mirror of
https://github.com/crewAIInc/crewAI.git
synced 2026-01-08 15:48:29 +00:00
66567bdc2f
* feat: support oauth2 config for authentication * refactor: improve OAuth2 settings management The CLI now supports seamless integration with other authentication providers, since the client_id, issue, domain are now manage by the user * feat: support okta Device Authorization flow * chore: resolve linter issues * test: fix tests * test: adding tests for auth providers * test: fix broken test * refator: adding WorkOS paramenters as default settings auth * chore: improve oauth2 attributes description * refactor: simplify WorkOS getting values * fix: ensure Auth0 parameters is set when overrinding default auth provider * chore: remove TODO Auth0 no longer provides default values --------- Co-authored-by: Heitor Carvalho <heitor.scz@gmail.com>
103 lines
3.8 KiB
Python
103 lines
3.8 KiB
Python
import pytest
|
|
from crewai.cli.authentication.main import Oauth2Settings
|
|
from crewai.cli.authentication.providers.okta import OktaProvider
|
|
|
|
|
|
class TestOktaProvider:
|
|
|
|
@pytest.fixture(autouse=True)
|
|
def setup_method(self):
|
|
self.valid_settings = Oauth2Settings(
|
|
provider="okta",
|
|
domain="test-domain.okta.com",
|
|
client_id="test-client-id",
|
|
audience="test-audience"
|
|
)
|
|
self.provider = OktaProvider(self.valid_settings)
|
|
|
|
def test_initialization_with_valid_settings(self):
|
|
provider = OktaProvider(self.valid_settings)
|
|
assert provider.settings == self.valid_settings
|
|
assert provider.settings.provider == "okta"
|
|
assert provider.settings.domain == "test-domain.okta.com"
|
|
assert provider.settings.client_id == "test-client-id"
|
|
assert provider.settings.audience == "test-audience"
|
|
|
|
def test_get_authorize_url(self):
|
|
expected_url = "https://test-domain.okta.com/oauth2/default/v1/device/authorize"
|
|
assert self.provider.get_authorize_url() == expected_url
|
|
|
|
def test_get_authorize_url_with_different_domain(self):
|
|
settings = Oauth2Settings(
|
|
provider="okta",
|
|
domain="my-company.okta.com",
|
|
client_id="test-client",
|
|
audience="test-audience"
|
|
)
|
|
provider = OktaProvider(settings)
|
|
expected_url = "https://my-company.okta.com/oauth2/default/v1/device/authorize"
|
|
assert provider.get_authorize_url() == expected_url
|
|
|
|
def test_get_token_url(self):
|
|
expected_url = "https://test-domain.okta.com/oauth2/default/v1/token"
|
|
assert self.provider.get_token_url() == expected_url
|
|
|
|
def test_get_token_url_with_different_domain(self):
|
|
settings = Oauth2Settings(
|
|
provider="okta",
|
|
domain="another-domain.okta.com",
|
|
client_id="test-client",
|
|
audience="test-audience"
|
|
)
|
|
provider = OktaProvider(settings)
|
|
expected_url = "https://another-domain.okta.com/oauth2/default/v1/token"
|
|
assert provider.get_token_url() == expected_url
|
|
|
|
def test_get_jwks_url(self):
|
|
expected_url = "https://test-domain.okta.com/oauth2/default/v1/keys"
|
|
assert self.provider.get_jwks_url() == expected_url
|
|
|
|
def test_get_jwks_url_with_different_domain(self):
|
|
settings = Oauth2Settings(
|
|
provider="okta",
|
|
domain="dev.okta.com",
|
|
client_id="test-client",
|
|
audience="test-audience"
|
|
)
|
|
provider = OktaProvider(settings)
|
|
expected_url = "https://dev.okta.com/oauth2/default/v1/keys"
|
|
assert provider.get_jwks_url() == expected_url
|
|
|
|
def test_get_issuer(self):
|
|
expected_issuer = "https://test-domain.okta.com/oauth2/default"
|
|
assert self.provider.get_issuer() == expected_issuer
|
|
|
|
def test_get_issuer_with_different_domain(self):
|
|
settings = Oauth2Settings(
|
|
provider="okta",
|
|
domain="prod.okta.com",
|
|
client_id="test-client",
|
|
audience="test-audience"
|
|
)
|
|
provider = OktaProvider(settings)
|
|
expected_issuer = "https://prod.okta.com/oauth2/default"
|
|
assert provider.get_issuer() == expected_issuer
|
|
|
|
def test_get_audience(self):
|
|
assert self.provider.get_audience() == "test-audience"
|
|
|
|
def test_get_audience_assertion_error_when_none(self):
|
|
settings = Oauth2Settings(
|
|
provider="okta",
|
|
domain="test-domain.okta.com",
|
|
client_id="test-client-id",
|
|
audience=None
|
|
)
|
|
provider = OktaProvider(settings)
|
|
|
|
with pytest.raises(AssertionError):
|
|
provider.get_audience()
|
|
|
|
def test_get_client_id(self):
|
|
assert self.provider.get_client_id() == "test-client-id"
|