authenticate(context, auth_payload, user_context)

method = 'simple_challenge_response'

class keystone.tests.test_auth_plugin.TestAuthPlugin(*args, **kwargs)

Bases: keystone.tests.core.SQLDriverOverrides, keystone.tests.core.TestCase

config_files()

config_overrides()

setUp()

test_addition_auth_steps()

test_unsupported_auth_method()

class keystone.tests.test_auth_plugin.TestAuthPluginDynamicOptions(*args, **kwargs)

Bases: keystone.tests.test_auth_plugin.TestAuthPlugin

config_files()

config_overrides()

class keystone.tests.test_auth_plugin.TestInvalidAuthMethodRegistration(*args, **kwargs)

Bases: keystone.tests.core.TestCase

test_duplicate_auth_method_registration()

test_mismatched_auth_method_and_plugin_attribute()

test_no_method_attribute_auth_method_by_class_name_registration()

test_backend Module

class keystone.tests.test_backend.CatalogTests

Bases: object

test_create_endpoint()

test_create_endpoint_404()

test_create_region_invalid_parent_region_404()

test_create_region_with_duplicate_id()

test_delete_endpoint_404()

test_delete_region_404()

test_delete_service_404()

test_delete_service_with_endpoint()

test_get_catalog_endpoint_disabled()

Get back only enabled endpoints when get the v2 catalog.

test_get_endpoint_404()

test_get_region_404()

test_get_service_404()

test_get_v3_catalog_endpoint_disabled()

Get back only enabled endpoints when get the v3 catalog.

test_region_crud()

test_service_crud()

class keystone.tests.test_backend.FilterTests

Bases: keystone.tests.filtering.FilterTests

test_filter_sql_injection_attack()

Test against sql injection attack on filters

Test Plan: - Attempt to get all entities back by passing a two-term attribute - Attempt to piggyback filter to damage DB (e.g. drop table)

test_list_users_filtered()

test_list_users_inexact_filtered()

class keystone.tests.test_backend.IdentityTests

Bases: object

create_user_dict(**attributes)

test_add_duplicate_role_grant()

test_add_role_to_user_and_project_404()

test_add_role_to_user_and_project_no_user()

test_add_user_to_group()

test_add_user_to_group_404()

test_add_user_to_project()

test_add_user_to_project_404()

test_add_user_to_project_missing_default_role()

test_add_user_to_project_no_user()

test_arbitrary_attributes_are_returned_from_create_user()

test_arbitrary_attributes_are_returned_from_get_user()

test_attribute_update()

test_authenticate()

test_authenticate_and_get_roles_no_metadata()

test_authenticate_bad_password()

test_authenticate_bad_user()

test_authenticate_if_no_password_set()

test_cache_layer_domain_crud(*args, **kwargs)

test_cache_layer_project_crud(*args, **kwargs)

test_cache_layer_role_crud(*args, **kwargs)

test_check_user_in_group()

test_check_user_not_in_group()

test_create_domain_case_sensitivity()

test_create_duplicate_group_name_fails()

test_create_duplicate_group_name_in_different_domains()

test_create_duplicate_project_id_fails()

test_create_duplicate_project_name_fails()

test_create_duplicate_project_name_in_different_domains()

test_create_duplicate_role_name_fails()

test_create_duplicate_user_id_fails()

test_create_duplicate_user_name_fails()

test_create_duplicate_user_name_in_different_domains()

test_create_grant_no_group()

test_create_grant_no_user()

test_create_invalid_domain_fails()

test_create_project_blank_name_fails()

test_create_project_case_sensitivity()

test_create_project_doesnt_modify_passed_in_dict()

test_create_project_invalid_enabled_type_string()

test_create_project_invalid_name_fails()

test_create_project_long_name_fails()

test_create_project_with_no_enabled_field()

test_create_unicode_user_name()

test_create_update_delete_unicode_project()

test_create_user_blank_name_fails()

test_create_user_case_sensitivity()

test_create_user_doesnt_modify_passed_in_dict()

test_create_user_invalid_enabled_type_string()

test_create_user_invalid_name_fails()

test_create_user_long_name_fails()

test_create_user_missed_password()

test_create_user_none_password()

test_delete_domain_with_user_group_project_links()

test_delete_group_grant_no_group()

test_delete_group_with_user_project_domain_links()

test_delete_project_404()

test_delete_project_with_role_assignments()

test_delete_role_404()

test_delete_role_check_role_grant()

test_delete_role_with_user_and_group_grants()

test_delete_user_404()

test_delete_user_grant_no_user()

test_delete_user_with_group_project_domain_links()

test_delete_user_with_project_association()

test_delete_user_with_project_roles()

test_domain_crud()

test_domain_rename_invalidates_get_domain_by_name_cache(*args, **kwargs)

test_get_and_remove_correct_role_grant_from_a_mix()

test_get_and_remove_role_grant_by_group_and_cross_domain()

test_get_and_remove_role_grant_by_group_and_domain()

test_get_and_remove_role_grant_by_group_and_project()

test_get_and_remove_role_grant_by_user_and_cross_domain()

test_get_and_remove_role_grant_by_user_and_domain()

test_get_default_domain_by_name()

test_get_not_default_domain_by_name()

test_get_project()

test_get_project_404()

test_get_project_by_name()

test_get_project_by_name_404()

test_get_project_user_ids_404()

test_get_role()

test_get_role_404()

test_get_role_by_user_and_project()

test_get_role_by_user_and_project_with_user_in_group()

Test for get role by user and project, user was added into a group.

Test Plan:

• Create a user, a project & a group, add this user to group
• Create roles and grant them to user and project
• Check the role list get by the user and project was as expected

test_get_role_grant_by_user_and_project()

test_get_roles_for_user_and_domain()

Test for getting roles for user on a domain.

Test Plan:

• Create a domain, with 2 users
• Check no roles yet exit
• Give user1 two roles on the domain, user2 one role
• Get roles on user1 and the domain - maybe sure we only get back the 2 roles on user1
• Delete both roles from user1
• Check we get no roles back for user1 on domain

test_get_roles_for_user_and_domain_404()

Test errors raised when getting roles for user on a domain.

Test Plan:

• Check non-existing user gives UserNotFound
• Check non-existing domain gives DomainNotFound

test_get_roles_for_user_and_project_404()

test_get_roles_for_user_and_project_user_group_same_id()

When a user has the same ID as a group, get_roles_for_user_and_project returns only the roles for the user and not the group.

test_get_user()

test_get_user_404()

test_get_user_by_name()

test_get_user_by_name_404()

test_group_crud()

test_list_domains()

test_list_groups()

test_list_groups_for_user()

test_list_projects()

test_list_projects_for_alternate_domain()

test_list_projects_for_domain()

test_list_projects_for_user()

test_list_projects_for_user_with_grants()

test_list_role_assignments_bad_role()

test_list_role_assignments_unfiltered()

Test for unfiltered listing role assignments.

Test Plan:

• Create a domain, with a user, group & project
• Find how many role assignments already exist (from default fixtures)
• Create a grant of each type (user/group on project/domain)
• Check the number of assignments has gone up by 4 and that the entries we added are in the list returned
• Check that if we list assignments by role_id, then we get back assignments that only contain that role.

test_list_roles()

test_list_user_ids_for_project()

test_list_user_ids_for_project_no_duplicates()

test_list_user_project_ids_404()

test_list_users()

test_list_users_in_group()

test_move_group_between_domains()

test_move_group_between_domains_with_clashing_names_fails()

test_move_project_between_domains()

test_move_project_between_domains_with_clashing_names_fails()

test_move_user_between_domains()

test_move_user_between_domains_with_clashing_names_fails()

test_multi_group_grants_on_project_domain()

Test multiple group roles for user on project and domain.

Test Plan:

• Create 6 roles
• Create a domain, with a project, user and two groups
• Make the user a member of both groups
• Check no roles yet exit
• Assign a role to each user and both groups on both the project and domain
• Get a list of effective roles for the user on both the project and domain, checking we get back the correct three roles

test_multi_role_grant_by_user_group_on_project_domain()

test_new_arbitrary_attributes_are_returned_from_update_user()

test_password_hashed()

test_project_add_and_remove_user_role()

test_project_crud()

test_project_rename_invalidates_get_project_by_name_cache(*args, **kwargs)

test_project_update_missing_attrs_with_a_falsey_value()

test_project_update_missing_attrs_with_a_value()

test_remove_role_from_user_and_project()

test_remove_role_grant_from_user_and_project()

test_remove_user_from_group()

test_remove_user_from_group_404()

test_remove_user_from_project()

test_remove_user_from_project_404()

test_remove_user_from_project_race_delete_role()

test_remove_user_role_not_assigned()

test_rename_duplicate_project_name_fails()

test_rename_duplicate_role_name_fails()

test_rename_duplicate_user_name_fails()

test_role_crud()

test_role_grant_by_group_and_cross_domain_project()

test_role_grant_by_user_and_cross_domain_project()

test_update_project_404()

test_update_project_blank_name_fails()

test_update_project_enable()

test_update_project_id_does_nothing()

test_update_project_invalid_enabled_type_string()

test_update_project_invalid_name_fails()

test_update_project_long_name_fails()

test_update_role_404()

test_update_user_404()

test_update_user_blank_name_fails()

test_update_user_enable()

test_update_user_enable_fails()

test_update_user_id_fails()

test_update_user_invalid_name_fails()

test_update_user_long_name_fails()

test_update_user_name()

test_updated_arbitrary_attributes_are_returned_from_update_user()

test_user_crud()

class keystone.tests.test_backend.InheritanceTests

Bases: object

test_inherited_role_grants_for_group()

Test inherited group roles.

Test Plan:

• Enable OS-INHERIT extension
• Create 4 roles
• Create a domain, with a project, user and two groups
• Make the user a member of both groups
• Check no roles yet exit
• Assign a direct user role to the project and a (non-inherited) group role on the domain
• Get a list of effective roles - should only get the one direct role
• Now add two inherited group roles to the domain
• Get a list of effective roles - should have three roles, one direct and two by virtue of inherited group roles

test_inherited_role_grants_for_user()

Test inherited user roles.

Test Plan:

• Enable OS-INHERIT extension
• Create 3 roles
• Create a domain, with a project and a user
• Check no roles yet exit
• Assign a direct user role to the project and a (non-inherited) user role to the domain
• Get a list of effective roles - should only get the one direct role
• Now add an inherited user role to the domain
• Get a list of effective roles - should have two roles, one direct and one by virtue of the inherited user role
• Also get effective roles for the domain - the role marked as inherited should not show up

test_list_projects_for_user_with_inherited_grants()

Test inherited group roles.

Test Plan:

• Enable OS-INHERIT extension
• Create a domain, with two projects and a user
• Assign an inherited user role on the domain, as well as a direct user role to a separate project in a different domain
• Get a list of projects for user, should return all three projects

test_list_projects_for_user_with_inherited_group_grants()

Test inherited group roles.

Test Plan:

• Enable OS-INHERIT extension
• Create two domains, each with two projects
• Create a user and group
• Make the user a member of the group
• Assign a user role two projects, an inherited group role to one domain and an inherited regular role on the other domain
• Get a list of projects for user, should return both pairs of projects from the domain, plus the one separate project

class keystone.tests.test_backend.LimitTests

Bases: keystone.tests.filtering.FilterTests

ENTITIES = ['user', 'group', 'project']

clean_up_domain()

Clean up domain test data from Limit Test Cases.

clean_up_entities()

Clean up entity test data from Limit Test Cases.

setUp()

Setup for Limit Test Cases.

test_list_groups_filtered_and_limited()

test_list_projects_filtered_and_limited()

test_list_users_filtered_and_limited()

class keystone.tests.test_backend.PolicyTests

Bases: object

assertEqualPolicies(a, b)

test_create()

test_delete()

test_delete_policy_404()

test_get()

test_get_policy_404()

test_list()

test_update()

test_update_policy_404()

class keystone.tests.test_backend.TokenCacheInvalidation

Bases: object

test_delete_scoped_token_by_id()

test_delete_scoped_token_by_user()

test_delete_scoped_token_by_user_and_tenant()

test_delete_unscoped_token()

class keystone.tests.test_backend.TokenTests

Bases: object

check_list_revoked_tokens(token_ids)

create_token_sample_data(token_id=None, tenant_id=None, trust_id=None, user_id=None, expires=None)

delete_token()

test_create_unicode_token_id()

test_create_unicode_user_id()

test_delete_token_404()

test_delete_tokens()

test_delete_tokens_trust()

test_expired_token()

test_flush_expired_token()

test_get_token_404()

test_list_revoked_tokens_for_multiple_tokens()

test_list_revoked_tokens_for_single_token()

test_list_revoked_tokens_returns_empty_list()

test_list_tokens_unicode_user_id()

test_null_expires_token()

test_predictable_revoked_pki_token_id()

test_predictable_revoked_uuid_token_id()

test_revocation_list_cache(*args, **kwargs)

test_token_crud()

test_token_expire_timezone()

test_token_list()

test_token_list_deprecated_public_interface()

test_token_list_trust()

class keystone.tests.test_backend.TrustTests

Bases: object

create_sample_trust(new_id, remaining_uses=None)

test_consume_use()

test_create_trust()

test_delete_trust()

test_delete_trust_not_found()

test_get_trust()

test_list_trust_by_trustee()

test_list_trust_by_trustor()

test_list_trusts()

test_trust_has_remaining_uses_negative()

test_trust_has_remaining_uses_positive()

test_backend_federation_sql Module

class keystone.tests.test_backend_federation_sql.SqlFederation(*args, **kwargs)

Bases: keystone.tests.test_backend_sql.SqlModels

Set of tests for checking SQL Federation.

test_federated_protocol()

test_identity_provider()

test_backend_kvs Module

class keystone.tests.test_backend_kvs.KvsCatalog(*args, **kwargs)

Bases: keystone.tests.core.TestCase, keystone.tests.test_backend.CatalogTests

config_overrides()

setUp()

test_get_catalog()

test_get_catalog_404()

test_get_catalog_endpoint_disabled()

test_get_v3_catalog_endpoint_disabled()

class keystone.tests.test_backend_kvs.KvsIdentity(*args, **kwargs)

Bases: keystone.tests.core.TestCase, keystone.tests.test_backend.IdentityTests

config_overrides()

setUp()

test_create_duplicate_group_name_in_different_domains()

test_create_duplicate_project_name_in_different_domains()

test_create_duplicate_user_name_in_different_domains()

test_list_projects_for_user_with_grants()

test_move_group_between_domains()

test_move_group_between_domains_with_clashing_names_fails()

test_move_project_between_domains()

test_move_project_between_domains_with_clashing_names_fails()

test_move_user_between_domains()

test_move_user_between_domains_with_clashing_names_fails()

class keystone.tests.test_backend_kvs.KvsToken(*args, **kwargs)

Bases: keystone.tests.core.TestCase, keystone.tests.test_backend.TokenTests

config_overrides()

setUp()

test_cleanup_user_index_on_create()

test_flush_expired_token()

class keystone.tests.test_backend_kvs.KvsTokenCacheInvalidation(*args, **kwargs)

Bases: keystone.tests.core.TestCase, keystone.tests.test_backend.TokenCacheInvalidation

config_overrides()

setUp()

class keystone.tests.test_backend_kvs.KvsTrust(*args, **kwargs)

Bases: keystone.tests.core.TestCase, keystone.tests.test_backend.TrustTests

config_overrides()

setUp()

test_backend_ldap Module

class keystone.tests.test_backend_ldap.BaseLDAPIdentity

Bases: keystone.tests.test_backend.IdentityTests

clear_database()

config_files()

config_overrides()

get_config(domain_id)

reload_backends(domain_id)

test_arbitrary_attributes_are_returned_from_create_user()

test_arbitrary_attributes_are_returned_from_get_user()

test_authenticate_requires_simple_bind()

test_build_tree()

Regression test for building the tree names

test_configurable_allowed_user_actions()

test_configurable_forbidden_create_existing_user()

test_configurable_forbidden_user_actions()

test_create_duplicate_group_name_in_different_domains()

test_create_duplicate_project_name_in_different_domains()

test_create_duplicate_user_name_in_different_domains()

test_create_user_none_mapping()

test_delete_group_grant_no_group()

test_delete_group_with_user_project_domain_links()

test_delete_role_with_user_and_group_grants()

test_delete_user_grant_no_user()

test_delete_user_with_group_project_domain_links()

test_get_and_remove_correct_role_grant_from_a_mix()

test_get_and_remove_role_grant_by_group_and_cross_domain()

test_get_and_remove_role_grant_by_group_and_domain()

test_get_and_remove_role_grant_by_group_and_project()

test_get_and_remove_role_grant_by_user_and_cross_domain()

test_get_and_remove_role_grant_by_user_and_domain()

test_get_roles_for_user_and_domain()

test_group_crud()

test_list_domains()

test_list_domains_non_default_domain_id()

test_list_group_members_missing_entry()

List group members with deleted user.

