mirror of https://github.com/ansible/ansible.git
Artur
2 years ago
committed by
GitHub
parent
79f67ed561
commit
a26c325bd8
@ -0,0 +1,2 @@
|
||||
bugfixes:
|
||||
- uri module - failed status when Authentication Bearer used with netrc, because Basic authentication was by default. Fix now allows to ignore netrc by changing use_netrc=False (https://github.com/ansible/ansible/issues/74397).
|
||||
@ -0,0 +1,67 @@
|
||||
- name: Write out netrc
|
||||
copy:
|
||||
dest: "{{ remote_tmp_dir }}/netrc"
|
||||
content: |
|
||||
machine {{ httpbin_host }}
|
||||
login foo
|
||||
password bar
|
||||
|
||||
- name: Test Bearer authorization is failed with netrc
|
||||
get_url:
|
||||
url: https://{{ httpbin_host }}/bearer
|
||||
headers:
|
||||
Authorization: Bearer foobar
|
||||
dest: "{{ remote_tmp_dir }}/msg.txt"
|
||||
ignore_errors: yes
|
||||
environment:
|
||||
NETRC: "{{ remote_tmp_dir }}/netrc"
|
||||
|
||||
- name: Read msg.txt file
|
||||
ansible.builtin.slurp:
|
||||
src: "{{ remote_tmp_dir }}/msg.txt"
|
||||
register: response_failed
|
||||
|
||||
- name: Parse token from msg.txt
|
||||
set_fact:
|
||||
token: "{{ (response_failed['content'] | b64decode | from_json).token }}"
|
||||
|
||||
- name: assert Test Bearer authorization is failed with netrc
|
||||
assert:
|
||||
that:
|
||||
- "token.find('v=' ~ 'Zm9vOmJhcg') == -1"
|
||||
fail_msg: "Was expecting 'foo:bar' in base64, but received: {{ response_failed['content'] | b64decode | from_json }}"
|
||||
success_msg: "Expected Basic authentication even Bearer headers were sent"
|
||||
|
||||
- name: Test Bearer authorization is successfull with use_netrc=False
|
||||
get_url:
|
||||
url: https://{{ httpbin_host }}/bearer
|
||||
use_netrc: false
|
||||
headers:
|
||||
Authorization: Bearer foobar
|
||||
dest: "{{ remote_tmp_dir }}/msg.txt"
|
||||
environment:
|
||||
NETRC: "{{ remote_tmp_dir }}/netrc"
|
||||
|
||||
- name: Read msg.txt file
|
||||
ansible.builtin.slurp:
|
||||
src: "{{ remote_tmp_dir }}/msg.txt"
|
||||
register: response
|
||||
|
||||
- name: Parse token from msg.txt
|
||||
set_fact:
|
||||
token: "{{ (response['content'] | b64decode | from_json).token }}"
|
||||
|
||||
- name: assert Test Bearer authorization is successfull with use_netrc=False
|
||||
assert:
|
||||
that:
|
||||
- "token.find('v=' ~ 'foobar') == -1"
|
||||
fail_msg: "Was expecting Bearer token 'foobar', but received: {{ response['content'] | b64decode | from_json }}"
|
||||
success_msg: "Bearer authentication successfull without netrc"
|
||||
|
||||
- name: Clean up
|
||||
file:
|
||||
path: "{{ item }}"
|
||||
state: absent
|
||||
with_items:
|
||||
- "{{ remote_tmp_dir }}/netrc"
|
||||
- "{{ remote_tmp_dir }}/msg.txt"
|
||||
@ -0,0 +1,37 @@
|
||||
- name: Write out ~/.netrc
|
||||
copy:
|
||||
dest: "~/.netrc"
|
||||
# writing directly to ~/.netrc because plug-in doesn't support NETRC environment overwrite
|
||||
content: |
|
||||
machine {{ httpbin_host }}
|
||||
login foo
|
||||
password bar
|
||||
mode: "0600"
|
||||
|
||||
