36 lines
995 B
Python
36 lines
995 B
Python
|
import pytest
|
||
|
|
|
||
|
|
from app.core.passwords import (
|
||
|
|
WeakPasswordError,
|
||
|
|
hash_password,
|
||
|
|
validate_policy,
|
||
|
|
verify_password,
|
||
|
|
)
|
||
|
|
|
||
|
|
STRONG_PASSWORD = "Kz8#Fj2!Lm9@Qw4$xR"
|
||
|
|
|
||
|
|
|
||
|
|
# слабый пароль должен отклоняться
|
||
|
|
def test_short_password_rejected():
|
||
|
|
with pytest.raises(WeakPasswordError):
|
||
|
|
validate_policy("short")
|
||
|
|
|
||
|
|
|
||
|
|
# слабый пароль должен отклоняться
|
||
|
|
@pytest.mark.parametrize("weak", ["password", "12345678", "aaaaaaaaaaaa"])
|
||
|
|
def test_known_weak_passwords_rejected(weak):
|
||
|
|
with pytest.raises(WeakPasswordError):
|
||
|
|
validate_policy(weak)
|
||
|
|
|
||
|
|
|
||
|
|
# корректный – приниматься
|
||
|
|
def test_strong_password_accepted():
|
||
|
|
validate_policy(STRONG_PASSWORD)
|
||
|
|
|
||
|
|
|
||
|
|
# хэш должен успешно проверяться
|
||
|
|
def test_hash_roundtrip():
|
||
|
|
hashed = hash_password(STRONG_PASSWORD)
|
||
|
|
assert verify_password(STRONG_PASSWORD, hashed) is True
|
||
|
|
assert verify_password("definitely-wrong", hashed) is False
|