If a group has a deleted entry for a member, the non-deleted members are returned.

test_list_group_members_when_no_members()

test_list_projects_for_user()

test_list_projects_for_user_with_grants()

test_list_role_assignments_bad_role()

test_list_role_assignments_dumb_member()

test_list_role_assignments_unfiltered()

test_move_group_between_domains()

test_move_group_between_domains_with_clashing_names_fails()

test_move_project_between_domains()

test_move_project_between_domains_with_clashing_names_fails()

test_move_user_between_domains()

test_move_user_between_domains_with_clashing_names_fails()

test_multi_group_grants_on_project_domain()

test_multi_role_grant_by_user_group_on_project_domain()

test_new_arbitrary_attributes_are_returned_from_update_user()

test_remove_role_grant_from_user_and_project()

test_role_grant_by_group_and_cross_domain_project()

test_role_grant_by_user_and_cross_domain_project()

test_unignored_user_none_mapping()

test_update_user_name()

A user’s name cannot be changed through the LDAP driver.

test_updated_arbitrary_attributes_are_returned_from_update_user()

test_user_filter()

test_user_id_comma_grants()

Even if the user has a , in their ID, can get user and group grants.

test_utf8_conversion()

class keystone.tests.test_backend_ldap.LDAPIdentity(*args, **kwargs)

Bases: keystone.tests.test_backend_ldap.BaseLDAPIdentity, keystone.tests.core.TestCase

setUp()

test_binary_attribute_values()

test_cache_layer_domain_crud()

test_cache_layer_project_crud(*args, **kwargs)

test_chase_referrals_off()

test_chase_referrals_on()

test_configurable_allowed_project_actions()

test_configurable_allowed_role_actions()

test_configurable_forbidden_project_actions()

test_configurable_forbidden_role_actions()

test_configurable_subtree_delete()

test_create_domain_case_sensitivity()

test_create_grant_no_group()

test_create_grant_no_user()

test_domain_crud()

test_domain_rename_invalidates_get_domain_by_name_cache()

test_dumb_member()

test_get_default_domain_by_name()

test_list_projects_for_alternate_domain()

test_multi_role_grant_by_user_group_on_project_domain()

test_parse_extra_attribute_mapping()

test_project_attribute_ignore()

test_project_attribute_mapping()

test_project_crud()

test_project_filter()

test_project_rename_invalidates_get_project_by_name_cache()

test_role_attribute_ignore()

test_role_attribute_mapping()

test_role_filter()

test_user_api_get_connection_no_user_password()

Don’t bind in case the user and password are blank.

test_user_enable_attribute_mask()

test_user_extra_attribute_mapping()

test_user_extra_attribute_mapping_description_is_returned()

test_user_mixed_case_attribute(*args, **keywargs)

test_wrong_alias_dereferencing()

test_wrong_ldap_scope()

class keystone.tests.test_backend_ldap.LDAPIdentityEnabledEmulation(*args, **kwargs)

Bases: keystone.tests.test_backend_ldap.LDAPIdentity

config_files()

config_overrides()

setUp()

test_project_crud()

test_user_crud()

test_user_enable_attribute_mask()

class keystone.tests.test_backend_ldap.LdapIdentitySqlAssignment(*args, **kwargs)

Bases: keystone.tests.test_backend_ldap.BaseLDAPIdentity, keystone.tests.core.SQLDriverOverrides, keystone.tests.core.TestCase

config_files()

config_overrides()

setUp()

test_add_role_grant_to_user_and_project_404()

test_domain_crud()

test_get_role_grants_for_user_and_project_404()

test_list_domains()

test_list_domains_non_default_domain_id()

test_list_projects_for_user_with_grants()

test_project_filter()

test_role_filter()

class keystone.tests.test_backend_ldap.MultiLDAPandSQLIdentity(*args, **kwargs)

Bases: keystone.tests.test_backend_ldap.BaseLDAPIdentity, keystone.tests.core.SQLDriverOverrides, keystone.tests.core.TestCase

Class to test common SQL plus individual LDAP backends.

We define a set of domains and domain-specific backends:

• A separate LDAP backend for the default domain
• A separate LDAP backend for domain1
• domain2 shares the same LDAP as domain1, but uses a different tree attach point
• An SQL backend for all other domains (which will include domain3 and domain4)

Normally one would expect that the default domain would be handled as part of the “other domains” - however the above provides better test coverage since most of the existing backend tests use the default domain.

config_overrides()

get_config(domain_id)

reload_backends(domain_id)

setUp()

test_add_role_grant_to_user_and_project_404()

test_domain_segregation()

Test that separate configs have segregated the domain.

Test Plan:

• Create a user in each of the domains
• Make sure that you can only find a given user in its relevant domain
• Make sure that for a backend that supports multiple domains you can get the users via any of the domain scopes

test_get_role_grants_for_user_and_project_404()

test_list_domains()

test_list_domains_non_default_domain_id()

test_list_projects_for_user_with_grants()

test_scanning_of_config_dir()

Test the Manager class scans the config directory.

The setup for the main tests above load the domain configs directly so that the test overrides can be included. This test just makes sure that the standard config directory scanning does pick up the relevant domain config files.

test_backend_rules Module

class keystone.tests.test_backend_rules.RulesPolicy(*args, **kwargs)

Bases: keystone.tests.core.TestCase, keystone.tests.test_backend.PolicyTests

config_overrides()

setUp()

test_create()

test_delete()

test_delete_policy_404()

test_get()

test_get_policy_404()

test_list()

test_update()

test_update_policy_404()

test_backend_sql Module

class keystone.tests.test_backend_sql.FakeTable(*args, **kwargs)

Bases: sqlalchemy.ext.declarative.Base

col

insert(*args, **kwargs)

lookup(*args, **kwargs)

update(*args, **kwargs)

class keystone.tests.test_backend_sql.SqlCatalog(*args, **kwargs)

Bases: keystone.tests.test_backend_sql.SqlTests, keystone.tests.test_backend.CatalogTests

test_catalog_ignored_malformed_urls()

test_create_endpoint_400()

test_get_catalog_with_empty_public_url()

class keystone.tests.test_backend_sql.SqlDecorators(*args, **kwargs)

Bases: keystone.tests.core.TestCase

test_conflict_happend()

test_initialization()

test_initialization_fail()

test_non_ascii_init()

test_not_conflict_error()

class keystone.tests.test_backend_sql.SqlFilterTests(*args, **kwargs)

Bases: keystone.tests.test_backend_sql.SqlTests, keystone.tests.test_backend.FilterTests

class keystone.tests.test_backend_sql.SqlIdentity(*args, **kwargs)

Bases: keystone.tests.test_backend_sql.SqlTests, keystone.tests.test_backend.IdentityTests

test_create_null_project_name()

test_create_null_role_name()

test_create_null_user_name()

test_delete_project_with_user_association()

test_delete_user_with_project_association()

test_metadata_removed_on_delete_project()

test_metadata_removed_on_delete_user()

test_password_hashed()

test_sql_user_to_dict_null_default_project_id()

test_update_project_returns_extra()

This tests for backwards-compatibility with an essex/folsom bug.

Non-indexed attributes were returned in an ‘extra’ attribute, instead of on the entity itself; for consistency and backwards compatibility, those attributes should be included twice.

This behavior is specific to the SQL driver.

test_update_user_returns_extra()

This tests for backwards-compatibility with an essex/folsom bug.

Non-indexed attributes were returned in an ‘extra’ attribute, instead of on the entity itself; for consistency and backwards compatibility, those attributes should be included twice.

This behavior is specific to the SQL driver.

class keystone.tests.test_backend_sql.SqlInheritance(*args, **kwargs)

Bases: keystone.tests.test_backend_sql.SqlTests, keystone.tests.test_backend.InheritanceTests

class keystone.tests.test_backend_sql.SqlLimitTests(*args, **kwargs)

Bases: keystone.tests.test_backend_sql.SqlTests, keystone.tests.test_backend.LimitTests

setUp()

class keystone.tests.test_backend_sql.SqlModels(*args, **kwargs)

Bases: keystone.tests.test_backend_sql.SqlTests

assertExpectedSchema(table, cols)

select_table(name)

setUp()

test_domain_model()

test_group_model()

test_project_model()

test_role_assignment_model()

test_role_model()

test_user_group_membership()

test_user_model()

class keystone.tests.test_backend_sql.SqlPolicy(*args, **kwargs)

Bases: keystone.tests.test_backend_sql.SqlTests, keystone.tests.test_backend.PolicyTests

class keystone.tests.test_backend_sql.SqlTests(*args, **kwargs)

Bases: keystone.tests.core.SQLDriverOverrides, keystone.tests.core.TestCase

config_files()

setUp()

class keystone.tests.test_backend_sql.SqlToken(*args, **kwargs)

Bases: keystone.tests.test_backend_sql.SqlTests, keystone.tests.test_backend.TokenTests

test_flush_expired_tokens_batch()

test_token_flush_batch_size_db2()

test_token_flush_batch_size_default()

test_token_revocation_list_uses_right_columns()

class keystone.tests.test_backend_sql.SqlTokenCacheInvalidation(*args, **kwargs)

Bases: keystone.tests.test_backend_sql.SqlTests, keystone.tests.test_backend.TokenCacheInvalidation

setUp()

class keystone.tests.test_backend_sql.SqlTrust(*args, **kwargs)

Bases: keystone.tests.test_backend_sql.SqlTests, keystone.tests.test_backend.TrustTests

test_backend_templated Module

class keystone.tests.test_backend_templated.TestTemplatedCatalog(*args, **kwargs)

Bases: keystone.tests.core.TestCase, keystone.tests.test_backend.CatalogTests

DEFAULT_FIXTURE = {'RegionOne': {'compute': {'adminURL': 'http://localhost:8774/v1.1/bar', 'id': '2', 'internalURL': 'http://localhost:8774/v1.1/bar', 'name': "'Compute Service'", 'publicURL': 'http://localhost:8774/v1.1/bar'}, 'identity': {'adminURL': 'http://localhost:35357/v2.0', 'id': '1', 'internalURL': 'http://localhost:35357/v2.0', 'name': "'Identity Service'", 'publicURL': 'http://localhost:5000/v2.0'}}}

config_overrides()

setUp()

test_catalog_ignored_malformed_urls()

test_get_catalog()

test_get_catalog_endpoint_disabled()

test_get_v3_catalog()

test_get_v3_catalog_endpoint_disabled()

test_base64utils Module

class keystone.tests.test_base64utils.TestBase64Padding(*args, **kwargs)

Bases: keystone.tests.core.TestCase

test_alphabet_conversion()

test_assure_padding()

test_base64_percent_encoding()

test_filter()

test_is_padded()

test_strip_padding()

class keystone.tests.test_base64utils.TestTextWrap(*args, **kwargs)

Bases: keystone.tests.core.TestCase

test_wrapping()

class keystone.tests.test_base64utils.TestValid(*args, **kwargs)

Bases: keystone.tests.core.TestCase

test_valid_base64()

test_valid_base64url()

test_cache Module

class keystone.tests.test_cache.CacheIsolatingProxy(*args, **kwargs)

Bases: dogpile.cache.proxy.ProxyBackend

Proxy that forces a memory copy of stored values. The default in-memory cache-region does not perform a copy on values it is meant to cache. Therefore if the value is modified after set or after get, the cached value also is modified. This proxy does a copy as the last thing before storing data.

get(key)

set(key, value)

class keystone.tests.test_cache.CacheNoopBackendTest(*args, **kwargs)

Bases: keystone.tests.core.TestCase

config_overrides()

setUp()

test_noop_backend()

class keystone.tests.test_cache.CacheRegionTest(*args, **kwargs)

Bases: keystone.tests.core.TestCase

setUp()

test_cache_debug_proxy()

test_cache_dictionary_config_builder()

Validate we build a sane dogpile.cache dictionary config.

test_cache_region_no_error_multiple_config()

test_configure_non_region_object_raises_error()

test_region_built_with_proxy_direct_cache_test()

test_should_cache_fn_global_cache_disabled()

test_should_cache_fn_global_cache_disabled_section_cache_enabled()

test_should_cache_fn_global_cache_enabled()

test_should_cache_fn_global_cache_enabled_section_cache_disabled()

test_should_cache_fn_global_cache_enabled_section_cache_enabled()

class keystone.tests.test_cache.TestProxy(*args, **kwargs)

Bases: dogpile.cache.proxy.ProxyBackend

get(key)

class keystone.tests.test_cache.TestProxyValue(value)

Bases: object

test_cache_backend_mongo Module

class keystone.tests.test_cache_backend_mongo.MockCollection(db, name)

Bases: object

ensure_index(key_or_list, *args, **kwargs)

find(spec=None, *args, **kwargs)

find_and_modify(spec, document, upsert=False, **kwargs)

find_one(spec_or_id=None, *args, **kwargs)

index_information()

insert(data, manipulate=True, **kwargs)

remove(spec_or_id=None, search_filter=None)

Remove objects matching spec_or_id from the collection.

save(data, manipulate=True, **kwargs)

update(spec, document, upsert=False, **kwargs)

class keystone.tests.test_cache_backend_mongo.MockCursor(collection, dataset_factory)

Bases: object

next()

class keystone.tests.test_cache_backend_mongo.MockMongoClient(*args, **kwargs)

Bases: object

class keystone.tests.test_cache_backend_mongo.MockMongoDB(dbname)

Bases: object

add_son_manipulator(manipulator)

authenticate(username, password)

class keystone.tests.test_cache_backend_mongo.MongoCache(*args, **kwargs)

Bases: testtools.testcase.TestCase

setUp()

test_additional_crud_method_arguments_support()

Additional arguments should works across find/insert/update.

test_backend_delete_data()

test_backend_get_missing_data()

test_backend_multi_delete_data()

test_backend_multi_get_data()

test_backend_multi_set_data()

test_backend_multi_set_get_with_blanks_none()

test_backend_multi_set_should_update_existing()

test_backend_set_blank_as_data()

test_backend_set_data()

test_backend_set_data_with_int_as_valid_ttl()

test_backend_set_data_with_string_as_valid_ttl()

test_backend_set_none_as_data()

test_backend_set_same_key_multiple_times()

test_cache_configuration_values_assertion()

test_correct_read_preference()

test_correct_write_concern()

test_incorrect_mongo_ttl_seconds()

test_incorrect_read_preference()

test_incorrect_write_concern()

test_missing_cache_collection_name()

test_missing_db_hosts()

test_missing_db_name()

test_missing_replica_set_name()

test_multiple_region_cache_configuration()

test_provided_replica_set_name()

test_typical_configuration()

class keystone.tests.test_cache_backend_mongo.MyTransformer

Bases: keystone.common.cache.backends.mongo.BaseTransform

Added here just to check manipulator logic is used correctly.

transform_incoming(son, collection)

transform_outgoing(son, collection)

keystone.tests.test_cache_backend_mongo.get_collection(db_name, collection_name)

keystone.tests.test_cache_backend_mongo.pymongo_override()

test_catalog Module

class keystone.tests.test_catalog.TestV2CatalogAPISQL(*args, **kwargs)

Bases: keystone.tests.core.TestCase

config_overrides()

new_endpoint_ref(service_id)

setUp()

test_get_catalog_ignores_endpoints_with_invalid_urls()

class keystone.tests.test_catalog.V2CatalogTestCase(*args, **kwargs)

Bases: keystone.tests.rest.RestfulTestCase

new_ref()

Populates a ref with attributes common to all API entities.

new_service_ref()

setUp()

test_endpoint_create()

test_endpoint_create_with_empty_adminurl()

test_endpoint_create_with_empty_internalurl()

test_endpoint_create_with_empty_publicurl()

test_endpoint_create_with_empty_service_id()

test_endpoint_create_with_null_adminurl()

test_endpoint_create_with_null_internalurl()

test_endpoint_create_with_null_publicurl()

test_endpoint_create_with_null_service_id()

test_cert_setup Module

class keystone.tests.test_cert_setup.CertSetupTestCase(*args, **kwargs)

Bases: keystone.tests.rest.RestfulTestCase

config_overrides()

setUp()

test_can_handle_missing_certs()

test_create_pki_certs()

test_create_ssl_certs()

test_failure()

test_fetch_signing_cert()

test_config Module

class keystone.tests.test_config.ConfigTestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

config_files()

test_config_default()

test_paste_config()

class keystone.tests.test_config.DeprecatedOverrideTestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

Test using the deprecated AND new name for renamed options.

config_files()

test_sql()

class keystone.tests.test_config.DeprecatedTestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

Test using the original (deprecated) name for renamed options.

config_files()

test_sql()

test_content_types Module

class keystone.tests.test_content_types.CoreApiTests

Bases: object

assertNoRoles(r)

Helper method to assert No Roles

This needs to be overridden by child classes based on their content type.

assertValidError(error)

Applicable to XML and JSON.

assertValidExtension(extension)

Applicable to XML and JSON.