- name: test Url lookup with ~/.netrc forced Basic auth
|
||||
set_fact:
|
||||
web_data: "{{ lookup('ansible.builtin.url', 'https://{{ httpbin_host }}/bearer', headers={'Authorization':'Bearer foobar'}) }}"
|
||||
ignore_errors: yes
|
||||
|
||||
- name: assert test Url lookup with ~/.netrc forced Basic auth
|
||||
assert:
|
||||
that:
|
||||
- "web_data.token.find('v=' ~ 'Zm9vOmJhcg==') == -1"
|
||||
fail_msg: "Was expecting 'foo:bar' in base64, but received: {{ web_data }}"
|
||||
success_msg: "Expected Basic authentication even Bearer headers were sent"
|
||||
|
||||
- name: test Url lookup with use_netrc=False
|
||||
set_fact:
|
||||
web_data: "{{ lookup('ansible.builtin.url', 'https://{{ httpbin_host }}/bearer', headers={'Authorization':'Bearer foobar'}, use_netrc='False') }}"
|
||||
|
||||
- name: assert test Url lookup with netrc=False used Bearer authentication
|
||||
assert:
|
||||
that:
|
||||
- "web_data.token.find('v=' ~ 'foobar') == -1"
|
||||
fail_msg: "Was expecting 'foobar' Bearer token, but received: {{ web_data }}"
|
||||
success_msg: "Expected to ignore ~/.netrc and authorize with Bearer token"
|
||||
|
||||
- name: Clean up. Removing ~/.netrc
|
||||
file:
|
||||
path: ~/.netrc
|
||||
state: absent
|
||||
@ -0,0 +1,51 @@
|
||||
- name: Write out netrc
|
||||
copy:
|
||||
dest: "{{ remote_tmp_dir }}/netrc"
|
||||
content: |
|
||||
machine {{ httpbin_host }}
|
||||
login foo
|
||||
password bar
|
||||
|
||||
- name: Test Bearer authorization is failed with netrc
|
||||
uri:
|
||||
url: https://{{ httpbin_host }}/bearer
|
||||
return_content: yes
|
||||
headers:
|
||||
Authorization: Bearer foobar
|
||||
ignore_errors: yes
|
||||
environment:
|
||||
NETRC: "{{ remote_tmp_dir }}/netrc"
|
||||
register: response_failed
|
||||
|
||||
- name: assert Test Bearer authorization is failed with netrc
|
||||
assert:
|
||||
that:
|
||||
- response_failed.json.token != 'foobar'
|
||||
- "'Zm9vOmJhcg==' in response_failed.json.token"
|
||||
fail_msg: "Was expecting 'foo:bar' in base64, but received: {{ response_failed }}"
|
||||
success_msg: "Expected to fail because netrc is using Basic authentication by default"
|
||||
|
||||
- name: Test Bearer authorization is successfull with use_netrc=False
|
||||
uri:
|
||||
url: https://{{ httpbin_host }}/bearer
|
||||
use_netrc: false
|
||||
return_content: yes
|
||||
headers:
|
||||
Authorization: Bearer foobar
|
||||
environment:
|
||||
NETRC: "{{ remote_tmp_dir }}/netrc"
|
||||
register: response
|
||||
|
||||
- name: assert Test Bearer authorization is successfull with use_netrc=False
|
||||
assert:
|
||||
that:
|
||||
- response.status == 200
|
||||
- response.json.token == 'foobar'
|
||||
- response.url == 'https://{{ httpbin_host }}/bearer'
|
||||
fail_msg: "Was expecting successful Bearer authentication, but received: {{ response }}"
|
||||
success_msg: "Bearer authentication successfull when netrc is ignored."
|
||||
|
||||
- name: Clean up
|
||||
file:
|
||||
dest: "{{ remote_tmp_dir }}/netrc"
|
||||
state: absent
|
||||
Loading…
Reference in New Issue