diff options
Diffstat (limited to 'tests/auth_tests/test_auth_backends.py')
| -rw-r--r-- | tests/auth_tests/test_auth_backends.py | 36 |
1 files changed, 36 insertions, 0 deletions
diff --git a/tests/auth_tests/test_auth_backends.py b/tests/auth_tests/test_auth_backends.py index 3ea6ff6a69..77eeed3d60 100644 --- a/tests/auth_tests/test_auth_backends.py +++ b/tests/auth_tests/test_auth_backends.py @@ -1146,6 +1146,42 @@ class AuthenticateTests(TestCase): status_code=500, ) + @override_settings(AUTH_USER_MODEL="auth_tests.ErrorAdminUser") + def test_model_backend_authenticate_sensitive_variables(self): + try: + authenticate(username="testusername", password=self.sensitive_password) + except TypeError: + exc_info = sys.exc_info() + rf = RequestFactory() + response = technical_500_response(rf.get("/"), *exc_info) + self.assertNotContains(response, self.sensitive_password, status_code=500) + self.assertContains( + response, + '<tr><td>password</td><td class="code">' + "<pre>'********************'</pre></td></tr>", + html=True, + status_code=500, + ) + + @override_settings(AUTH_USER_MODEL="auth_tests.ErrorAdminUser") + async def test_model_backend_async_authenticate_sensitive_variables(self): + try: + await aauthenticate( + username="testusername", password=self.sensitive_password + ) + except TypeError: + exc_info = sys.exc_info() + rf = RequestFactory() + response = technical_500_response(rf.get("/"), *exc_info) + self.assertNotContains(response, self.sensitive_password, status_code=500) + self.assertContains( + response, + '<tr><td>password</td><td class="code">' + "<pre>'********************'</pre></td></tr>", + html=True, + status_code=500, + ) + def test_clean_credentials_sensitive_variables(self): try: # Passing in a list to cause an exception |