However, navigating extension links differs between content types. They need to be validated separately with assertValidExtensionLink.

assertValidExtensionLink(link)

Applicable to XML and JSON.

assertValidRole(tenant)

Applicable to XML and JSON.

assertValidTenant(tenant)

Applicable to XML and JSON.

assertValidUser(user)

Applicable to XML and JSON.

assertValidVersion(version)

Applicable to XML and JSON.

However, navigating links and media-types differs between content types so they need to be validated separately.

test_admin_extensions()

test_admin_extensions_404()

test_admin_multiple_choice()

test_admin_not_found()

test_admin_osksadm_extension()

test_admin_version()

test_authenticate()

test_authenticate_unscoped()

test_authenticating_a_user_with_no_password()

test_create_update_user_invalid_enabled_type()

test_endpoints()

test_error_response()

This triggers assertValidErrorResponse by convention.

test_get_tenant()

test_get_tenant_by_name()

test_get_tenants_for_token()

test_get_user()

test_get_user_by_name()

test_get_user_roles()

test_get_user_roles_with_tenant()

test_invalid_parameter_error_response()

test_invalid_token_404()

test_public_extensions()

test_public_multiple_choice()

test_public_not_found()

test_public_osksadm_extension_404()

test_public_version()

test_remove_role_revokes_token()

test_update_user_tenant()

test_update_user_with_invalid_tenant()

test_update_user_with_invalid_tenant_no_prev_tenant()

test_update_user_with_old_tenant()

test_validate_token()

test_validate_token_belongs_to()

test_validate_token_head()

The same call as above, except using HEAD.

There’s no response to validate here, but this is included for the sake of completely covering the core API.

test_validate_token_no_belongs_to_still_returns_catalog()

test_validate_token_service_role()

test_www_authenticate_header()

test_www_authenticate_header_host()

class keystone.tests.test_content_types.JsonTestCase(*args, **kwargs)

Bases: keystone.tests.test_content_types.RestfulTestCase, keystone.tests.test_content_types.CoreApiTests, keystone.tests.test_content_types.LegacyV2UsernameTests

assertNoRoles(r)

assertValidAuthenticationResponse(r, require_service_catalog=False)

assertValidEndpointListResponse(r)

assertValidErrorResponse(r)

assertValidExtension(extension, expected)

assertValidExtensionListResponse(r, expected)

assertValidExtensionResponse(r, expected)

assertValidMultipleChoiceResponse(r)

assertValidRevocationListResponse(response)

assertValidRoleListResponse(r)

assertValidTenantListResponse(r)

assertValidTenantResponse(r)

assertValidUser(user)

assertValidUserResponse(r)

assertValidVersion(version)

assertValidVersionResponse(r)

content_type = 'json'

get_user_attribute_from_response(r, attribute_name)

get_user_from_response(r)

test_authenticating_a_user_with_an_OSKSADM_password()

test_create_update_user_json_invalid_enabled_type()

test_fetch_revocation_list_admin_200()

test_fetch_revocation_list_nonadmin_fails()

test_service_crud_requires_auth()

Service CRUD should 401 without an X-Auth-Token (bug 1006822).

test_updating_a_user_with_an_OSKSADM_password()

test_user_role_list_requires_auth()

User role list should 401 without an X-Auth-Token (bug 1006815).

class keystone.tests.test_content_types.LegacyV2UsernameTests

Bases: object

Tests to show the broken username behavior in V2.

The V2 API is documented to use username instead of name. The API forced used to use name and left the username to fall into the extra field.

These tests ensure this behavior works so fixes to username/name will be backward compatible.

create_user(**user_attrs)

Creates a users and returns the response object.

Parameters:user_attrs – attributes added to the request body (optional)

test_create_with_extra_username()

The response for creating a user will contain the extra fields.

test_get_returns_username_from_extra()

The response for getting a user will contain the extra fields.

test_update_returns_new_username_when_adding_username()

The response for updating a user will contain the extra fields.

This is specifically testing for updating a username when a value was not previously set.

test_update_returns_new_username_when_updating_username()

The response for updating a user will contain the extra fields.

This tests updating a username that was previously set.

test_updated_username_is_returned()

Username is set as the value of name if no username is provided.

This matches the v2.0 spec where we really should be using username and not name.

test_username_can_be_used_instead_of_name_create()

test_username_can_be_used_instead_of_name_update()

test_username_is_always_returned_create()

Username is set as the value of name if no username is provided.

This matches the v2.0 spec where we really should be using username and not name.

test_username_is_always_returned_get()

Username is set as the value of name if no username is provided.

This matches the v2.0 spec where we really should be using username and not name.

test_username_is_always_returned_get_by_name()

Username is set as the value of name if no username is provided.

This matches the v2.0 spec where we really should be using username and not name.

test_username_is_always_returned_update_no_username_provided()

Username is set as the value of name if no username is provided.

This matches the v2.0 spec where we really should be using username and not name.

class keystone.tests.test_content_types.RestfulTestCase(*args, **kwargs)

Bases: keystone.tests.rest.RestfulTestCase

setUp()

class keystone.tests.test_content_types.RevokeApiJsonTestCase(*args, **kwargs)

Bases: keystone.tests.test_content_types.JsonTestCase

config_overrides()

test_fetch_revocation_list_admin_200()

class keystone.tests.test_content_types.XmlTestCase(*args, **kwargs)

Bases: keystone.tests.test_content_types.RestfulTestCase, keystone.tests.test_content_types.CoreApiTests, keystone.tests.test_content_types.LegacyV2UsernameTests

assertNoRoles(r)

assertValidAuthenticationResponse(r, require_service_catalog=False)

assertValidEndpointListResponse(r)

assertValidErrorResponse(r)

assertValidExtension(extension, expected)

assertValidExtensionListResponse(r, expected)

assertValidExtensionResponse(r, expected)

assertValidMultipleChoiceResponse(r)

assertValidRoleListResponse(r)

assertValidTenantListResponse(r)

assertValidTenantResponse(r)

assertValidUserResponse(r)

assertValidVersion(version)

assertValidVersionResponse(r)

content_type = 'xml'

get_user_attribute_from_response(r, attribute_name)

get_user_from_response(r)

test_add_tenant_json()

Create a tenant without providing description field.

test_add_tenant_xml()

Create a tenant without providing description field.

test_authenticate_with_invalid_xml_in_password()

test_authenticating_a_user_with_an_OSKSADM_password()

test_create_project_invalid_enabled_type_string()

test_remove_role_revokes_token()

test_update_project_invalid_enabled_type_string()

xmlns = 'http://docs.openstack.org/identity/api/v2.0'

test_contrib_s3_core Module

class keystone.tests.test_contrib_s3_core.S3ContribCore(*args, **kwargs)

Bases: keystone.tests.core.TestCase

setUp()

test_bad_signature()

test_good_signature()

test_contrib_simple_cert Module

class keystone.tests.test_contrib_simple_cert.BaseTestCase(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

CA_PATH = '/v3/OS-SIMPLE-CERT/ca'

CERT_PATH = '/v3/OS-SIMPLE-CERT/certificates'

EXTENSION_TO_ADD = 'simple_cert_extension'

class keystone.tests.test_contrib_simple_cert.TestSimpleCert(*args, **kwargs)

Bases: keystone.tests.test_contrib_simple_cert.BaseTestCase

request_cert(path)

test_ca_cert()

test_missing_file()

test_signing_cert()

class keystone.tests.test_contrib_simple_cert.UUIDSimpleCertTests(*args, **kwargs)

Bases: keystone.tests.test_contrib_simple_cert.BaseTestCase

config_overrides()

test_using_uuid_controller()

test_contrib_stats_core Module

class keystone.tests.test_contrib_stats_core.StatsContribCore(*args, **kwargs)

Bases: keystone.tests.core.TestCase

setUp()

test_admin_request()

test_other_request()

test_public_request()

test_driver_hints Module

class keystone.tests.test_driver_hints.ListHintsTests(*args, **kwargs)

Bases: keystone.tests.core.TestCase

test_create_iterate_satisfy()

test_limits()

test_multiple_creates()

test_exception Module

class keystone.tests.test_exception.ExceptionTestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

assertValidJsonRendering(e)

test_403_title()

test_all_json_renderings()

Everything callable in the exception module should be renderable.

... except for the base error class (exception.Error), which is not user-facing.

This test provides a custom message to bypass docstring parsing, which should be tested separately.

test_invalid_unicode_string()

test_not_found()

test_unicode_message()

test_unicode_string()

test_validation_error()

class keystone.tests.test_exception.SecurityErrorTestCase(*args, **kwargs)

Bases: keystone.tests.test_exception.ExceptionTestCase

Tests whether security-related info is exposed to the API user.

test_forbidden_action_exposure()

test_forbidden_action_exposure_in_debug()

test_forbidden_exposure()

test_forbidden_exposure_in_debug()

test_unauthorized_exposure()

test_unauthorized_exposure_in_debug()

test_unicode_argument_message()

class keystone.tests.test_exception.UnexpectedExceptionTestCase(*args, **kwargs)

Bases: keystone.tests.test_exception.ExceptionTestCase

Tests if internal info is exposed to the API user on UnexpectedError.

exception SubClassExc(message=None, **kwargs)

Bases: keystone.exception.UnexpectedError

debug_message_format = 'Debug Message: %(debug_info)s'

UnexpectedExceptionTestCase.setUp()

UnexpectedExceptionTestCase.test_unexpected_error_custom_message_debug()

UnexpectedExceptionTestCase.test_unexpected_error_custom_message_no_debug()

UnexpectedExceptionTestCase.test_unexpected_error_debug()

UnexpectedExceptionTestCase.test_unexpected_error_no_debug()

UnexpectedExceptionTestCase.test_unexpected_error_subclass_debug()

UnexpectedExceptionTestCase.test_unexpected_error_subclass_no_debug()

test_injection Module

class keystone.tests.test_injection.TestDependencyInjection(*args, **kwargs)

Bases: testtools.testcase.TestCase

setUp()

test_circular_dependency()

test_dependency_consumer_configuration()

test_dependency_injection()

test_dependency_provider_configuration()

test_inherited_dependency()

test_optional_and_required()

test_optional_dependency_not_provided()

test_optional_dependency_provided()

test_reset()

test_unresolvable_dependency()

test_ipv6 Module

class keystone.tests.test_ipv6.IPv6TestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

setUp()

test_ipv6_ok()

Make sure both public and admin API work with ipv6.

test_keystoneclient Module

class keystone.tests.test_keystoneclient.ClientDrivenTestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

get_client(user_ref=None, tenant_ref=None, admin=False)

setUp()

test_admin_requires_adminness()

test_authenticate_and_delete_token()

test_authenticate_disabled_tenant()

test_authenticate_invalid_tenant_id()

test_authenticate_no_password()

test_authenticate_no_username()

test_authenticate_tenant_id_and_tenants()

test_authenticate_tenant_name_and_tenants()

test_authenticate_token_invalid_tenant_id()

test_authenticate_token_invalid_tenant_name()

test_authenticate_token_no_tenant()

test_authenticate_token_tenant_id()

test_authenticate_token_tenant_name()

test_change_password_invalidates_token()

test_delete_tenant_invalidates_token()

test_delete_user_invalidates_token()

test_disable_tenant_invalidates_token()

test_disable_user_invalidates_token()

test_endpoint_delete_404()

test_invalid_password()

test_invalid_user_and_password()

test_role_create_no_name()

test_role_crud()

test_role_delete_404()

test_role_get()

test_role_get_404()

test_role_list()

test_role_list_404()

test_roles_get_by_user()

test_service_crud()

test_service_delete_404()

test_service_get_404()

test_tenant_add_and_remove_user()

test_tenant_create_no_name()

test_tenant_create_update_and_delete()

test_tenant_create_update_and_delete_unicode()

test_tenant_delete_404()

test_tenant_get_404()

test_tenant_list()

test_tenant_list_limit()

test_tenant_list_limit_bad_value()

test_tenant_list_marker()

test_tenant_list_marker_not_found()

test_tenant_update_404()

test_token_expiry_maintained(*args, **keywargs)

test_tokens_after_user_update_passwd()

test_update_default_tenant_to_existing_value()

test_user_can_update_passwd()

test_user_cannot_update_other_users_passwd()

test_user_change_own_password_invalidates_token()

test_user_create_404()

test_user_create_no_name()

test_user_create_no_string_password()

test_user_create_update_delete()

test_user_delete_404()

test_user_get()

test_user_get_404()

test_user_list()

test_user_list_404()

test_user_role_add_404()

test_user_role_add_no_user()

test_user_role_remove_404()

test_user_update_404()

test_user_update_password_404()

test_user_update_tenant()

test_keystoneclient_sql Module

class keystone.tests.test_keystoneclient_sql.ClientDrivenSqlTestCase(*args, **kwargs)

Bases: keystone.tests.test_keystoneclient.ClientDrivenTestCase

config_files()

setUp()

test_ec2_auth_failure()

test_ec2_auth_success()

test_ec2_auth_success_trust()

test_ec2_credential_crud()

test_ec2_credential_crud_non_admin()

test_ec2_credentials_create_404()

test_ec2_credentials_delete_404()

test_ec2_credentials_delete_user_forbidden()

test_ec2_credentials_get_404()

test_ec2_credentials_get_user_forbidden()

test_ec2_credentials_list_404()

test_ec2_credentials_list_user_forbidden()

test_ec2_list_credentials()

test_endpoint_create_404()

test_endpoint_crud()

test_endpoint_delete_404()

test_policy_crud()

test_kvs Module

class keystone.tests.test_kvs.KVSBackendFixture(arguments)

Bases: keystone.common.kvs.backends.inmemdb.MemoryBackend

get_mutex(key)

classmethod key_mangler(key)

class keystone.tests.test_kvs.KVSBackendForcedKeyMangleFixture(arguments)

Bases: keystone.tests.test_kvs.KVSBackendFixture

classmethod key_mangler(key)

use_backend_key_mangler = True

class keystone.tests.test_kvs.KVSTest(*args, **kwargs)

Bases: keystone.tests.core.TestCase

setUp()

test_kvs_backend_registration_does_not_reregister_backends()

test_kvs_basic_configuration()

test_kvs_basic_get_set_delete()

test_kvs_key_mangler_configuration_backend()

test_kvs_key_mangler_configuration_disabled()

test_kvs_key_mangler_configuration_forced_backend()

test_kvs_key_mangler_fallthrough_default()

test_kvs_key_mangler_set_on_backend()

test_kvs_locking_context_handler()

test_kvs_locking_context_handler_locking_disabled()

test_kvs_memcache_key_mangler_set_to_none()

test_kvs_memcache_manager_no_expiry_keys()

test_kvs_memcache_set_arguments_and_memcache_expires_ttl()

test_kvs_memcached_manager_invalid_dogpile_memcached_backend()

test_kvs_memcached_manager_valid_dogpile_memcached_backend()

test_kvs_multi_get_set_delete()

test_kvs_proxy_configuration()

test_kvs_with_lock_action_context_manager()

test_kvs_with_lock_action_context_manager_no_lock()

test_kvs_with_lock_action_context_manager_timeout()

test_kvs_with_lock_action_mismatched_keys()

test_memcached_lock_max_lock_attempts()

test_noncallable_key_mangler_set_on_driver_raises_type_error()

class keystone.tests.test_kvs.MutexFixture(storage_dict, key, timeout)

Bases: object

acquire(wait=True)

release()

class keystone.tests.test_kvs.RegionProxy2Fixture(*args, **kwargs)

Bases: dogpile.cache.proxy.ProxyBackend

A test dogpile.cache proxy that does nothing.

class keystone.tests.test_kvs.RegionProxyFixture(*args, **kwargs)

Bases: dogpile.cache.proxy.ProxyBackend

A test dogpile.cache proxy that does nothing.

class keystone.tests.test_kvs.TestMemcacheDriver(arguments)

Bases: dogpile.cache.api.CacheBackend

A test dogpile.cache backend that conforms to the mixin-mechanism for overriding set and set_multi methods on dogpile memcached drivers.

set(key, value)

set_multi(mapping)

class test_client

Bases: object

add(key, value, expiry_time)

delete(key)

set(key, value, **set_arguments)

set_multi(mapping, **set_arguments)

class keystone.tests.test_kvs.TestMemcachedBackend(*args, **kwargs)

Bases: keystone.tests.core.TestCase

test_invalid_backend_fails_initialization(*args, **keywargs)

test_ldap_livetest Module

class keystone.tests.test_ldap_livetest.LiveLDAPIdentity(*args, **kwargs)

Bases: keystone.tests.test_backend_ldap.LDAPIdentity

clear_database()

config_files()

config_overrides()

setUp()

tearDown()

test_base_ldap_connection_deref_option()

test_build_tree()

Regression test for building the tree names

test_create_project_case_sensitivity()

test_create_user_case_sensitivity()

test_ldap_dereferencing()

test_list_groups_for_user_filtered()

test_project_update_missing_attrs_with_a_falsey_value()

test_user_enable_attribute_mask()

keystone.tests.test_ldap_livetest.create_object(dn, attrs)

test_ldap_tls_livetest Module

class keystone.tests.test_ldap_tls_livetest.LiveTLSLDAPIdentity(*args, **kwargs)

