test multi-domain logins in F5 tests

Signed-off-by: Daniel Lenski <dlenski@gmail.com>
sailfishos-mirror · Feb 24, 2021 · 14a1fb7 · 14a1fb7
1 parent 9524024
commit 14a1fb7
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 3 deletions.
diff --git a/tests/f5-auth-and-config b/tests/f5-auth-and-config
@@ -41,6 +41,12 @@ echo -n "Authenticating with username/password... "
 
 echo ok
 
+echo -n "Authenticating with username/password/authgroup... "
+( echo "test" | LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --protocol=f5 -q $ADDRESS:443/?domains=xyz,abc,def --authgroup=abc -u test $FINGERPRINT --cookieonly >/dev/null 2>&1) ||
+    fail $PID "Could not receive cookie from fake F5 server"
+
+echo ok
+
 echo -n "Authenticating with username/password, then proceeding to tunnel stage... "
 echo "test" | LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --protocol=f5 -q $ADDRESS:443 -u test $FINGERPRINT >/dev/null 2>&1
 test $? = 2 || # what OpenConnect returns when server rejects cookie upon tunnel connection, as the fake server does

diff --git a/tests/fake-f5-server.py b/tests/fake-f5-server.py
@@ -78,9 +78,11 @@ def wrapped(*args, **kwargs):
 ########################################
 
 # Respond to initial 'GET /' with a redirect to '/my.policy'
+# [Save list of domains/authgroups in the session for use later]
 @app.route('/')
 def root():
-    session.update(step='initial-GET')
+    domains = request.args.get('domains')
+    session.update(step='initial-GET', domains=domains and domains.split(','))
     # print(session)
     return redirect(url_for('get_policy'))
 
@@ -89,18 +91,29 @@ def root():
 @app.route('/my.policy')
 def get_policy():
     session.update(step='GET-login-form')
+    domains = session.get('domains')
+    sel = ''
+    if domains:
+        sel = '<select name="domain">%s</select>' % ''.join(
+            '<option value="%d">%s</option>' % nv for nv in enumerate(domains))
+
     return '''
 <html><body><form id="auth_form" method="post">
 <input type="text" name="username"/>
 <input type="password" name="password"/>
-</form></body></html>'''
+%s</form></body></html>''' % sel
 
 
 # Respond to 'POST /my.policy with a redirect response containing MRHSession and F5_ST
 # cookies (OpenConnect uses the combination of the two to detect successful authentication)
 @app.route('/my.policy', methods=['POST'])
 def post_policy():
-    session.update(step='POST-login', username=request.form.get('username'), credential=request.form.get('password'))
+    domains = session.get('domains')
+    if domains:
+        assert 0 <= int(request.form.get('domain',-1)) < len(domains)
+    session.update(step='POST-login', username=request.form.get('username'),
+                   credential=request.form.get('password'),
+                   domain=request.form.get('domain'))
     # print(session)
 
     resp = redirect(url_for('webtop'))