Added tests for LoginRequiredMiddleware

These explicitly test the login exempt urls setting.

Author: tim-schilling

tests/settings.py

@@ -73,6 +73,7 @@
     "BOOLEAN_CLAIM_MAPPING": {"is_staff": "user_is_staff",
                               "is_superuser": "user_is_superuser"},
     "CONFIG_RELOAD_INTERVAL": 0,  # Always reload settings
+    "LOGIN_EXEMPT_URLS": ["^api", "nested/path/"],
 }
 
 LOGIN_URL = "django_auth_adfs:login"

tests/test_middleware.py

@@ -0,0 +1,38 @@
+from django.contrib.auth.models import AnonymousUser
+from django.http import HttpResponseRedirect
+from django.test import RequestFactory, TestCase, override_settings
+from django_auth_adfs.middleware import LoginRequiredMiddleware
+
+
+class LoginRequiredMiddlewareTestCase(TestCase):
+    def setUp(self):
+        self.rf = RequestFactory()
+        self.middleware = LoginRequiredMiddleware(get_response=lambda *args: None)
+
+    def test_not_exempt_redirects(self):
+        request = self.rf.get('/page/')
+        request.user = AnonymousUser()
+        response = self.middleware(request)
+        assert isinstance(response, HttpResponseRedirect)
+
+        request = self.rf.get('/nested/redirect/')
+        request.user = AnonymousUser()
+        response = self.middleware(request)
+        assert isinstance(response, HttpResponseRedirect)
+
+
+    def test_exempt(self):
+        request = self.rf.get('/api')
+        request.user = AnonymousUser()
+        response = self.middleware(request)
+        assert response is None
+
+        request = self.rf.get('/nested/path/')
+        request.user = AnonymousUser()
+        response = self.middleware(request)
+        assert response is None
+
+        request = self.rf.get('/nested/path/further')
+        request.user = AnonymousUser()
+        response = self.middleware(request)
+        assert response is None

tests/urls.py

@@ -1,6 +1,9 @@
-from django.urls import include, re_path
+from django.urls import include, re_path, path
+
+from .views import page
 
 urlpatterns = [
     re_path(r'^oauth2/', include('django_auth_adfs.urls')),
     re_path(r'^oauth2/', include('django_auth_adfs.drf_urls')),
+    path("page", page),
 ]

tests/views.py

@@ -1,2 +1,5 @@
 def test_failed_response(request, error_message, status):
     pass
+
+def page(request):
+    pass