Bases: keystone.tests.test_ldap_livetest.LiveLDAPIdentity

config_files()

config_overrides()

test_tls_bad_certdir()

test_tls_bad_certfile()

test_tls_certdir_demand_option()

test_tls_certfile_demand_option()

keystone.tests.test_ldap_tls_livetest.create_object(dn, attrs)

test_matchers Module

class keystone.tests.test_matchers.TestXMLEquals(*args, **kwargs)

Bases: keystone.tests.core.BaseTestCase, testtools.tests.matchers.helpers.TestMatchersInterface

describe_examples = [('expected =\n<test xmlns="http://docs.openstack.org/identity/api/v2.0">\n <first z="0" y="1" x="2"/>\n <second a="a" b="b"/>\n</test>\n\nactual =\n<test xmlns="http://docs.openstack.org/identity/api/v2.0">\n <nope_it_fails/>\n</test>\n', '<?xml version="1.0" encoding="UTF-8"?>\n<test xmlns="http://docs.openstack.org/identity/api/v2.0">\n <nope_it_fails/>\n</test>\n', <keystone.tests.matchers.XMLEquals object at 0x7f6ee335c4d0>)]

equivalent_xml = '<?xml version="1.0" encoding="UTF-8"?>\n<test xmlns="http://docs.openstack.org/identity/api/v2.0">\n <second a="a" b="b"/>\n <first z="0" y="1" x="2"></first>\n</test>\n'

matches_matcher = <keystone.tests.matchers.XMLEquals object at 0x7f6ee335c4d0>

matches_matches = ['<?xml version="1.0" encoding="UTF-8"?>\n<test xmlns="http://docs.openstack.org/identity/api/v2.0">\n <first z="0" y="1" x="2"/>\n <second a="a" b="b"></second>\n</test>\n', '<?xml version="1.0" encoding="UTF-8"?>\n<test xmlns="http://docs.openstack.org/identity/api/v2.0">\n <second a="a" b="b"/>\n <first z="0" y="1" x="2"></first>\n</test>\n']

matches_mismatches = ['<?xml version="1.0" encoding="UTF-8"?>\n<test xmlns="http://docs.openstack.org/identity/api/v2.0">\n <nope_it_fails/>\n</test>\n']

matches_xml = '<?xml version="1.0" encoding="UTF-8"?>\n<test xmlns="http://docs.openstack.org/identity/api/v2.0">\n <first z="0" y="1" x="2"/>\n <second a="a" b="b"></second>\n</test>\n'

mismatches_description = 'expected =\n<test xmlns="http://docs.openstack.org/identity/api/v2.0">\n <first z="0" y="1" x="2"/>\n <second a="a" b="b"/>\n</test>\n\nactual =\n<test xmlns="http://docs.openstack.org/identity/api/v2.0">\n <nope_it_fails/>\n</test>\n'

mismatches_xml = '<?xml version="1.0" encoding="UTF-8"?>\n<test xmlns="http://docs.openstack.org/identity/api/v2.0">\n <nope_it_fails/>\n</test>\n'

str_examples = [('XMLEquals(\'<?xml version="1.0" encoding="UTF-8"?>\\n<test xmlns="http://docs.openstack.org/identity/api/v2.0">\\n <first z="0" y="1" x="2"/>\\n <second a="a" b="b"></second>\\n</test>\\n\')', <keystone.tests.matchers.XMLEquals object at 0x7f6ee335c4d0>)]

test_middleware Module

class keystone.tests.test_middleware.AdminTokenAuthMiddlewareTest(*args, **kwargs)

Bases: keystone.tests.core.TestCase

test_request_admin()

test_request_non_admin()

class keystone.tests.test_middleware.JsonBodyMiddlewareTest(*args, **kwargs)

Bases: keystone.tests.core.TestCase

test_malformed_json()

test_no_content_type()

test_request_with_params()

test_unrecognized_content_type()

test_unrecognized_content_type_without_body()

class keystone.tests.test_middleware.PostParamsMiddlewareTest(*args, **kwargs)

Bases: keystone.tests.core.TestCase

test_request_with_params()

class keystone.tests.test_middleware.TokenAuthMiddlewareTest(*args, **kwargs)

Bases: keystone.tests.core.TestCase

test_request()

class keystone.tests.test_middleware.XmlBodyMiddlewareTest(*args, **kwargs)

Bases: keystone.tests.core.TestCase

test_client_fails_to_specify_accept()

If client does not specify an Accept header, default to JSON.

test_client_wants_json_back()

Clients requesting JSON should definitely not get XML back.

test_client_wants_xml_back()

Clients requesting XML should get what they ask for.

test_json_unnaffected()

JSON-only requests should be unaffected by the XML middleware.

test_xml_replaced_by_json()

XML requests should be replaced by JSON requests.

keystone.tests.test_middleware.make_request(**kwargs)

keystone.tests.test_middleware.make_response(**kwargs)

test_no_admin_token_auth Module

class keystone.tests.test_no_admin_token_auth.TestNoAdminTokenAuth(*args, **kwargs)

Bases: keystone.tests.core.TestCase

setUp()

test_request_no_admin_token_auth()

test_notifications Module

exception keystone.tests.test_notifications.ArbitraryException

Bases: exceptions.Exception

class keystone.tests.test_notifications.CadfNotificationsWrapperTestCase(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

ACTION = 'authenticate'

LOCAL_HOST = 'localhost'

setUp()

test_v3_authenticate_user_id()

test_v3_authenticate_user_name_and_domain_id()

test_v3_authenticate_user_name_and_domain_name()

class keystone.tests.test_notifications.NotificationsForEntities(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

setUp()

test_create_group()

test_create_project()

test_create_role()

test_create_trust()

test_create_user()

test_delete_domain()

test_delete_group()

test_delete_project()

test_delete_role()

test_delete_trust()

test_delete_user()

test_disable_domain()

test_disable_project()

test_update_domain()

test_update_group()

test_update_project()

test_update_project_does_not_send_disable()

test_update_role()

test_update_user()

class keystone.tests.test_notifications.NotificationsTestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

setUp()

test_send_notification()

Test the private method _send_notification to ensure event_type, payload, and context are built and passed properly.

class keystone.tests.test_notifications.NotificationsWrapperTestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

create_exception(*args, **kwargs)

Send a notification if the wrapped callable is successful.

create_resource(*args, **kwargs)

Send a notification if the wrapped callable is successful.

delete_exception(*args, **kwargs)

Send a notification if the wrapped callable is successful.

delete_resource(*args, **kwargs)

Send a notification if the wrapped callable is successful.

setUp()

test_create_exception_without_notification()

test_delete_exception_without_notification()

test_resource_created_notification()

test_resource_deleted_notification()

test_resource_updated_notification()

test_update_exception_without_notification()

update_exception(*args, **kwargs)

Send a notification if the wrapped callable is successful.

update_resource(*args, **kwargs)

Send a notification if the wrapped callable is successful.

class keystone.tests.test_notifications.TestEventCallbacks(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

setUp()

test_event_registration_for_unknown_resource_type()

test_invalid_event_callbacks()

test_invalid_event_callbacks_event()

test_notification_event_not_valid()

test_notification_method_not_callable()

test_notification_received()

test_provider_event_callbacks_subscription()

test_pemutils Module

class keystone.tests.test_pemutils.PEM(pem_header='CERTIFICATE', pem_type='cert', data_size=70, data_offset=0)

Bases: object

PEM text and it’s associated data broken out, used for testing.

class keystone.tests.test_pemutils.TestPEMParse(*args, **kwargs)

Bases: keystone.tests.core.TestCase

test_base64_to_pem()

test_binary_to_pem()

test_get_pem_data()

test_get_pem_data_invalid()

test_get_pem_data_none()

test_is_pem()

test_parse_invalid()

test_parse_multple()

test_parse_multple_embedded()

test_parse_multple_find_specific()

test_parse_none()

test_parse_one()

test_parse_one_embedded()

class keystone.tests.test_pemutils.TestPEMParseResult(*args, **kwargs)

Bases: keystone.tests.core.TestCase

test_pem_headers()

test_pem_types()

keystone.tests.test_pemutils.make_base64_from_data(data)

keystone.tests.test_pemutils.make_data(size, offset=0)

keystone.tests.test_pemutils.make_pem(header, data)

keystone.tests.test_pemutils.wrap_base64(base64_text)

test_policy Module

class keystone.tests.test_policy.DefaultPolicyTestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

setUp()

test_default_not_found()

test_not_found_policy_calls_default()

test_policy_called()

class keystone.tests.test_policy.PolicyFileTestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

config_overrides()

setUp()

test_modified_policy_reloads()

class keystone.tests.test_policy.PolicyJsonTestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

test_json_examples_have_matching_entries()

class keystone.tests.test_policy.PolicyTestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

setUp()

test_early_AND_enforcement()

test_early_OR_enforcement()

test_enforce_bad_action_throws()

test_enforce_good_action()

test_enforce_http_false()

test_enforce_http_true()

test_enforce_nonexistent_action_throws()

test_ignore_case_role_check()

test_templatized_enforcement()

test_revoke Module

class keystone.tests.test_revoke.KvsRevokeTests(*args, **kwargs)

Bases: keystone.tests.core.TestCase, keystone.tests.test_revoke.RevokeTests

config_overrides()

setUp()

class keystone.tests.test_revoke.RevokeTests(*args, **kwargs)

Bases: object

test_expired_events_removed_validate_token_success(*args, **keywargs)

test_list()

test_list_since()

test_past_expiry_are_removed()

test_revoke_by_expiration_project_and_domain_fails()

class keystone.tests.test_revoke.RevokeTreeTests(*args, **kwargs)

Bases: keystone.tests.core.TestCase

removeEvent(event)

setUp()

test_by_domain_domain()

test_by_domain_project()

test_by_domain_user()

test_by_project_and_user_and_role()

test_by_project_grant()

test_by_user_domain()

test_by_user_expiration()

test_by_user_project()

test_cleanup()

test_revoke_by_user()

test_revoke_by_user_matches_trustee()

test_revoke_by_user_matches_trustor()

class keystone.tests.test_revoke.SqlRevokeTests(*args, **kwargs)

Bases: keystone.tests.test_backend_sql.SqlTests, keystone.tests.test_revoke.RevokeTests

config_overrides()

test_s3_token_middleware Module

class keystone.tests.test_s3_token_middleware.S3TokenMiddlewareTestBase(*args, **kwargs)

Bases: testtools.testcase.TestCase

test_symbols()

Verify s3_token middleware symbols.

Verify that the keystone version of s3_token middleware forwards the public symbols from the keystoneclient version of the s3_token middleware for backwards compatibility.

test_serializer Module

class keystone.tests.test_serializer.XmlSerializerTestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

assertSerializeDeserialize(d, xml, xmlns=None)

test_auth_request()

test_collection_list()

test_collection_member()

test_policy_list()

test_role_crud()

test_service_crud()

test_tenant_crud()

test_tenant_crud_no_description()

test_v2_links_special_case()

test_values_list()

test_xml_with_namespaced_attribute_to_dict()

test_singular_plural Module

class keystone.tests.test_singular_plural.TestSingularPlural

Bases: object

test_keyword_arg_condition_or_methods()

Raise if we see a keyword arg called ‘condition’ or ‘methods’.

test_sizelimit Module

class keystone.tests.test_sizelimit.TestRequestBodySizeLimiter(*args, **kwargs)

Bases: keystone.tests.core.TestCase

setUp()

test_content_length_acceptable()

test_content_length_too_large()

test_request_too_large_no_content_length()

test_sql_livetest Module

class keystone.tests.test_sql_livetest.Db2MigrateTests(*args, **kwargs)

Bases: keystone.tests.test_sql_upgrade.SqlUpgradeTests

config_files()

setUp()

class keystone.tests.test_sql_livetest.MysqlMigrateTests(*args, **kwargs)

Bases: keystone.tests.test_sql_upgrade.SqlUpgradeTests

config_files()

setUp()

class keystone.tests.test_sql_livetest.MysqlRevokeExtensionsTests(*args, **kwargs)

Bases: keystone.tests.test_sql_migrate_extensions.RevokeExtension

config_files()

setUp()

class keystone.tests.test_sql_livetest.PostgresqlMigrateTests(*args, **kwargs)

Bases: keystone.tests.test_sql_upgrade.SqlUpgradeTests

config_files()

setUp()

class keystone.tests.test_sql_livetest.PostgresqlRevokeExtensionsTests(*args, **kwargs)

Bases: keystone.tests.test_sql_migrate_extensions.RevokeExtension

config_files()

setUp()

test_sql_migrate_extensions Module

To run these tests against a live database:

1. Modify the file tests/backend_sql.conf to use the connection for your live database

2. Set up a blank, live database.

3. run the tests using

   ./run_tests.sh -N  test_sql_upgrade

   WARNING:

   Your database will be wiped.

   Do not do this against a Database with valuable data as all data will be lost.

class keystone.tests.test_sql_migrate_extensions.EndpointFilterExtension(*args, **kwargs)

Bases: keystone.tests.test_sql_upgrade.SqlMigrateBase

repo_package()

test_downgrade()

test_upgrade()

class keystone.tests.test_sql_migrate_extensions.FederationExtension(*args, **kwargs)

Bases: keystone.tests.test_sql_upgrade.SqlMigrateBase

Test class for ensuring the Federation SQL.

repo_package()

setUp()

test_downgrade()

test_upgrade()

class keystone.tests.test_sql_migrate_extensions.RevokeExtension(*args, **kwargs)

Bases: keystone.tests.test_sql_upgrade.SqlMigrateBase

repo_package()

test_downgrade()

test_upgrade()

class keystone.tests.test_sql_migrate_extensions.SqlUpgradeExampleExtension(*args, **kwargs)

Bases: keystone.tests.test_sql_upgrade.SqlMigrateBase

repo_package()

test_downgrade()

test_upgrade()

class keystone.tests.test_sql_migrate_extensions.SqlUpgradeOAuth1Extension(*args, **kwargs)

Bases: keystone.tests.test_sql_upgrade.SqlMigrateBase

repo_package()

test_downgrade()

test_upgrade()

test_sql_upgrade Module

To run these tests against a live database:

1. Modify the file keystone/tests/backend_sql.conf to use the connection for your live database

2. Set up a blank, live database

3. Run the tests using:

   tox keystone.tests.test_sql_upgrade

WARNING:

Your database will be wiped.

Do not do this against a database with valuable data as all data will be
lost.

class keystone.tests.test_sql_upgrade.SqlMigrateBase(*args, **kwargs)

Bases: keystone.tests.core.SQLDriverOverrides, keystone.tests.core.TestCase

assertTableColumns(table_name, expected_cols)

Asserts that the table contains the expected set of columns.

assertTableDoesNotExist(table_name)

Asserts that a given table exists cannot be selected by name.

assertTableExists(table_name)

config_files()

downgrade(*args, **kwargs)

initialize_sql()

repo_package()

select_table(name)

setUp()

tearDown()

upgrade(*args, **kwargs)

class keystone.tests.test_sql_upgrade.SqlUpgradeTests(*args, **kwargs)

Bases: keystone.tests.test_sql_upgrade.SqlMigrateBase

assertProjectTables()

assertTenantTables()

check_uniqueness_constraints()

insert_dict(session, table_name, d, table=None)

Naively inserts key-value pairs into a table, given a dictionary.

populate_tenant_table(with_desc_enab=False, with_desc_enab_domain=False)

populate_user_table(with_pass_enab=False, with_pass_enab_domain=False)

test_assignment_metadata_migration()

test_assignment_table_migration()

test_blank_db_to_start()

test_downgrade_10_to_8()

test_downgrade_16_to_14()

test_downgrade_30()

test_downgrade_32_to_31()

test_downgrade_endpoint_enabled_cols()

Check columns when downgrade from migration 41.

The downgrade from migration 42 removes the enabled column from the endpoint table.

test_downgrade_endpoint_enabled_data()

Downgrade from migration 42 migrates data.

Downgrade from migration 42 migrates data from enabled to extra. Any disabled endpoints have ‘enabled’: False put into ‘extra’.

test_downgrade_endpoints()

test_downgrade_project_to_tenant()

test_downgrade_remove_group_tables()

test_downgrade_service_enabled_cols()

Check columns when downgrade to migration 43.

The downgrade from migration 44 removes the enabled column from the service table.

test_downgrade_service_enabled_data()

Downgrade from migration 44 migrates data.

