# -*- coding: utf-8 -*- from __future__ import absolute_import from django.core.exceptions import ValidationError from django.db.utils import IntegrityError from zerver.lib.actions import do_change_is_admin, \ do_change_realm_alias, do_create_realm, \ do_remove_realm_alias from zerver.lib.domains import validate_domain from zerver.lib.test_classes import ZulipTestCase from zerver.models import email_allowed_for_realm, get_realm, \ get_realm_by_email_domain, get_user_profile_by_email, \ GetRealmByDomainException, RealmAlias import ujson class RealmAliasTest(ZulipTestCase): def test_list_aliases(self): # type: () -> None self.login("iago@zulip.com") realm = get_realm('zulip') RealmAlias.objects.create(realm=realm, domain='acme.com', allow_subdomains=True) result = self.client_get("/json/realm/domains") self.assert_json_success(result) received = ujson.dumps(ujson.loads(result.content)['domains'], sort_keys=True) expected = ujson.dumps([{'domain': 'zulip.com', 'allow_subdomains': False}, {'domain': 'acme.com', 'allow_subdomains': True}], sort_keys=True) self.assertEqual(received, expected) def test_not_realm_admin(self): # type: () -> None self.login("hamlet@zulip.com") result = self.client_post("/json/realm/domains") self.assert_json_error(result, 'Must be a realm administrator') result = self.client_patch("/json/realm/domains/15") self.assert_json_error(result, 'Must be a realm administrator') result = self.client_delete("/json/realm/domains/15") self.assert_json_error(result, 'Must be a realm administrator') def test_create_alias(self): # type: () -> None self.login("iago@zulip.com") data = {'domain': ujson.dumps(''), 'allow_subdomains': ujson.dumps(True)} result = self.client_post("/json/realm/domains", info=data) self.assert_json_error(result, 'Invalid domain: Domain can\'t be empty.') data['domain'] = ujson.dumps('acme.com') result = self.client_post("/json/realm/domains", info=data) self.assert_json_success(result) realm = get_realm('zulip') self.assertTrue(RealmAlias.objects.filter(realm=realm, domain='acme.com', allow_subdomains=True).exists()) result = self.client_post("/json/realm/domains", info=data) self.assert_json_error(result, 'The domain acme.com is already a part of your organization.') self.login("sipbtest@mit.edu") mit_user_profile = get_user_profile_by_email("sipbtest@mit.edu") do_change_is_admin(mit_user_profile, True) result = self.client_post("/json/realm/domains", info=data) self.assert_json_error(result, 'The domain acme.com belongs to another organization.') with self.settings(REALMS_HAVE_SUBDOMAINS=True): result = self.client_post("/json/realm/domains", info=data, HTTP_HOST=mit_user_profile.realm.host) self.assert_json_success(result) def test_patch_alias(self): # type: () -> None self.login("iago@zulip.com") realm = get_realm('zulip') RealmAlias.objects.create(realm=realm, domain='acme.com', allow_subdomains=False) data = { 'allow_subdomains': ujson.dumps(True), } url = "/json/realm/domains/acme.com" result = self.client_patch(url, data) self.assert_json_success(result) self.assertTrue(RealmAlias.objects.filter(realm=realm, domain='acme.com', allow_subdomains=True).exists()) url = "/json/realm/domains/non-existent.com" result = self.client_patch(url, data) self.assertEqual(result.status_code, 400) self.assert_json_error(result, 'No entry found for domain non-existent.com.') def test_delete_alias(self): # type: () -> None self.login("iago@zulip.com") realm = get_realm('zulip') RealmAlias.objects.create(realm=realm, domain='acme.com') result = self.client_delete("/json/realm/domains/non-existent.com") self.assertEqual(result.status_code, 400) self.assert_json_error(result, 'No entry found for domain non-existent.com.') result = self.client_delete("/json/realm/domains/acme.com") self.assert_json_success(result) self.assertFalse(RealmAlias.objects.filter(domain='acme.com').exists()) self.assertTrue(realm.restricted_to_domain) def test_delete_all_aliases(self): # type: () -> None