mirror of
https://mau.dev/maunium/synapse.git
synced 2024-11-16 06:51:46 +01:00
52 lines
1.7 KiB
Python
52 lines
1.7 KiB
Python
|
# -*- coding: utf-8 -*-
|
||
|
|
# Copyright 2020 The Matrix.org Foundation C.I.C.
|
||
|
|
#
|
||
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||
|
|
# you may not use this file except in compliance with the License.
|
||
|
|
# You may obtain a copy of the License at
|
||
|
|
#
|
||
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||
|
|
#
|
||
|
|
# Unless required by applicable law or agreed to in writing, software
|
||
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
|
|
# See the License for the specific language governing permissions and
|
||
|
|
# limitations under the License.
|
||
|
|
|
||
|
|
from synapse.api.errors import SynapseError
|
||
|
|
from synapse.util.stringutils import assert_valid_client_secret
|
||
|
|
|
||
|
|
from .. import unittest
|
||
|
|
|
||
|
|
|
||
|
|
class StringUtilsTestCase(unittest.TestCase):
|
||
|
|
def test_client_secret_regex(self):
|
||
|
|
"""Ensure that client_secret does not contain illegal characters"""
|
||
|
|
good = [
|
||
|
|
"abcde12345",
|
||
|
|
"ABCabc123",
|
||
|
|
"_--something==_",
|
||
|
|
"...--==-18913",
|
||
|
|
"8Dj2odd-e9asd.cd==_--ddas-secret-",
|
||
|
|
# We temporarily allow : characters: https://github.com/matrix-org/synapse/issues/6766
|
||
|
|
# To be removed in a future release
|
||
|
|
"SECRET:1234567890",
|
||
|
|
]
|
||
|
|
|
||
|
|
bad = [
|
||
|
|
"--+-/secret",
|
||
|
|
"\\dx--dsa288",
|
||
|
|
"",
|
||
|
|
"AAS//",
|
||
|
|
"asdj**",
|
||
|
|
">X><Z<!!-)))",
|
||
|
|
"a@b.com",
|
||
|
|
]
|
||
|
|
|
||
|
|
for client_secret in good:
|
||
|
|
assert_valid_client_secret(client_secret)
|
||
|
|
|
||
|
|
for client_secret in bad:
|
||
|
|
with self.assertRaises(SynapseError):
|
||
|
|
assert_valid_client_secret(client_secret)
|