Downgrade from migration 44 migrates data from enabled to extra. Any disabled services have ‘enabled’: False put into ‘extra’.

test_downgrade_to_0()

test_drop_credential_constraint()

test_drop_credential_indexes()

test_dropped_valid_index()

test_fixup_role()

test_group_project_FK_fixup()

test_legacy_endpoint_id()

test_limited_trusts_downgrade()

test_limited_trusts_downgrade_trusts_cleanup()

test_limited_trusts_upgrade()

test_metadata_table_migration()

test_migrate_add_default_project_id_column_downgrade()

test_migrate_add_default_project_id_column_upgrade()

test_migrate_ec2_credential()

test_migrate_ec2_credential_with_conflict_project()

test_migrate_ec2_credential_with_conflict_secret()

test_migrate_ec2_credential_with_invalid_blob()

test_normalized_enabled_states()

test_region_migration()

test_revoked_token_index()

test_start_version_0()

test_two_steps_forward_one_step_back()

You should be able to cleanly undo and re-apply all upgrades.

Upgrades are run in the following order:

0 -> 1 -> 0 -> 1 -> 2 -> 1 -> 2 -> 3 -> 2 -> 3 ...
     ^---------^    ^---------^    ^---------^

test_upgrade_14_to_16()

test_upgrade_31_to_32()

test_upgrade_add_domain_tables()

test_upgrade_add_group_tables()

test_upgrade_add_initial_tables()

test_upgrade_add_policy()

test_upgrade_default_roles()

test_upgrade_endpoint_enabled_cols()

Migration 42 added enabled column to endpoint table.

test_upgrade_endpoint_enabled_data()

Migration 42 has to migrate data from extra to enabled.

test_upgrade_endpoints()

test_upgrade_normalize_identity()

test_upgrade_region_non_unique_description()

Test upgrade to migration 43.

This migration should occur with no unique constraint on the region description column.

Create two regions with the same description.

test_upgrade_region_unique_description()

Test upgrade to migration 43.

This test models a migration where there is a unique constraint on the description column.

Create two regions with the same description.

test_upgrade_service_enabled_cols()

Migration 44 added enabled column to service table.

test_upgrade_service_enabled_data()

Migration 44 has to migrate data from extra to enabled.

test_upgrade_tenant_to_project()

test_upgrade_trusts()

test_upgrade_user_tenant_membership_to_metadata()

class keystone.tests.test_sql_upgrade.VersionTests(*args, **kwargs)

Bases: keystone.tests.test_sql_upgrade.SqlMigrateBase

test_core_initial()

When get the version before migrated, it’s 0.

test_core_max()

When get the version after upgrading, it’s the new version.

test_extension_initial()

When get the initial version of an extension, it’s 0.

test_extension_migrated()

When get the version after migrating an extension, it’s not 0.

test_extension_not_controlled()

When get the version before controlling, raises DbMigrationError.

test_unexpected_extension()

The version for an extension that doesn’t exist raises ImportError.

test_unversioned_extension()

The version for extensions without migrations raise an exception.

test_ssl Module

class keystone.tests.test_ssl.SSLTestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

setUp()

test_1way_ssl_ok()

Make sure both public and admin API work with 1-way SSL.

test_1way_ssl_with_ipv6_ok()

Make sure both public and admin API work with 1-way ipv6 & SSL.

test_2way_ssl_fail()

Expect to fail when client does not present proper certificate.

test_2way_ssl_ok()

Make sure both public and admin API work with 2-way SSL.

Requires client certificate.

test_2way_ssl_with_ipv6_ok()

Make sure both public and admin API work with 2-way ipv6 & SSL.

Requires client certificate.

test_token_bind Module

class keystone.tests.test_token_bind.BindTest(*args, **kwargs)

Bases: keystone.tests.core.TestCase

Test binding tokens to a Principal.

Even though everything in this file references kerberos the same concepts will apply to all future binding mechanisms.

assert_kerberos_bind(tokens, bind_level, use_kerberos=True, success=True)

test_bind_disabled_with_kerb_user()

test_bind_named_with_kerb_user()

test_bind_named_with_regular_token()

test_bind_named_with_unknown_bind()

test_bind_named_with_unknown_scheme()

test_bind_named_without_kerb_user()

test_bind_permissive_with_kerb_user()

test_bind_permissive_with_regular_token()

test_bind_permissive_with_unknown_bind()

test_bind_permissive_without_kerb_user()

test_bind_required_with_kerb_user()

test_bind_required_with_regular_token()

test_bind_required_with_unknown_bind()

test_bind_required_without_kerb_user()

test_bind_strict_with_kerb_user()

test_bind_strict_with_regular_token()

test_bind_strict_with_unknown_bind()

test_bind_strict_without_kerb_user()

test_token_provider Module

class keystone.tests.test_token_provider.TestPKIProvider

Bases: object

setUp()

test_get_token_id_error_handling()

class keystone.tests.test_token_provider.TestPKIProviderWithEventlet(*args, **kwargs)

Bases: keystone.tests.test_token_provider.TestPKIProvider, keystone.tests.core.TestCase

setUp()

class keystone.tests.test_token_provider.TestPKIProviderWithStdlib(*args, **kwargs)

Bases: keystone.tests.test_token_provider.TestPKIProvider, keystone.tests.core.TestCase

setUp()

class keystone.tests.test_token_provider.TestTokenProvider(*args, **kwargs)

Bases: keystone.tests.core.TestCase

setUp()

test_default_providers_without_token_format()

test_default_token_format()

test_get_token_version()

test_provider_override_token_format()

test_provider_token_expiration_validation()

test_token_format_provider_mismatch()

test_unsupported_token_format()

test_uuid_provider()

test_uuid_token_format_and_no_provider()

class keystone.tests.test_token_provider.TestTokenProviderOAuth1(*args, **kwargs)

Bases: keystone.tests.core.TestCase

config_overrides()

setUp()

test_uuid_provider_no_oauth_fails_oauth()

keystone.tests.test_token_provider.create_v2_token()

keystone.tests.test_token_provider.create_v3_token()

test_url_middleware Module

class keystone.tests.test_url_middleware.FakeApp

Bases: object

Fakes a WSGI app URL normalized.

class keystone.tests.test_url_middleware.UrlMiddlewareTest(*args, **kwargs)

Bases: keystone.tests.core.TestCase

setUp()

start_fake_response(status, headers)

test_rewrite_empty_path()

Tests empty path is rewritten to root.

test_trailing_slash_normalization()

Tests /v2.0/tokens and /v2.0/tokens/ normalized URLs match.

test_utils Module

class keystone.tests.test_utils.LimitingReaderTests(*args, **kwargs)

Bases: keystone.tests.core.TestCase

test_read_default_value()

class keystone.tests.test_utils.ServiceHelperTests(*args, **kwargs)

Bases: keystone.tests.core.TestCase

test_fail_gracefully()

class keystone.tests.test_utils.UtilsTestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

OPTIONAL = <object object at 0x7f6ee8701600>

test_auth_str_equal()

test_hash()

test_hash_edge_cases()

test_hash_ldap_user_password_with_empty_password()

test_hash_ldap_user_password_with_null_password()

test_hash_ldap_user_password_without_password()

test_hash_long_password()

test_hash_unicode()

test_hash_user_password_with_empty_password()

test_hash_user_password_with_null_password()

test_hash_user_password_without_password()

test_unixtime()

keystone.tests.test_utils.timezone(func)

test_v2_controller Module

class keystone.tests.test_v2_controller.TenantTestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

Tests for the V2 Tenant controller.

These tests exercise keystone.assignment.controllers.Tenant.

setUp()

test_get_project_users_no_user()

get_project_users when user doesn’t exist.

When a user that’s not known to identity has a role on a project, then get_project_users just skips that user.

test_list_projects_default_domain()

Test that list projects only returns those in the default domain.

test_v3 Module

class keystone.tests.test_v3.AuthContextMiddlewareTestCase(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

test_admin_token_auth_context()

test_auth_context_build_by_middleware()

test_auth_context_override()

class keystone.tests.test_v3.RestfulTestCase(*args, **kwargs)

Bases: keystone.tests.core.SQLDriverOverrides, keystone.tests.rest.RestfulTestCase

admin_request(*args, **kwargs)

Translates XML responses to dicts.

This implies that we only have to write assertions for JSON.

assertEqualTokens(a, b)

Assert that two tokens are equal.

Compare two tokens except for their ids. This also truncates the time in the comparison.

assertRoleAssignmentInListResponse(resp, ref, link_url=None, expected=1)

assertRoleAssignmentNotInListResponse(resp, ref, link_url=None)

assertValidCredential(entity, ref=None)

assertValidCredentialListResponse(resp, *args, **kwargs)

assertValidCredentialResponse(resp, *args, **kwargs)

assertValidDomain(entity, ref=None)

assertValidDomainListResponse(resp, *args, **kwargs)

assertValidDomainResponse(resp, *args, **kwargs)

assertValidDomainScopedTokenResponse(r, *args, **kwargs)

assertValidEndpoint(entity, ref=None)

assertValidEndpointListResponse(resp, *args, **kwargs)

assertValidEndpointResponse(resp, *args, **kwargs)

assertValidEntity(entity, ref=None, keys_to_check=None)

Make assertions common to all API entities.

If a reference is provided, the entity will also be compared against the reference.

assertValidErrorResponse(r)

assertValidGroup(entity, ref=None)

assertValidGroupListResponse(resp, *args, **kwargs)

assertValidGroupResponse(resp, *args, **kwargs)

assertValidISO8601ExtendedFormatDatetime(dt)

assertValidListLinks(links)

assertValidListResponse(resp, key, entity_validator, ref=None, expected_length=None, keys_to_check=None)

Make assertions common to all API list responses.

If a reference is provided, it’s ID will be searched for in the response, and asserted to be equal.

assertValidPolicy(entity, ref=None)

assertValidPolicyListResponse(resp, *args, **kwargs)

assertValidPolicyResponse(resp, *args, **kwargs)

assertValidProject(entity, ref=None)

assertValidProjectListResponse(resp, *args, **kwargs)

assertValidProjectResponse(resp, *args, **kwargs)

assertValidProjectScopedTokenResponse(r, *args, **kwargs)

assertValidProjectTrustScopedTokenResponse(r, *args, **kwargs)

assertValidRegion(entity, ref=None)

assertValidRegionListResponse(resp, *args, **kwargs)

assertValidRegionResponse(resp, *args, **kwargs)

assertValidResponse(resp, key, entity_validator, *args, **kwargs)

Make assertions common to all API responses.

assertValidRole(entity, ref=None)

assertValidRoleAssignment(entity, ref=None, url=None)

assertValidRoleAssignmentListResponse(resp, ref=None, expected_length=None)

assertValidRoleListResponse(resp, *args, **kwargs)

assertValidRoleResponse(resp, *args, **kwargs)

assertValidScopedTokenResponse(r, *args, **kwargs)

assertValidService(entity, ref=None)

assertValidServiceListResponse(resp, *args, **kwargs)

assertValidServiceResponse(resp, *args, **kwargs)

assertValidTokenResponse(r, user=None)

assertValidTrust(entity, ref=None, summary=False)

assertValidTrustListResponse(resp, *args, **kwargs)

assertValidTrustResponse(resp, *args, **kwargs)

assertValidTrustSummary(entity, ref=None)

assertValidUnscopedTokenResponse(r, *args, **kwargs)

assertValidUser(entity, ref=None)

assertValidUserListResponse(resp, *args, **kwargs)

assertValidUserResponse(resp, *args, **kwargs)

build_auth_scope(project_id=None, project_name=None, project_domain_id=None, project_domain_name=None, domain_id=None, domain_name=None, trust_id=None)

build_authentication_request(token=None, user_id=None, username=None, user_domain_id=None, user_domain_name=None, password=None, **kwargs)

Build auth dictionary.

It will create an auth dictionary based on all the arguments that it receives.

build_external_auth_request(remote_user, remote_domain=None, auth_data=None)

build_password_auth(user_id=None, username=None, user_domain_id=None, user_domain_name=None, password=None)

build_token_auth(token)

config_files()

create_new_default_project_for_user(user_id, domain_id, enable_project=True)

delete(path, **kwargs)

generate_paste_config()

get(path, **kwargs)

get_requested_token(auth)

Request the specific token we want.

get_scoped_token()

Convenience method so that we can test authenticated requests.

head(path, **kwargs)

load_backends()

load_fixtures(fixtures)

load_sample_data()

new_credential_ref(user_id, project_id=None)

new_domain_ref()

new_endpoint_ref(service_id, **kwargs)

new_group_ref(domain_id)

new_policy_ref()

new_project_ref(domain_id)

new_ref()

Populates a ref with attributes common to all API entities.

new_region_ref()

new_role_ref()

new_service_ref()

new_trust_ref(trustor_user_id, trustee_user_id, project_id=None, impersonation=None, expires=None, role_ids=None, role_names=None, remaining_uses=None)

new_user_ref(domain_id, project_id=None)

patch(path, **kwargs)

post(path, **kwargs)

put(path, **kwargs)

remove_generated_paste_config()

setUp(app_conf='keystone')

Setup for v3 Restful Test Cases.

setup_database()

teardown_database()

v3_authenticate_token(auth, expected_status=201)

v3_request(path, **kwargs)

class keystone.tests.test_v3.VersionTestCase(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

test_get_version()

test_v3_auth Module

class keystone.tests.test_v3_auth.TestAPIProtectionWithoutAuthContextMiddleware(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

test_api_protection_with_no_auth_context_in_env()

class keystone.tests.test_v3_auth.TestAuthExternalDisabled(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

config_overrides()

test_remote_user_disabled()

class keystone.tests.test_v3_auth.TestAuthExternalDomain(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

config_overrides()

content_type = 'json'

test_project_id_scoped_with_remote_user()

test_remote_user_with_realm()

test_unscoped_bind_with_remote_user()

class keystone.tests.test_v3_auth.TestAuthExternalLegacyDefaultDomain(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

config_overrides()

content_type = 'json'

test_remote_user_no_domain()

test_remote_user_no_realm()

class keystone.tests.test_v3_auth.TestAuthExternalLegacyDomain(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

config_overrides()

content_type = 'json'

test_project_id_scoped_with_remote_user()

test_remote_user_with_realm()

test_unscoped_bind_with_remote_user()

class keystone.tests.test_v3_auth.TestAuthInfo(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

test_both_project_and_domain_in_scope()

test_get_method_data_invalid_method()

test_get_method_names_duplicates()

test_missing_auth_method_data()

test_missing_auth_methods()

test_project_name_no_domain()

test_unsupported_auth_method()

class keystone.tests.test_v3_auth.TestAuthJSON(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

content_type = 'json'

get_v2_token(tenant_id=None)

test_auth_catalog_disabled_endpoint()

On authenticate, get a catalog that excludes disabled endpoints.

test_auth_catalog_disabled_service()

On authenticate, get a catalog that excludes disabled services.

test_auth_with_bind_token()

test_auth_with_id()

test_authenticating_a_user_with_no_password()

test_bind_not_set_with_remote_user()

test_default_project_id_scoped_token_with_user_id()

test_default_project_id_scoped_token_with_user_id_no_catalog()

test_disabled_default_project_domain_result_in_unscoped_token()

test_disabled_default_project_result_in_unscoped_token()

test_disabled_scope_project_domain_result_in_401()

test_domain_id_scoped_token_with_user_domain_id()

test_domain_id_scoped_token_with_user_domain_name()

test_domain_id_scoped_token_with_user_id()

test_domain_name_scoped_token_with_user_domain_id()

test_domain_name_scoped_token_with_user_domain_name()

test_domain_name_scoped_token_with_user_id()

test_domain_scope_failed()

test_domain_scope_token_with_group_role()

test_domain_scope_token_with_name()

test_implicit_project_id_scoped_token_with_user_id_no_catalog()

test_invalid_domain_id()

test_invalid_domain_name()

test_invalid_password()

test_invalid_user_id()

test_invalid_user_name()

test_no_access_to_default_project_result_in_unscoped_token()

test_project_id_scoped_token_with_user_domain_id()

test_project_id_scoped_token_with_user_domain_name()

test_project_id_scoped_token_with_user_id()

test_project_id_scoped_token_with_user_id_401()

test_remote_user_and_explicit_external()

test_remote_user_and_password()

test_remote_user_bad_password()

test_remote_user_no_domain()

test_remote_user_no_realm()

test_unscoped_token_with_user_domain_id()

test_unscoped_token_with_user_domain_name()

test_unscoped_token_with_user_id()

test_user_and_group_roles_scoped_token()

Test correct roles are returned in scoped token.