self.login("iago@zulip.com") realm = get_realm('zulip') query = RealmAlias.objects.filter(realm=realm) self.assertTrue(realm.restricted_to_domain) for alias in query.all(): do_remove_realm_alias(alias) self.assertEqual(query.count(), 0) # Deleting last alias should set `restricted_to_domain` to False. # This should be tested on a fresh instance, since the cached # objects would not be updated. self.assertFalse(get_realm('zulip').restricted_to_domain) def test_get_realm_by_email_domain(self): # type: () -> None realm1, created = do_create_realm('testrealm1', 'Test Realm 1') realm2, created = do_create_realm('testrealm2', 'Test Realm 2') realm3, created = do_create_realm('testrealm3', 'Test Realm 3') alias1 = RealmAlias.objects.create(realm=realm1, domain='test1.com', allow_subdomains=True) alias2 = RealmAlias.objects.create(realm=realm2, domain='test2.test1.com', allow_subdomains=False) RealmAlias.objects.create(realm=realm3, domain='test3.test2.test1.com', allow_subdomains=True) self.assertEqual(get_realm_by_email_domain('user@zulip.com').string_id, 'zulip') self.assertEqual(get_realm_by_email_domain('user@fakedomain.com'), None) self.assertEqual(get_realm_by_email_domain('user@test1.com').string_id, 'testrealm1') self.assertEqual(get_realm_by_email_domain('user@test2.test1.com').string_id, 'testrealm2') self.assertEqual(get_realm_by_email_domain('user@test3.test2.test1.com').string_id, 'testrealm3') self.assertEqual(get_realm_by_email_domain('user@test2.test1.com').string_id, 'testrealm2') self.assertEqual(get_realm_by_email_domain('user@test2.test2.test1.com').string_id, 'testrealm1') self.assertEqual(get_realm_by_email_domain('user@test1.test3.test2.test1.com').string_id, 'testrealm3') do_change_realm_alias(alias1, False) self.assertEqual(get_realm_by_email_domain('user@test1.test1.com'), None) self.assertEqual(get_realm_by_email_domain('user@test1.com').string_id, 'testrealm1') do_change_realm_alias(alias2, True) self.assertEqual(get_realm_by_email_domain('user@test2.test1.com').string_id, 'testrealm2') self.assertEqual(get_realm_by_email_domain('user@test2.test2.test1.com').string_id, 'testrealm2') with self.settings(REALMS_HAVE_SUBDOMAINS = True), ( self.assertRaises(GetRealmByDomainException)): get_realm_by_email_domain('user@zulip.com') def test_email_allowed_for_realm(self): # type: () -> None realm1, created = do_create_realm('testrealm1', 'Test Realm 1', restricted_to_domain=True) realm2, created = do_create_realm('testrealm2', 'Test Realm 2', restricted_to_domain=True) alias = RealmAlias.objects.create(realm=realm1, domain='test1.com', allow_subdomains=False) RealmAlias.objects.create(realm=realm2, domain='test2.test1.com', allow_subdomains=True) self.assertEqual(email_allowed_for_realm('user@test1.com', realm1), True) self.assertEqual(email_allowed_for_realm('user@test2.test1.com', realm1), False) self.assertEqual(email_allowed_for_realm('user@test2.test1.com', realm2), True) self.assertEqual(email_allowed_for_realm('user@test3.test2.test1.com', realm2), True) self.assertEqual(email_allowed_for_realm('user@test3.test1.com', realm2), False) do_change_realm_alias(alias, True) self.assertEqual(email_allowed_for_realm('user@test1.com', realm1), True) self.assertEqual(email_allowed_for_realm('user@test2.test1.com', realm1), True) self.assertEqual(email_allowed_for_realm('user@test2.com', realm1), False) def test_realm_aliases_uniqueness(self): # type: () -> None realm = get_realm('zulip') with self.settings(REALMS_HAVE_SUBDOMAINS=True), self.assertRaises(IntegrityError): RealmAlias.objects.create(realm=realm, domain='zulip.com', allow_subdomains=True) def test_validate_domain(self): # type: () -> None invalid_domains = ['', 'test', 't.', 'test.', '.com', '-test', 'test...com', 'test-', 'test_domain.com', 'test.-domain.com'] for domain in invalid_domains: with self.assertRaises(ValidationError): validate_domain(domain) valid_domains = ['acme.com', 'x-x.y.3.z'] for domain in valid_domains: validate_domain(domain)