mirror of
https://github.com/crewAIInc/crewAI.git
synced 2026-01-07 15:18:29 +00:00
66567bdc2f
* feat: support oauth2 config for authentication * refactor: improve OAuth2 settings management The CLI now supports seamless integration with other authentication providers, since the client_id, issue, domain are now manage by the user * feat: support okta Device Authorization flow * chore: resolve linter issues * test: fix tests * test: adding tests for auth providers * test: fix broken test * refator: adding WorkOS paramenters as default settings auth * chore: improve oauth2 attributes description * refactor: simplify WorkOS getting values * fix: ensure Auth0 parameters is set when overrinding default auth provider * chore: remove TODO Auth0 no longer provides default values --------- Co-authored-by: Heitor Carvalho <heitor.scz@gmail.com>
101 lines
3.6 KiB
Python
101 lines
3.6 KiB
Python
import pytest
|
|
from crewai.cli.authentication.main import Oauth2Settings
|
|
from crewai.cli.authentication.providers.workos import WorkosProvider
|
|
|
|
|
|
class TestWorkosProvider:
|
|
|
|
@pytest.fixture(autouse=True)
|
|
def setup_method(self):
|
|
self.valid_settings = Oauth2Settings(
|
|
provider="workos",
|
|
domain="login.company.com",
|
|
client_id="test-client-id",
|
|
audience="test-audience"
|
|
)
|
|
self.provider = WorkosProvider(self.valid_settings)
|
|
|
|
def test_initialization_with_valid_settings(self):
|
|
provider = WorkosProvider(self.valid_settings)
|
|
assert provider.settings == self.valid_settings
|
|
assert provider.settings.provider == "workos"
|
|
assert provider.settings.domain == "login.company.com"
|
|
assert provider.settings.client_id == "test-client-id"
|
|
assert provider.settings.audience == "test-audience"
|
|
|
|
def test_get_authorize_url(self):
|
|
expected_url = "https://login.company.com/oauth2/device_authorization"
|
|
assert self.provider.get_authorize_url() == expected_url
|
|
|
|
def test_get_authorize_url_with_different_domain(self):
|
|
settings = Oauth2Settings(
|
|
provider="workos",
|
|
domain="login.example.com",
|
|
client_id="test-client",
|
|
audience="test-audience"
|
|
)
|
|
provider = WorkosProvider(settings)
|
|
expected_url = "https://login.example.com/oauth2/device_authorization"
|
|
assert provider.get_authorize_url() == expected_url
|
|
|
|
def test_get_token_url(self):
|
|
expected_url = "https://login.company.com/oauth2/token"
|
|
assert self.provider.get_token_url() == expected_url
|
|
|
|
def test_get_token_url_with_different_domain(self):
|
|
settings = Oauth2Settings(
|
|
provider="workos",
|
|
domain="api.workos.com",
|
|
client_id="test-client",
|
|
audience="test-audience"
|
|
)
|
|
provider = WorkosProvider(settings)
|
|
expected_url = "https://api.workos.com/oauth2/token"
|
|
assert provider.get_token_url() == expected_url
|
|
|
|
def test_get_jwks_url(self):
|
|
expected_url = "https://login.company.com/oauth2/jwks"
|
|
assert self.provider.get_jwks_url() == expected_url
|
|
|
|
def test_get_jwks_url_with_different_domain(self):
|
|
settings = Oauth2Settings(
|
|
provider="workos",
|
|
domain="auth.enterprise.com",
|
|
client_id="test-client",
|
|
audience="test-audience"
|
|
)
|
|
provider = WorkosProvider(settings)
|
|
expected_url = "https://auth.enterprise.com/oauth2/jwks"
|
|
assert provider.get_jwks_url() == expected_url
|
|
|
|
def test_get_issuer(self):
|
|
expected_issuer = "https://login.company.com"
|
|
assert self.provider.get_issuer() == expected_issuer
|
|
|
|
def test_get_issuer_with_different_domain(self):
|
|
settings = Oauth2Settings(
|
|
provider="workos",
|
|
domain="sso.company.com",
|
|
client_id="test-client",
|
|
audience="test-audience"
|
|
)
|
|
provider = WorkosProvider(settings)
|
|
expected_issuer = "https://sso.company.com"
|
|
assert provider.get_issuer() == expected_issuer
|
|
|
|
def test_get_audience(self):
|
|
assert self.provider.get_audience() == "test-audience"
|
|
|
|
def test_get_audience_fallback_to_default(self):
|
|
settings = Oauth2Settings(
|
|
provider="workos",
|
|
domain="login.company.com",
|
|
client_id="test-client-id",
|
|
audience=None
|
|
)
|
|
provider = WorkosProvider(settings)
|
|
assert provider.get_audience() == ""
|
|
|
|
def test_get_client_id(self):
|
|
assert self.provider.get_client_id() == "test-client-id"
|