Test Plan:

• Create a domain, with 1 project, 2 users (user1 and user2) and 2 groups (group1 and group2)
• Make user1 a member of group1, user2 a member of group2
• Create 8 roles, assigning them to each of the 8 combinations of users/groups on domain/project
• Get a project scoped token for user1, checking that the right two roles are returned (one directly assigned, one by virtue of group membership)
• Repeat this for a domain scoped token
• Make user1 also a member of group2
• Get another scoped token making sure the additional role shows up
• User2 is just here as a spoiler, to make sure we don’t get any roles uniquely assigned to it returned in any of our tokens

test_v2_v3_bind_token_intermix()

test_validate_v2_scoped_token_with_v3_api()

test_validate_v2_unscoped_token_with_v3_api()

test_verify_with_bound_token()

class keystone.tests.test_v3_auth.TestAuthXML(*args, **kwargs)

Bases: keystone.tests.test_v3_auth.TestAuthJSON

content_type = 'xml'

class keystone.tests.test_v3_auth.TestPKITokenAPIs(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase, keystone.tests.test_v3_auth.TokenAPITests

config_overrides()

setUp()

class keystone.tests.test_v3_auth.TestTokenRevokeApi(*args, **kwargs)

Bases: keystone.tests.test_v3_auth.TestTokenRevokeById

EXTENSION_NAME = 'revoke'

EXTENSION_TO_ADD = 'revoke_extension'

Test token revocation on the v3 Identity API.

assertDomainInList(events_response, domain_id)

assertUserAndExpiryInList(events, user_id, expires_at)

assertValidDeletedProjectResponse(events_response, project_id)

assertValidRevokedTokenResponse(events_response, user_id, project_id=None)

config_overrides()

test_disable_domain_shows_in_event_list()

test_list_delete_project_shows_in_event_list()

test_list_delete_token_shows_in_event_list()

test_list_with_filter()

test_revoke_by_id_false_410()

test_revoke_token()

test_revoke_v2_token()

class keystone.tests.test_v3_auth.TestTokenRevokeById(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

Test token revocation on the v3 Identity API.

config_overrides()

get_v2_token(token=None, project_id=None)

role_data_fixtures()

setUp()

Setup for Token Revoking Test Cases.

As well as the usual housekeeping, create a set of domains, users, groups, roles and projects for the subsequent tests:

• Two domains: A & B
• Three users (1, 2 and 3)
• Three groups (1, 2 and 3)
• Two roles (1 and 2)
• DomainA owns user1, domainB owns user2 and user3
• DomainA owns group1 and group2, domainB owns group3
• User1 and user2 are members of group1
• User3 is a member of group2
• Two projects: A & B, both in domainA
• Group1 has role1 on Project A and B, meaning that user1 and user2 will get these roles by virtue of membership
• User1, 2 and 3 have role1 assigned to projectA
• Group1 has role1 on Project A and B, meaning that user1 and user2 will get role1 (duplicated) by virtue of membership
• User1 has role2 assigned to domainA

test_deleting_group_grant_revokes_tokens()

Test deleting a group grant revokes tokens.

Test Plan:

• Get a token for user1, scoped to ProjectA
• Get a token for user2, scoped to ProjectA
• Get a token for user3, scoped to ProjectA
• Delete the grant group1 has on ProjectA
• Check tokens for user1 & user2 are no longer valid, since user1 and user2 are members of group1
• Check token for user3 is still valid

test_deleting_project_deletes_grants()

test_deleting_project_revokes_token()

test_deleting_role_revokes_token()

Test deleting a role revokes token.

Add some additional test data, namely:

• A third project (project C)
• Three additional users - user4 owned by domainB and user5 and 6 owned by domainA (different domain ownership should not affect the test results, just provided to broaden test coverage)
• User5 is a member of group1
• Group1 gets an additional assignment - role1 on projectB as well as its existing role1 on projectA
• User4 has role2 on Project C
• User6 has role1 on projectA and domainA
• This allows us to create 5 tokens by virtue of different types of role assignment: - user1, scoped to ProjectA by virtue of user role1 assignment - user5, scoped to ProjectB by virtue of group role1 assignment - user4, scoped to ProjectC by virtue of user role2 assignment - user6, scoped to ProjectA by virtue of user role1 assignment - user6, scoped to DomainA by virtue of user role1 assignment
• role1 is then deleted
• Check the tokens on Project A and B, and DomainA are revoked, but not the one for Project C

test_deleting_user_grant_revokes_token()

Test deleting a user grant revokes token.

Test Plan:

• Get a token for user1, scoped to ProjectA
• Delete the grant user1 has on ProjectA
• Check token is no longer valid

test_disabling_project_revokes_token()

test_domain_group_role_assignment_maintains_token()

Test domain-group role assignment maintains existing token.

Test Plan:

• Get a token for user1, scoped to ProjectA
• Create a grant for group1 on DomainB
• Check token is still longer valid

test_domain_user_role_assignment_maintains_token()

Test user-domain role assignment maintains existing token.

Test Plan:

• Get a token for user1, scoped to ProjectA
• Create a grant for user1 on DomainB
• Check token is still valid

test_group_membership_changes_revokes_token()

Test add/removal to/from group revokes token.

Test Plan:

• Get a token for user1, scoped to ProjectA
• Get a token for user2, scoped to ProjectA
• Remove user1 from group1
• Check token for user1 is no longer valid
• Check token for user2 is still valid, even though user2 is also part of group1
• Add user2 to group2
• Check token for user2 is now no longer valid

test_removing_role_assignment_does_not_affect_other_users()

Revoking a role from one user should not affect other users.

test_revoke_token_from_token()

test_revoke_token_from_token_v2()

test_revoke_v2_token_no_check()

test_unscoped_token_remains_valid_after_role_assignment()

class keystone.tests.test_v3_auth.TestTokenRevokeSelfAndAdmin(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

Test token revoke using v3 Identity API by token owner and admin.

config_overrides()

setUp()

Setup for Test Cases. Two domains, domainA and domainB Two users in domainA, userNormalA and userAdminA One user in domainB, userAdminB

test_adminA_revokes_userA_token()

test_adminB_fails_revoking_userA_token()

test_user_revokes_own_token()

class keystone.tests.test_v3_auth.TestTrustAuth(*args, **kwargs)

Bases: keystone.tests.test_v3_auth.TestAuthInfo

EXTENSION_NAME = 'revoke'

EXTENSION_TO_ADD = 'revoke_extension'

assertTrustTokensRevoked(trust_id)

config_overrides()

setUp()

test_change_password_invalidates_trust_tokens()

test_consume_trust_once()

test_create_expired_trust()

test_create_one_time_use_trust()

test_create_trust_400()

test_create_trust_no_roles()

test_create_trust_project_404()

test_create_trust_role_id_404()

test_create_trust_role_name_404()

test_create_trust_trustee_404()

test_create_trust_trustor_trustee_backwards()

test_create_trust_with_bad_values_for_remaining_uses()

test_create_unlimited_use_trust()

test_create_unscoped_trust()

test_delete_trust()

test_delete_trust_revokes_tokens()

test_exercise_trust_scoped_token_with_impersonation()

test_exercise_trust_scoped_token_without_impersonation()

test_impersonation_token_cannot_create_new_trust()

test_list_trusts()

test_trust_crud()

test_trustee_can_do_role_ops()

test_v3_v2_intermix()

test_v3_v2_intermix_project_not_in_default_domaini_failed()

test_v3_v2_intermix_trustor_not_in_default_domain_failed()

test_v3_v2_intermix_trustor_not_in_default_domaini_failed()

class keystone.tests.test_v3_auth.TestTrustOptional(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

config_overrides()

test_auth_with_scope_in_trust_403()

test_trusts_404()

class keystone.tests.test_v3_auth.TestUUIDTokenAPIs(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase, keystone.tests.test_v3_auth.TokenAPITests

config_overrides()

setUp()

test_v3_token_id()

test_v3_v2_hashed_pki_token_intermix()

class keystone.tests.test_v3_auth.TokenAPITests

Bases: object

doSetUp()

test_check_token()

test_default_fixture_scope_token()

test_rescoping_token()

test_v2_v3_token_intermix()

test_v2_v3_unscoped_token_intermix()

test_v3_token_id()

test_v3_v2_hashed_pki_token_intermix()

test_v3_v2_intermix_domain_scoped_token_failed()

test_v3_v2_intermix_new_default_domain()

test_v3_v2_intermix_non_default_domain_failed()

test_v3_v2_intermix_non_default_project_failed()

test_v3_v2_token_intermix()

test_v3_v2_unscoped_token_intermix()

test_validate_token()

test_validate_token_nocatalog()

verify_token(*args, **kwargs)

test_v3_catalog Module

class keystone.tests.test_v3_catalog.CatalogTestCase(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

Test service & endpoint CRUD.

assertValidErrorResponse(response)

test_create_endpoint_400()

Call POST /endpoints.

test_create_endpoint_enabled_false()

Call POST /endpoints with enabled: false.

test_create_endpoint_enabled_str_false()

Call POST /endpoints with enabled: ‘False’.

test_create_endpoint_enabled_str_random()

Call POST /endpoints with enabled: ‘puppies’.

test_create_endpoint_enabled_str_true()

Call POST /endpoints with enabled: ‘True’.

test_create_endpoint_enabled_true()

Call POST /endpoints with enabled: true.

test_create_endpoint_no_enabled()

Call POST /endpoints.

test_create_endpoint_on_v2()

test_create_endpoint_with_empty_url()

Call POST /endpoints.

test_create_region()

Call POST /regions with an ID in the request body.

test_create_region_with_conflicting_ids()

Call PUT /regions/{region_id} with conflicting region IDs.

test_create_region_with_duplicate_id()

Call PUT /regions/{region_id}.

test_create_region_with_id()

Call PUT /regions/{region_id} w/o an ID in the request body.

test_create_region_with_matching_ids()

Call PUT /regions/{region_id} with an ID in the request body.

test_create_region_without_id()

Call POST /regions without an ID in the request body.

test_create_service()

Call POST /services.

test_create_service_enabled_false()

Call POST /services.

test_create_service_enabled_str_false()

Call POST /services.

test_create_service_enabled_str_random()

Call POST /services.

test_create_service_enabled_str_true()

Call POST /services.

test_create_service_enabled_true()

Call POST /services.

test_create_service_no_enabled()

Call POST /services.

test_delete_endpoint()

Call DELETE /endpoints/{endpoint_id}.

test_delete_region()

Call DELETE /regions/{region_id}.

test_delete_service()

Call DELETE /services/{service_id}.

test_get_endpoint()

Call GET /endpoints/{endpoint_id}.

test_get_region()

Call GET /regions/{region_id}.

test_get_service()

Call GET /services/{service_id}.

test_list_endpoints()

Call GET /endpoints.

test_list_endpoints_xml()

Call GET /endpoints (xml data).

test_list_regions()

Call GET /regions.

test_list_regions_xml()

Call GET /regions (xml data).

test_list_services()

Call GET /services.

test_list_services_xml()

Call GET /services (xml data).

test_update_endpoint()

Call PATCH /endpoints/{endpoint_id}.

test_update_endpoint_enabled_false()

Call PATCH /endpoints/{endpoint_id} with enabled: False.

test_update_endpoint_enabled_str_false()

Call PATCH /endpoints/{endpoint_id} with enabled: ‘False’.

test_update_endpoint_enabled_str_random()

Call PATCH /endpoints/{endpoint_id} with enabled: ‘kitties’.

test_update_endpoint_enabled_str_true()

Call PATCH /endpoints/{endpoint_id} with enabled: ‘True’.

test_update_endpoint_enabled_true()

Call PATCH /endpoints/{endpoint_id} with enabled: True.

test_update_region()

Call PATCH /regions/{region_id}.

test_update_service()

Call PATCH /services/{service_id}.

class keystone.tests.test_v3_catalog.TestCatalogAPISQL(*args, **kwargs)

Bases: keystone.tests.core.TestCase

Tests for the catalog Manager against the SQL backend.

config_overrides()

new_endpoint_ref(service_id)

setUp()

test_get_catalog_ignores_endpoints_with_invalid_urls()

test_v3_credential Module

class keystone.tests.test_v3_credential.CredentialBaseTestCase(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

class keystone.tests.test_v3_credential.CredentialTestCase(*args, **kwargs)

Bases: keystone.tests.test_v3_credential.CredentialBaseTestCase

Test credential CRUD.

setUp()

test_create_credential()

Call POST /credentials.

test_create_credential_with_admin_token()

test_create_ec2_credential()

Call POST /credentials for creating ec2 credential.

test_create_ec2_credential_with_invalid_blob()

Call POST /credentials for creating ec2 credential with invalid blob.

test_create_non_ec2_credential()

Call POST /credentials for creating non-ec2 credential.

test_credential_api_delete_credentials_for_project()

test_credential_api_delete_credentials_for_user()

test_delete_credential()

Call DELETE /credentials/{credential_id}.

test_get_credential()

Call GET /credentials/{credential_id}.

test_get_ec2_dict_blob()

Ensure non-JSON blob data is correctly converted.

test_list_credentials()

Call GET /credentials.

test_list_credentials_xml()

Call GET /credentials (xml data).

test_list_ec2_dict_blob()

Ensure non-JSON blob data is correctly converted.

test_update_credential()

Call PATCH /credentials/{credential_id}.

class keystone.tests.test_v3_credential.TestCredentialEc2(*args, **kwargs)

Bases: keystone.tests.test_v3_credential.CredentialBaseTestCase

Test v3 credential compatibility with ec2tokens.

setUp()

test_ec2_create_credential()

Test ec2 credential creation.

test_ec2_credential_signature_validate()

Test signature validation with a v3 ec2 credential.

test_ec2_credential_signature_validate_legacy()

Test signature validation with a legacy v3 ec2 credential.

test_ec2_delete_credential()

Test ec2 credential deletion.

test_ec2_get_credential()

test_ec2_list_credentials()

Test ec2 credential listing.

class keystone.tests.test_v3_credential.TestCredentialTrustScoped(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

Test credential with trust scoped token.

config_overrides()

setUp()

test_trust_scoped_ec2_credential()

Call POST /credentials for creating ec2 credential.

test_v3_federation Module

class keystone.tests.test_v3_federation.FederatedIdentityProviderTests(*args, **kwargs)

Bases: keystone.tests.test_v3_federation.FederationTests

A test class for Identity Providers.

base_url(suffix=None)

default_body = {'enabled': True, 'description': None}

idp_keys = ['description', 'enabled']

test_assign_protocol_to_idp()

Assign a protocol to existing IdP.

test_assign_protocol_to_nonexistent_idp()

Assign protocol to IdP that doesn’t exist.

Expect HTTP 404 code.

test_check_idp_uniqueness()

Add same IdP twice.

Expect HTTP 409 code for the latter call.

test_create_idp()

Creates the IdentityProvider entity.

test_delete_existing_idp()

Create and later delete IdP.

Expect HTTP 404 for the GET IdP call.

test_delete_nonexisting_idp()

Delete nonexisting IdP.

Expect HTTP 404 for the GET IdP call.

test_delete_protocol()

Delete protocol.

Expect HTTP 404 code for the GET call after the protocol is deleted.

test_get_idp()

Create and later fetch IdP.

test_get_nonexisting_idp()

Fetch nonexisting IdP entity.

Expected HTTP 404 status code.

test_get_protocol()

Create and later fetch protocol tied to IdP.

test_list_idps(iterations=5)

Lists all available IdentityProviders.

This test collects ids of created IdPs and intersects it with the list of all available IdPs. List of all IdPs can be a superset of IdPs created in this test, because other tests also create IdPs.

test_list_protocols()

Create set of protocols and later list them.

Compare input and output id sets.

test_protocol_composite_pk()

Test whether Keystone let’s add two entities with identical names, however attached to different IdPs.

1. Add IdP and assign it protocol with predefined name
2. Add another IdP and assign it a protocol with same name.

Expect HTTP 201 code

test_protocol_idp_pk_uniqueness()

Test whether Keystone checks for unique idp/protocol values.

Add same protocol twice, expect Keystone to reject a latter call and return HTTP 409 code.

test_update_idp_immutable_attributes()

Update IdP’s immutable parameters.

Expect HTTP 403 code.

test_update_idp_mutable_attributes()

Update IdP’s mutable parameters.

test_update_nonexistent_idp()

Update nonexistent IdP

Expect HTTP 404 code.

test_update_protocols_attribute()

Update protocol’s attribute.

class keystone.tests.test_v3_federation.FederatedTokenTests(*args, **kwargs)

Bases: keystone.tests.test_v3_federation.FederationTests

ASSERTION_PREFIX = 'PREFIX_'

AUTH_METHOD = 'saml2'

AUTH_URL = '/auth/tokens'

IDP = 'ORG_IDP'

PROTOCOL = 'saml2'

UNSCOPED_V3_SAML2_REQ = {'identity': {'methods': ['saml2'], 'saml2': {'identity_provider': 'ORG_IDP', 'protocol': 'saml2'}}}

USER = 'user@ORGANIZATION'

idp_ref(id=None)

load_federation_sample_data()

Inject additional data.

mapping_ref(rules=None)

proto_ref(mapping_id=None)

setUp()

test_assertion_prefix_parameter()

Test parameters filtering based on the prefix.

With assertion_prefix set to fixed, non defailt value, issue an unscoped token from assertion EMPLOYEE_ASSERTION_PREFIXED. Expect server to return unscoped token.

test_assertion_prefix_parameter_expect_fail()

Test parameters filtering based on the prefix.

With assertion_prefix default value set to empty string issue an unscoped token from assertion EMPLOYEE_ASSERTION. Next, configure assertion_prefix to value UserName. Try issuing unscoped token with EMPLOYEE_ASSERTION. Expect server to raise exception.Unathorized exception.

test_full_workflow()

Test ‘standard’ workflow for granting access tokens.

