sentinel/tests/sentry/auth/providers/google/test_provider.py

import pytest

from sentry.auth.exceptions import IdentityNotValid
from sentry.auth.providers.google.constants import DATA_VERSION
from sentry.models.authidentity import AuthIdentity
from sentry.models.authprovider import AuthProvider
from sentry.testutils.cases import TestCase
from sentry.testutils.silo import control_silo_test


@control_silo_test
class GoogleOAuth2ProviderTest(TestCase):
    def setUp(self):
        self.auth_provider_inst = AuthProvider.objects.create(
            provider="google", organization_id=self.organization.id
        )
        super().setUp()

    def test_refresh_identity_without_refresh_token(self):
        auth_identity = AuthIdentity.objects.create(
            auth_provider=self.auth_provider_inst,
            user=self.user,
            data={"access_token": "access_token"},
        )

        provider = self.auth_provider_inst.get_provider()

        with pytest.raises(IdentityNotValid):
            provider.refresh_identity(auth_identity)

    def test_handles_multiple_domains(self):
        self.auth_provider_inst.update(config={"domains": ["example.com"]})

        provider = self.auth_provider_inst.get_provider()
        assert provider.domains == ["example.com"]

    def test_handles_legacy_single_domain(self):
        self.auth_provider_inst.update(config={"domain": "example.com"})

        provider = self.auth_provider_inst.get_provider()
        assert provider.domains == ["example.com"]

    def test_build_config(self):
        provider = self.auth_provider_inst.get_provider()
        state = {
            "domain": "example.com",
            "user": {
                "iss": "accounts.google.com",
                "at_hash": "HK6E_P6Dh8Y93mRNtsDB1Q",
                "email_verified": "true",
                "sub": "10769150350006150715113082367",
                "azp": "1234987819200.apps.googleusercontent.com",
                "email": "[email protected]",
                "aud": "1234987819200.apps.googleusercontent.com",
                "iat": 1353601026,
                "exp": 1353604926,
                "hd": "example.com",
            },
        }
        result = provider.build_config(state)
        assert result == {"domains": ["example.com"], "version": DATA_VERSION}