9d58253588
This code (or a version of it) is being shared by at least nova and keystonemiddleware and it seems like a good idea to move it to being common shared code (especially due to the importance of getting this code correct). This adds an initial secretutils and adds tests for it. Change-Id: Ia603202a065d5b345608e712f63f7af21fd74dea
53 lines
2.2 KiB
Python
53 lines
2.2 KiB
Python
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from oslotest import base as test_base
|
|
import testscenarios
|
|
|
|
from oslo_utils import secretutils
|
|
|
|
|
|
class SecretUtilsTest(testscenarios.TestWithScenarios,
|
|
test_base.BaseTestCase):
|
|
|
|
scenarios = [
|
|
('binary', {'converter': lambda text: text.encode('utf-8')}),
|
|
('unicode', {'converter': lambda text: text}),
|
|
]
|
|
|
|
def test_constant_time_compare(self):
|
|
# make sure it works as a compare, the "constant time" aspect
|
|
# isn't appropriate to test in unittests
|
|
ctc = secretutils.constant_time_compare
|
|
self.assertTrue(ctc(self.converter(u'abcd'),
|
|
self.converter(u'abcd')))
|
|
self.assertTrue(ctc(self.converter(u''),
|
|
self.converter(u'')))
|
|
self.assertFalse(ctc(self.converter(u'abcd'),
|
|
self.converter(u'efgh')))
|
|
self.assertFalse(ctc(self.converter(u'abc'),
|
|
self.converter(u'abcd')))
|
|
self.assertFalse(ctc(self.converter(u'abc'),
|
|
self.converter(u'abc\x00')))
|
|
self.assertFalse(ctc(self.converter(u''),
|
|
self.converter(u'abc')))
|
|
self.assertTrue(ctc(self.converter(u'abcd1234'),
|
|
self.converter(u'abcd1234')))
|
|
self.assertFalse(ctc(self.converter(u'abcd1234'),
|
|
self.converter(u'ABCD234')))
|
|
self.assertFalse(ctc(self.converter(u'abcd1234'),
|
|
self.converter(u'a')))
|
|
self.assertFalse(ctc(self.converter(u'abcd1234'),
|
|
self.converter(u'1234abcd')))
|