• Issue unscoped token
• List available projects based on groups
• Scope token to a one of available projects

test_issue_token_from_rules_without_user()

test_issue_token_with_nonexistent_group()

Inject assertion that matches rule issuing bad group id.

Expect server to find out that some groups are missing in the backend and raise exception.MappedGroupNotFound exception.

test_issue_unscoped_token()

test_issue_unscoped_token_malformed_environment()

Test whether non string objects are filtered out.

Put non string objects into the environment, inject correct assertion and try to get an unscoped token. Expect server not to fail on using split() method on non string objects and return token id in the HTTP header.

test_issue_unscoped_token_no_groups()

test_issue_unscoped_token_serialize_to_xml()

Issue unscoped token and serialize to XML.

Make sure common.serializer doesn’t complain about the response structure and tag names.

test_list_domains()

test_list_projects()

test_scope_to_bad_project()

Scope unscoped token with a project we don’t have access to.

test_scope_to_domain_multiple_tokens()

Issue multiple tokens scoping to different domains.

The new tokens should be scoped to:

• domainA
• domainB
• domainC

test_scope_to_domain_once()

test_scope_to_project_multiple_times()

Try to scope the unscoped token multiple times.

The new tokens should be scoped to:

• Customers’ project
• Employees’ project

test_scope_to_project_once()

test_scope_token_from_nonexistent_unscoped_token()

Try to scope token from non-existent unscoped token.

test_workflow_with_groups_deletion()

Test full workflow with groups deletion before token scoping.

The test scenario is as follows:

• Create group group
• Create and assign roles to group and project_all
• Patch mapping rules for existing IdP so it issues group id
• Issue unscoped token with group‘s id
• Delete group group
• Scope token to project_all
• Expect HTTP 500 response

class keystone.tests.test_v3_federation.FederationTests(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

EXTENSION_NAME = 'federation'

EXTENSION_TO_ADD = 'federation_extension'

setup_database()

class keystone.tests.test_v3_federation.MappingCRUDTests(*args, **kwargs)

Bases: keystone.tests.test_v3_federation.FederationTests

A class for testing CRUD operations for Mappings.

MAPPING_URL = '/OS-FEDERATION/mappings/'

assertValidMapping(entity, ref=None)

assertValidMappingListResponse(resp, *args, **kwargs)

assertValidMappingResponse(resp, *args, **kwargs)

test_create_mapping_bad_requirements()

test_create_mapping_bad_value()

test_create_mapping_empty_map()

test_create_mapping_extra_remote_properties_any_one_of()

test_create_mapping_extra_remote_properties_just_type()

test_create_mapping_extra_remote_properties_not_any_of()

test_create_mapping_extra_rules_properties()

test_create_mapping_missing_local()

test_create_mapping_missing_type()

test_create_mapping_no_remote_objects()

test_create_mapping_no_rules()

test_create_mapping_wrong_type()

test_delete_mapping_dne()

test_get_mapping_dne()

test_mapping_create()

test_mapping_delete()

test_mapping_get()

test_mapping_list()

test_mapping_update()

class keystone.tests.test_v3_federation.MappingRuleEngineTests(*args, **kwargs)

Bases: keystone.tests.test_v3_federation.FederationTests

A class for testing the mapping rule engine.

test_rule_engine_any_one_of_and_direct_mapping()

Should return user’s name and group id EMPLOYEE_GROUP_ID.

The ADMIN_ASSERTION should successfully have a match in MAPPING_LARGE. The will test the case where any_one_of is valid, and there is a direct mapping for the users name.

test_rule_engine_any_one_of_many_rules()

Should return group CONTRACTOR_GROUP_ID.

The CONTRACTOR_ASSERTION should successfully have a match in MAPPING_SMALL. This will test the case where many rules must be matched, including an any_one_of, and a direct mapping.

test_rule_engine_discards_nonstring_objects()

Check whether RuleProcessor discards non string objects.

Despite the fact that assertion is malformed and contains non string objects, RuleProcessor should correctly discard them and successfully have a match in MAPPING_LARGE.

test_rule_engine_fails_after_discarding_nonstring()

Check whether RuleProcessor discards non string objects.

Expect RuleProcessor to discard non string object, which is required for a correct rule match. Since no rules are matched expect RuleProcessor to raise exception.Unauthorized exception.

test_rule_engine_no_regex_match()

Should deny authorization, the email of the tester won’t match.

This will not match since the email in the assertion will fail the regex test. It is set to match any @example.com address. But the incoming value is set to eviltester@example.org. RuleProcessor should raise exception.Unauthorized exception.

test_rule_engine_not_any_of_and_direct_mapping()

Should return user’s name and email.

The CUSTOMER_ASSERTION should successfully have a match in MAPPING_LARGE. This will test the case where a requirement has not_any_of, and direct mapping to a username, no group.

test_rule_engine_not_any_of_many_rules()

Should return group EMPLOYEE_GROUP_ID.

The EMPLOYEE_ASSERTION should successfully have a match in MAPPING_SMALL. This will test the case where many remote rules must be matched, including a not_any_of.

test_rule_engine_regex_match_and_many_groups()

Should return group DEVELOPER_GROUP_ID and TESTER_GROUP_ID.

The TESTER_ASSERTION should successfully have a match in MAPPING_LARGE. This will test a successful regex match for an any_one_of evaluation type, and will have many groups returned.

keystone.tests.test_v3_federation.dummy_validator(*args, **kwargs)

test_v3_filters Module

class keystone.tests.test_v3_filters.IdentityTestFilteredCase(*args, **kwargs)

Bases: keystone.tests.filtering.FilterTests, keystone.tests.test_v3.RestfulTestCase

Test filter enforcement on the v3 Identity API.

content_type = 'json'

load_sample_data()

Create sample data for these tests.

As well as the usual housekeeping, create a set of domains, users, roles and projects for the subsequent tests:

• Three domains: A,B & C. C is disabled.
• DomainA has user1, DomainB has user2 and user3
• DomainA has group1 and group2, DomainB has group3
• User1 has a role on DomainA

Remember that there will also be a fourth domain in existence, the default domain.

setUp()

Setup for Identity Filter Test Cases.

test_filter_sql_injection_attack()

GET /users?name=<injected sql_statement>

Test Plan:

• Attempt to get all entities back by passing a two-term attribute
• Attempt to piggyback filter to damage DB (e.g. drop table)

test_inexact_filters()

test_list_filtered_domains()

GET /domains?enabled=0

Test Plan:

• Update policy for no protection on api
• Filter by the ‘enabled’ boolean to get disabled domains, which should return just domainC
• Try the filter using different ways of specifying True/False to test that our handling of booleans in filter matching is correct

test_list_users_filtered_by_domain()

GET /users?domain_id=mydomain (filtered)

Test Plan:

• Update policy so api is unprotected
• Use an un-scoped token to make sure we can filter the users by domainB, getting back the 2 users in that domain

test_list_users_filtered_by_funny_name()

GET /users?name=%myname%

Test Plan:

• Update policy so api is unprotected
• Update a user with name that has filter escape characters
• Ensure we can filter on it

test_multiple_filters()

GET /domains?enabled&name=myname

Test Plan:

• Update policy for no protection on api
• Filter by the ‘enabled’ boolean and name - this should return a single domain

class keystone.tests.test_v3_filters.IdentityTestFilteredCaseXML(*args, **kwargs)

Bases: keystone.tests.test_v3_filters.IdentityTestFilteredCase

content_type = 'xml'

class keystone.tests.test_v3_filters.IdentityTestListLimitCase(*args, **kwargs)

Bases: keystone.tests.test_v3_filters.IdentityTestFilteredCase

Test list limiting enforcement on the v3 Identity API.

clean_up_entity(entity)

Clean up entity test data from Identity Limit Test Cases.

clean_up_policy()

Clean up policy test data from Identity Limit Test Cases.

clean_up_service()

Clean up service test data from Identity Limit Test Cases.

content_type = 'json'

setUp()

Setup for Identity Limit Test Cases.

test_at_limit()

Check truncated attribute not set when list at max size.

test_groups_list_limit()

test_no_limit()

Check truncated attribute not set when list not limited.

test_non_driver_list_limit()

Check list can be limited without driver level support.

Policy limiting is not done at the driver level (since it really isn’t worth doing it there). So use this as a test for ensuring the controller level will successfully limit in this case.

test_projects_list_limit()

test_services_list_limit()

test_users_list_limit()

class keystone.tests.test_v3_filters.IdentityTestListLimitCaseXML(*args, **kwargs)

Bases: keystone.tests.test_v3_filters.IdentityTestListLimitCase

content_type = 'xml'

test_v3_identity Module

class keystone.tests.test_v3_identity.IdentityInheritanceDisabledTestCase(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

Test inheritance crud and its effects.

config_overrides()

test_crud_inherited_role_grants_failed_if_disabled()

class keystone.tests.test_v3_identity.IdentityInheritanceTestCase(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

Test inheritance crud and its effects.

config_overrides()

test_crud_user_inherited_domain_role_grants()

test_filtered_role_assignments_for_inherited_grants()

Call GET /role_assignments?scope.OS-INHERIT:inherited_to.

Test Plan:

• Create 5 roles
• Create a domain with a user, group and two projects
• Assign three direct spoiler roles to projects
• Issue the URL to add an inherited user role to the domain
• Issue the URL to add an inherited group role to the domain
• Issue the URL to filter by inherited roles - this should return just the 2 inherited roles.

test_list_role_assignments_for_disabled_inheritance_extension()

Call GET /role_assignments with inherited domain grants.

Test Plan:

• Issue the URL to add inherited role to the domain
• Issue the URL to check effective roles on project include the inherited role
• Disable the extension
• Re-check the effective roles, proving the inherited role no longer shows up.

test_list_role_assignments_for_inherited_domain_grants()

Call GET /role_assignments with inherited domain grants.

Test Plan:

• Create 4 roles
• Create a domain with a user and two projects
• Assign two direct roles to project1
• Assign a spoiler role to project2
• Issue the URL to add inherited role to the domain
• Issue the URL to check it is indeed on the domain
• Issue the URL to check effective roles on project1 - this should return 3 roles.

test_list_role_assignments_for_inherited_group_domain_grants()

Call GET /role_assignments with inherited group domain grants.

Test Plan:

• Create 4 roles
• Create a domain with a user and two projects
• Assign two direct roles to project1
• Assign a spoiler role to project2
• Issue the URL to add inherited role to the domain
• Issue the URL to check it is indeed on the domain
• Issue the URL to check effective roles on project1 - this should return 3 roles.

class keystone.tests.test_v3_identity.IdentityTestCase(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

Test domains, projects, users, groups, & role CRUD.

setUp()

test_add_user_to_group()

Call PUT /groups/{group_id}/users/{user_id}.

test_admin_password_reset()

test_check_effective_values_for_role_assignments()

Call GET /role_assignments?effective=value.

Check the various ways of specifying the ‘effective’ query parameter. If the ‘effective’ query parameter is included then this should always be treated as as meaning ‘True’ unless it is specified as:

{url}?effective=0

This is by design to match the agreed way of handling policy checking on query/filter parameters.

Test Plan:

• Create two extra user for tests
• Add these users to a group
• Add a role assignment for the group on a domain
• Get a list of all role assignments, checking one has been added
• Then issue various request with different ways of defining the ‘effective’ query parameter. As we have tested the correctness of the data coming back when we get effective roles in other tests, here we just use the count of entities to know if we are getting effective roles or not

test_check_user_in_group()

Call HEAD /groups/{group_id}/users/{user_id}.

test_create_domain()

Call POST /domains.

test_create_domain_400()

Call POST /domains.

test_create_domain_case_sensitivity()

Call POST /domains` twice with upper() and lower() cased name.

test_create_group()

Call POST /groups.

test_create_group_400()

Call POST /groups.

test_create_project()

Call POST /projects.

test_create_project_400()

Call POST /projects.

test_create_role()

Call POST /roles.

test_create_role_400()

Call POST /roles.

test_create_user()

Call POST /users.

test_create_user_400()

Call POST /users.

test_crud_group_domain_role_grants()

test_crud_group_domain_role_grants_no_group()

Grant role on a domain to a group that doesn’t exist, 404 result.

When grant a role on a domain to a group that doesn’t exist, the server returns 404 Not Found for the group.

test_crud_group_project_role_grants()

test_crud_group_project_role_grants_no_group()

Grant role on a project to a group that doesn’t exist, 404 result.

When grant a role on a project to a group that doesn’t exist, the server returns 404 Not Found for the group.

test_crud_user_domain_role_grants()

test_crud_user_domain_role_grants_no_user()

Grant role on a domain to a user that doesn’t exist, 404 result.

When grant a role on a domain to a user that doesn’t exist, the server returns 404 Not Found for the user.

test_crud_user_project_role_grants()

test_crud_user_project_role_grants_no_user()

Grant role on a project to a user that doesn’t exist, 404 result.

When grant a role on a project to a user that doesn’t exist, the server returns 404 Not Found for the user.

test_delete_default_domain_fails()

test_delete_domain()

Call DELETE /domains/{domain_id}.

The sample data set up already has a user, group, project and credential that is part of self.domain. Since the user we will authenticate with is in this domain, we create a another set of entities in a second domain. Deleting this second domain should delete all these new entities. In addition, all the entities in the regular self.domain should be unaffected by the delete.

Test Plan:

• Create domain2 and a 2nd set of entities
• Disable domain2
• Delete domain2
• Check entities in domain2 have been deleted
• Check entities in self.domain are unaffected

test_delete_enabled_domain_fails()

Call DELETE /domains/{domain_id} (when domain enabled).

test_delete_group()

Call DELETE /groups/{group_id}.

test_delete_new_default_domain_fails()

test_delete_old_default_domain()

test_delete_project()

Call DELETE /projects/{project_id}

As well as making sure the delete succeeds, we ensure that any credentials that reference this projects are also deleted, while other credentials are unaffected.

test_delete_role()

Call DELETE /roles/{role_id}.

test_delete_user()

Call DELETE /users/{user_id}.

As well as making sure the delete succeeds, we ensure that any credentials that reference this user are also deleted, while other credentials are unaffected. In addition, no tokens should remain valid for this user.

test_disable_domain()

Call PATCH /domains/{domain_id} (set enabled=False).

test_filtered_role_assignments()

Call GET /role_assignments?filters.

Test Plan:

• Create extra users, group, role and project for tests
• Make the following assignments: Give group1, role1 on project1 and domain Give user1, role2 on project1 and domain Make User1 a member of Group1
• Test a series of single filter list calls, checking that the correct results are obtained
• Test a multi-filtered list call
• Test listing all effective roles for a given user
• Test the equivalent of the list of roles in a project scoped token (all effective roles for a user on a project)

test_get_domain()

Call GET /domains/{domain_id}.

test_get_effective_role_assignments()

Call GET /role_assignments?effective.

Test Plan:

• Create two extra user for tests
• Add these users to a group
• Add a role assignment for the group on a domain
• Get a list of all role assignments, checking one has been added
• Then get a list of all effective role assignments - the group assignment should have turned into assignments on the domain for each of the group members.

test_get_group()

Call GET /groups/{group_id}.

test_get_project()

Call GET /projects/{project_id}.

test_get_role()

Call GET /roles/{role_id}.

test_get_role_assignments()

Call GET /role_assignments.

The sample data set up already has a user, group and project that is part of self.domain. We use these plus a new user we create as our data set, making sure we ignore any role assignments that are already in existence.

Since we don’t yet support a first class entity for role assignments, we are only testing the LIST API. To create and delete the role assignments we use the old grant APIs.

