Test for correct nonce_checking across endpoints.

oauthlib · Jul 26, 2013 · 2f01d5b · 2f01d5b
1 parent 42a00c8
commit 2f01d5b
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 3 deletions.
diff --git a/tests/oauth1/rfc5849/endpoints/test_access_token.py b/tests/oauth1/rfc5849/endpoints/test_access_token.py
@@ -1,6 +1,6 @@
 from __future__ import unicode_literals, absolute_import
 
-from mock import MagicMock
+from mock import MagicMock, ANY
 from ....unittest import TestCase
 
 from oauthlib.oauth1.rfc5849 import Client
@@ -84,3 +84,7 @@ def test_valid_request(self):
                 self.uri, headers=self.headers)
         self.assertEqual(s, 200)
         self.assertIn('oauth_token', b)
+        self.validator.validate_timestamp_and_nonce.assert_called_once_with(
+             self.client.client_key, ANY, ANY, ANY,
+             request_token=self.client.resource_owner_key)
+
diff --git a/tests/oauth1/rfc5849/endpoints/test_request_token.py b/tests/oauth1/rfc5849/endpoints/test_request_token.py
@@ -1,6 +1,6 @@
 from __future__ import unicode_literals, absolute_import
 
-from mock import MagicMock
+from mock import MagicMock, ANY
 from ....unittest import TestCase
 
 from oauthlib.oauth1.rfc5849 import Client
@@ -76,6 +76,9 @@ def test_valid_request(self):
                 self.uri, headers=self.headers)
         self.assertEqual(s, 200)
         self.assertIn('oauth_token', b)
+        self.validator.validate_timestamp_and_nonce.assert_called_once_with(
+             self.client.client_key, ANY, ANY, ANY,
+             request_token=self.client.resource_owner_key)
 
     def test_uri_provided_realm(self):
         client = Client('foo', callback_uri='https://c.b/cb',

diff --git a/tests/oauth1/rfc5849/endpoints/test_resource.py b/tests/oauth1/rfc5849/endpoints/test_resource.py
@@ -1,6 +1,6 @@
 from __future__ import unicode_literals, absolute_import
 
-from mock import MagicMock
+from mock import MagicMock, ANY
 from ....unittest import TestCase
 
 from oauthlib.oauth1.rfc5849 import Client
@@ -76,3 +76,6 @@ def test_valid_request(self):
         v, r = self.endpoint.validate_protected_resource_request(
                 self.uri, headers=self.headers)
         self.assertTrue(v)
+        self.validator.validate_timestamp_and_nonce.assert_called_once_with(
+             self.client.client_key, ANY, ANY, ANY,
+             access_token=self.client.resource_owner_key)