Colin Maudry
51 lines
1.5 KiB
Python
51 lines
1.5 KiB
Python
from src.mcp.oauth import consent
|
|
|
|
|
|
def test_subscription_ok_tous_abonnes(monkeypatch):
|
|
monkeypatch.setattr("src.mcp.oauth.consent.TOUS_ABONNES", True)
|
|
assert consent.subscription_ok(999) is True
|
|
|
|
|
|
def test_subscription_ok_delegates(monkeypatch):
|
|
monkeypatch.setattr("src.mcp.oauth.consent.TOUS_ABONNES", False)
|
|
monkeypatch.setattr(
|
|
"src.mcp.oauth.consent.has_active_subscription", lambda uid: uid == 7
|
|
)
|
|
assert consent.subscription_ok(7) is True
|
|
assert consent.subscription_ok(8) is False
|
|
|
|
|
|
def test_render_consent_shows_redirect_host():
|
|
html = consent.render_consent(
|
|
"Claude", "https://claude.ai/api/mcp/auth_callback", "mcp"
|
|
)
|
|
assert "claude.ai" in html
|
|
assert "Claude" in html
|
|
assert 'name="confirm"' in html
|
|
|
|
|
|
def test_render_subscription_required_links_abonnement():
|
|
html = consent.render_subscription_required()
|
|
assert "/compte/abonnement" in html
|
|
|
|
|
|
def test_render_consent_escapes_client_name():
|
|
html = consent.render_consent(
|
|
"<script>alert(1)</script>",
|
|
"https://claude.ai/api/mcp/auth_callback",
|
|
"mcp",
|
|
)
|
|
assert "<script>alert(1)</script>" not in html
|
|
assert "<script>" in html
|
|
|
|
|
|
def test_render_consent_includes_csrf_token():
|
|
html = consent.render_consent(
|
|
"Claude",
|
|
"https://claude.ai/api/mcp/auth_callback",
|
|
"mcp",
|
|
csrf_token="tok-abc-123",
|
|
)
|
|
assert 'name="csrf_token"' in html
|
|
assert "tok-abc-123" in html
|