Test Plan:

• Create extra user for tests
• Get a list of all existing role assignments
• Add a new assignment for each of the four combinations, i.e. group+domain, user+domain, group+project, user+project, using the same role each time
• Get a new list of all role assignments, checking these four new ones have been added
• Then delete the four we added
• Get a new list of all role assignments, checking the four have been removed

test_get_user()

Call GET /users/{user_id}.

test_get_user_with_default_project()

Call GET /users/{user_id} making sure of default_project_id.

test_list_domains()

Call GET /domains.

test_list_domains_xml()

Call GET /domains (xml data).

test_list_groups()

Call GET /groups.

test_list_groups_for_user()

Call GET /users/{user_id}/groups.

test_list_groups_xml()

Call GET /groups (xml data).

test_list_projects()

Call GET /projects.

test_list_projects_xml()

Call GET /projects (xml data).

test_list_roles()

Call GET /roles.

test_list_roles_xml()

Call GET /roles (xml data).

test_list_users()

Call GET /users.

test_list_users_in_group()

Call GET /groups/{group_id}/users.

test_list_users_no_default_project()

Call GET /users making sure no default_project_id.

test_list_users_xml()

Call GET /users (xml data).

test_remove_user_from_group()

Call DELETE /groups/{group_id}/users/{user_id}.

test_update_domain()

Call PATCH /domains/{domain_id}.

test_update_group()

Call PATCH /groups/{group_id}.

test_update_group_domain_id()

Call PATCH /groups/{group_id} with domain_id.

test_update_project()

Call PATCH /projects/{project_id}.

test_update_project_domain_id()

Call PATCH /projects/{project_id} with domain_id.

test_update_role()

Call PATCH /roles/{role_id}.

test_update_user()

Call PATCH /users/{user_id}.

test_update_user_domain_id()

Call PATCH /users/{user_id} with domain_id.

class keystone.tests.test_v3_identity.TestV3toV2Methods(*args, **kwargs)

Bases: keystone.tests.core.TestCase

Test V3 to V2 conversion methods.

setUp()

test_v2controller_filter_domain_id()

test_v3_to_v2_user_method()

test_v3_to_v2_user_method_list()

test_v3controller_filter_domain_id()

class keystone.tests.test_v3_identity.UserSelfServiceChangingPasswordsTestCase(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

change_password(expected_status, **kwargs)

Returns a test response for a change password request.

get_request_token(password, expected_status)

setUp()

test_changing_password()

test_changing_password_with_disabled_user_fails()

test_changing_password_with_incorrect_password_fails()

test_changing_password_with_missing_original_password_fails()

test_changing_password_with_missing_password_fails()

test_v3_oauth1 Module

class keystone.tests.test_v3_oauth1.AccessTokenCRUDTests(*args, **kwargs)

Bases: keystone.tests.test_v3_oauth1.OAuthFlowTests

test_delete_access_token_dne()

test_get_access_token_dne()

test_get_role_in_access_token()

test_get_role_in_access_token_dne()

test_get_single_access_token()

test_list_all_roles_in_access_token()

test_list_and_delete_access_tokens()

test_list_no_access_tokens()

class keystone.tests.test_v3_oauth1.AuthTokenTests(*args, **kwargs)

Bases: keystone.tests.test_v3_oauth1.OAuthFlowTests

test_change_user_password_also_deletes_tokens()

test_delete_access_token_also_revokes_token()

test_delete_keystone_tokens_by_consumer_id()

test_deleting_consumer_also_deletes_tokens()

test_deleting_project_also_invalidates_tokens()

test_keystone_token_is_valid()

test_oauth_token_cannot_authorize_request_token()

test_oauth_token_cannot_create_new_trust()

test_oauth_token_cannot_list_request_tokens()

test_token_chaining_is_not_allowed()

test_trust_token_cannot_authorize_request_token()

test_trust_token_cannot_list_request_tokens()

class keystone.tests.test_v3_oauth1.ConsumerCRUDTests(*args, **kwargs)

Bases: keystone.tests.test_v3_oauth1.OAuth1Tests

test_consumer_create()

test_consumer_create_no_description()

test_consumer_create_none_desc_1()

test_consumer_create_none_desc_2()

test_consumer_create_normalize_field()

test_consumer_delete()

test_consumer_get()

test_consumer_get_bad_id()

test_consumer_list()

test_consumer_update()

test_consumer_update_bad_id()

test_consumer_update_bad_secret()

test_consumer_update_normalize_field()

class keystone.tests.test_v3_oauth1.MaliciousOAuth1Tests(*args, **kwargs)

Bases: keystone.tests.test_v3_oauth1.OAuth1Tests

test_bad_authorizing_roles()

test_bad_consumer_secret()

test_bad_request_token_key()

test_bad_verifier()

test_expired_authorizing_request_token()

test_expired_creating_keystone_token()

class keystone.tests.test_v3_oauth1.OAuth1Tests(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

CONSUMER_URL = '/OS-OAUTH1/consumers'

EXTENSION_NAME = 'oauth1'

EXTENSION_TO_ADD = 'oauth1_extension'

setUp()

setup_database()

class keystone.tests.test_v3_oauth1.OAuthFlowTests(*args, **kwargs)

Bases: keystone.tests.test_v3_oauth1.OAuth1Tests

test_oauth_flow()

test_v3_os_revoke Module

class keystone.tests.test_v3_os_revoke.OSRevokeTests(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

EXTENSION_NAME = 'revoke'

EXTENSION_TO_ADD = 'revoke_extension'

assertReportedEventMatchesRecorded(event, sample, before_time)

test_disabled_domain_in_list()

test_disabled_project_in_list()

test_get_empty_list()

test_list_since_invalid()

test_list_since_valid()

test_revoked_token_in_list()

test_since_future_time_no_events()

test_v3_policy Module

class keystone.tests.test_v3_policy.PolicyTestCase(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

Test policy CRUD.

setUp()

test_create_policy()

Call POST /policies.

test_delete_policy()

Call DELETE /policies/{policy_id}.

test_get_policy()

Call GET /policies/{policy_id}.

test_list_policies()

Call GET /policies.

test_list_policies_xml()

Call GET /policies (xml data).

test_update_policy()

Call PATCH /policies/{policy_id}.

test_v3_protection Module

class keystone.tests.test_v3_protection.IdentityTestProtectedCase(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

Test policy enforcement on the v3 Identity API.

load_sample_data()

setUp()

Setup for Identity Protection Test Cases.

As well as the usual housekeeping, create a set of domains, users, roles and projects for the subsequent tests:

• Three domains: A,B & C. C is disabled.
• DomainA has user1, DomainB has user2 and user3
• DomainA has group1 and group2, DomainB has group3
• User1 has two roles on DomainA
• User2 has one role on DomainA

Remember that there will also be a fourth domain in existence, the default domain.

test_get_user_protected_match_id()

GET /users/{id} (match payload)

Test Plan:

• Update policy to protect api by user_id
• List users with user_id of user1 as filter, to check that this will correctly match user_id in the flattened payload

test_get_user_protected_match_target()

GET /users/{id} (match target)

Test Plan:

• Update policy to protect api by domain_id
• Try and read a user who is in DomainB with a token scoped to Domain A - this should fail
• Retry this for a user who is in Domain A, which should succeed.
• Finally, try getting a user that does not exist, which should still return UserNotFound

test_list_groups_protected_by_domain()

GET /groups?domain_id=mydomain (protected)

Test Plan:

• Update policy to protect api by domain_id
• List groups using a token scoped to domainA and make sure we only get back the two groups that are in domainA
• Try and read the groups from domainB - this should fail since we don’t have a token scoped for domainB

test_list_groups_protected_by_domain_and_filtered()

GET /groups?domain_id=mydomain&name=myname (protected)

Test Plan:

• Update policy to protect api by domain_id
• List groups using a token scoped to domainA with a filter specifying both domainA and the name of group.
• We should only get back the group in domainA that matches the name

test_list_users_filtered_by_domain()

GET /users?domain_id=mydomain (filtered)

Test Plan:

• Update policy so api is unprotected
• Use an un-scoped token to make sure we can filter the users by domainB, getting back the 2 users in that domain

test_list_users_protected_by_domain()

GET /users?domain_id=mydomain (protected)

Test Plan:

• Update policy to protect api by domain_id
• List groups using a token scoped to domainA with a filter specifying domainA - we should only get back the one user that is in domainA.
• Try and read the users from domainB - this should fail since we don’t have a token scoped for domainB

test_list_users_unprotected()

GET /users (unprotected)

Test Plan:

• Update policy so api is unprotected
• Use an un-scoped token to make sure we can get back all the users independent of domain

test_revoke_grant_protected_match_target()

DELETE /domains/{id}/users/{id}/roles/{id} (match target)

Test Plan:

• Update policy to protect api by domain_id of entities in the grant
• Try and delete the existing grant that has a user who is from a different domain - this should fail.
• Retry this for a user who is in Domain A, which should succeed.

class keystone.tests.test_v3_protection.IdentityTestv3CloudPolicySample(*args, **kwargs)

Bases: keystone.tests.test_v3.RestfulTestCase

Test policy enforcement of the sample v3 cloud policy file.

load_sample_data()

setUp()

Setup for v3 Cloud Policy Sample Test Cases.

The following data is created:

• Three domains: domainA, domainB and admin_domain
• One project, which name is ‘project’
• domainA has three users: domain_admin_user, project_admin_user and just_a_user:
  • domain_admin_user has role ‘admin’ on domainA,
  • project_admin_user has role ‘admin’ on the project,
  • just_a_user has a non-admin role on both domainA and the project.
• admin_domain has user cloud_admin_user, with an ‘admin’ role on admin_domain.

We test various api protection rules from the cloud sample policy file to make sure the sample is valid and that we correctly enforce it.

test_cloud_admin()

test_domain_grants()

test_domain_grants_by_cloud_admin()

test_project_grants()

test_project_grants_by_domain_admin()

test_project_management()

test_user_management()

test_user_management_by_cloud_admin()

test_versions Module

class keystone.tests.test_versions.VersionTestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

config_overrides()

setUp()

test_admin_version_v2()

test_admin_version_v3()

test_admin_versions()

test_public_version_v2()

test_public_version_v3()

test_public_versions()

test_use_site_url_if_endpoint_unset()

test_use_site_url_if_endpoint_unset_v2()

test_use_site_url_if_endpoint_unset_v3()

test_v2_disabled()

test_v3_disabled()

class keystone.tests.test_versions.XmlVersionTestCase(*args, **kwargs)

Bases: keystone.tests.core.TestCase

DOC_INTRO = '<?xml version="1.0" encoding="UTF-8"?>'

REQUEST_HEADERS = {'Accept': 'application/xml'}

VERSIONS_RESPONSE = '<?xml version="1.0" encoding="UTF-8"?>\n<versions xmlns="http://docs.openstack.org/identity/api/v2.0">\n\n<version status="stable" updated="2013-03-06T00:00:00Z"\n id="v3.0">\n <media-types>\n <media-type base="application/json" type="application/vnd.openstack.identity-v3+json"/>\n <media-type base="application/xml" type="application/vnd.openstack.identity-v3+xml"/>\n </media-types>\n <links>\n <link href="http://localhost:%(port)s/v3/" rel="self"/>\n </links>\n</version>\n\n<version status="stable" updated="2014-04-17T00:00:00Z"\n id="v2.0">\n <media-types>\n <media-type base="application/json" type="application/vnd.openstack.identity-v2.0+json"/>\n <media-type base="application/xml" type="application/vnd.openstack.identity-v2.0+xml"/>\n </media-types>\n <links>\n <link href="http://localhost:%(port)s/v2.0/" rel="self"/>\n <link href="http://docs.openstack.org/api/openstack-identity-service/2.0/content/" type="text/html" rel="describedby"/>\n <link href="http://docs.openstack.org/api/openstack-identity-service/2.0/identity-dev-guide-2.0.pdf" type="application/pdf" rel="describedby"/>\n </links>\n <link href="http://localhost:%(port)s/v2.0/" rel="self"/>\n <link href="http://docs.openstack.org/api/openstack-identity-service/2.0/content/" type="text/html" rel="describedby"/>\n <link href="http://docs.openstack.org/api/openstack-identity-service/2.0/identity-dev-guide-2.0.pdf" type="application/pdf" rel="describedby"/>\n</version>\n\n</versions>\n'

XML_NAMESPACE_ATTR = 'xmlns="http://docs.openstack.org/identity/api/v2.0"'

XML_NAMESPACE_V3 = 'xmlns="http://docs.openstack.org/identity/api/v3"'

config_overrides()

setUp()

test_admin_version_v2()

test_admin_version_v3()

test_admin_versions()

test_public_version_v2()

test_public_version_v3()

test_public_versions()

test_use_site_url_if_endpoint_unset()

test_v2_disabled()

test_v3_disabled()

v2_VERSION_DATA = '\n<version %(v2_namespace)s status="stable" updated="2014-04-17T00:00:00Z"\n id="v2.0">\n <media-types>\n <media-type base="application/json" type="application/vnd.openstack.identity-v2.0+json"/>\n <media-type base="application/xml" type="application/vnd.openstack.identity-v2.0+xml"/>\n </media-types>\n <links>\n <link href="http://localhost:%%(port)s/v2.0/" rel="self"/>\n <link href="http://docs.openstack.org/api/openstack-identity-service/2.0/content/" type="text/html" rel="describedby"/>\n <link href="http://docs.openstack.org/api/openstack-identity-service/2.0/identity-dev-guide-2.0.pdf" type="application/pdf" rel="describedby"/>\n </links>\n <link href="http://localhost:%%(port)s/v2.0/" rel="self"/>\n <link href="http://docs.openstack.org/api/openstack-identity-service/2.0/content/" type="text/html" rel="describedby"/>\n <link href="http://docs.openstack.org/api/openstack-identity-service/2.0/identity-dev-guide-2.0.pdf" type="application/pdf" rel="describedby"/>\n</version>\n'

v2_VERSION_RESPONSE = '<?xml version="1.0" encoding="UTF-8"?>\n<version xmlns="http://docs.openstack.org/identity/api/v2.0" status="stable" updated="2014-04-17T00:00:00Z"\n id="v2.0">\n <media-types>\n <media-type base="application/json" type="application/vnd.openstack.identity-v2.0+json"/>\n <media-type base="application/xml" type="application/vnd.openstack.identity-v2.0+xml"/>\n </media-types>\n <links>\n <link href="http://localhost:%(port)s/v2.0/" rel="self"/>\n <link href="http://docs.openstack.org/api/openstack-identity-service/2.0/content/" type="text/html" rel="describedby"/>\n <link href="http://docs.openstack.org/api/openstack-identity-service/2.0/identity-dev-guide-2.0.pdf" type="application/pdf" rel="describedby"/>\n </links>\n <link href="http://localhost:%(port)s/v2.0/" rel="self"/>\n <link href="http://docs.openstack.org/api/openstack-identity-service/2.0/content/" type="text/html" rel="describedby"/>\n <link href="http://docs.openstack.org/api/openstack-identity-service/2.0/identity-dev-guide-2.0.pdf" type="application/pdf" rel="describedby"/>\n</version>\n'

v3_VERSION_DATA = '\n<version %(v3_namespace)s status="stable" updated="2013-03-06T00:00:00Z"\n id="v3.0">\n <media-types>\n <media-type base="application/json" type="application/vnd.openstack.identity-v3+json"/>\n <media-type base="application/xml" type="application/vnd.openstack.identity-v3+xml"/>\n </media-types>\n <links>\n <link href="http://localhost:%%(port)s/v3/" rel="self"/>\n </links>\n</version>\n'

v3_VERSION_RESPONSE = '<?xml version="1.0" encoding="UTF-8"?>\n<version xmlns="http://docs.openstack.org/identity/api/v3" status="stable" updated="2013-03-06T00:00:00Z"\n id="v3.0">\n <media-types>\n <media-type base="application/json" type="application/vnd.openstack.identity-v3+json"/>\n <media-type base="application/xml" type="application/vnd.openstack.identity-v3+xml"/>\n </media-types>\n <links>\n <link href="http://localhost:%(port)s/v3/" rel="self"/>\n </links>\n</version>\n'

test_wsgi Module

class keystone.tests.test_wsgi.ApplicationTest(*args, **kwargs)

Bases: keystone.tests.test_wsgi.BaseWSGITest

test_application_local_config()

test_headers_available()

test_query_string_available()

test_render_exception()

test_render_exception_host()

test_render_response()

test_render_response_custom_headers()

test_render_response_custom_status()

test_render_response_head_with_body()

test_render_response_no_body()

test_response_content_type()

class keystone.tests.test_wsgi.BaseWSGITest(*args, **kwargs)

Bases: keystone.tests.core.TestCase

setUp()

class keystone.tests.test_wsgi.ExtensionRouterTest(*args, **kwargs)

Bases: keystone.tests.test_wsgi.BaseWSGITest

test_extensionrouter_local_config()

class keystone.tests.test_wsgi.FakeApp(*args, **kwargs)

Bases: keystone.common.wsgi.Application

index(context)

class keystone.tests.test_wsgi.LocalizedResponseTest(*args, **kwargs)

Bases: keystone.tests.core.TestCase

setUp()

test_dynamic_translated_string_is_Message()

test_request_match_default()

test_request_match_language_expected()

test_request_match_language_unexpected()

test_static_translated_string_is_Message()

class keystone.tests.test_wsgi.MiddlewareTest(*args, **kwargs)

Bases: keystone.tests.test_wsgi.BaseWSGITest

test_middleware_bad_request()

test_middleware_exception_error()

test_middleware_local_config()

test_middleware_request()

test_middleware_response()

test_middleware_type_error()

class keystone.tests.test_wsgi.ServerTest(*args, **kwargs)

Bases: keystone.tests.core.TestCase

setUp()

test_keepalive_and_keepidle_set(*args, **keywargs)

test_keepalive_set(*args, **keywargs)

test_keepalive_unset(*args, **keywargs)

utils Module

Useful utilities for tests.

keystone.tests.utils.new_uuid()

Return a string UUID.

Subpackages

• ksfixtures Package
  • ksfixtures Package
  • appserver Module
  • cache Module
• unit Package
  • Subpackages
    • catalog Package
      • test_core Module
    • common Package
      • test_ldap Module
      • test_sql_core Module
      • test_utils Module
    • identity Package
      • test_core Module