You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
94 lines
3.4 KiB
94 lines
3.4 KiB
# ADN DMR Peer Server - tests infrastructure mqtt auth
|
|
#
|
|
# Copyright (C) 2026 Rodrigo Pérez, CE5RPY <ce5rpy@qmd.cl>
|
|
#
|
|
###############################################################################
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, write to the Free Software Foundation,
|
|
# Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
|
###############################################################################
|
|
|
|
"""MQTT username/password authentication wiring."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from typing import Any
|
|
|
|
from adn_server.infrastructure.twisted_adapters.report.mqtt_config import MqttBroker, MqttSettings
|
|
from adn_server.infrastructure.twisted_adapters.report.mqtt_publisher import PahoReportMqttPublisher
|
|
|
|
|
|
class _AuthCapturingClient:
|
|
def __init__(self, **kwargs: Any) -> None:
|
|
self.kwargs = kwargs
|
|
self.auth: tuple[str, str | None] | None = None
|
|
self.tls: dict[str, Any] | None = None
|
|
|
|
def username_pw_set(self, username: str, password: str | None) -> None:
|
|
self.auth = (username, password)
|
|
|
|
def tls_set(self, **kwargs: Any) -> None:
|
|
self.tls = kwargs
|
|
|
|
def connect(self, host: str, port: int, keepalive: int) -> None:
|
|
self.connect_args = (host, port, keepalive)
|
|
|
|
def loop_start(self) -> None:
|
|
pass
|
|
|
|
|
|
class _FakeMqttModule:
|
|
MQTTv311 = 4
|
|
CallbackAPIVersion = type("CallbackAPIVersion", (), {"VERSION2": 2})
|
|
|
|
def Client(self, **kwargs: Any) -> _AuthCapturingClient:
|
|
return _AuthCapturingClient(**kwargs)
|
|
|
|
|
|
def _settings(**kwargs: Any) -> MqttSettings:
|
|
defaults = {
|
|
"broker": MqttBroker(host="broker", port=1883, use_tls=False, display_url="mqtt://broker:1883"),
|
|
"topic_prefix": "adn/1",
|
|
"client_id": "test",
|
|
"username": "ops",
|
|
"password": "secret",
|
|
"qos": 0,
|
|
}
|
|
defaults.update(kwargs)
|
|
return MqttSettings(**defaults)
|
|
|
|
|
|
def test_start_applies_username_password(monkeypatch):
|
|
fake = _FakeMqttModule()
|
|
monkeypatch.setattr(
|
|
"adn_server.infrastructure.twisted_adapters.report.mqtt_publisher.mqtt",
|
|
fake,
|
|
)
|
|
pub = PahoReportMqttPublisher(_settings())
|
|
pub.start(wire=object(), get_systems=lambda: {}, routing_table_for_report=lambda: {})
|
|
assert pub._client is not None
|
|
assert pub._client.auth == ("ops", "secret")
|
|
|
|
|
|
def test_start_tls_with_cafile(monkeypatch):
|
|
fake = _FakeMqttModule()
|
|
monkeypatch.setattr(
|
|
"adn_server.infrastructure.twisted_adapters.report.mqtt_publisher.mqtt",
|
|
fake,
|
|
)
|
|
broker = MqttBroker(host="secure", port=8883, use_tls=True, display_url="mqtts://secure:8883")
|
|
pub = PahoReportMqttPublisher(_settings(broker=broker, cafile="/etc/ssl/certs/ca.pem"))
|
|
pub.start(wire=object(), get_systems=lambda: {}, routing_table_for_report=lambda: {})
|
|
assert pub._client is not None
|
|
assert pub._client.tls == {"ca_certs": "/etc/ssl/certs/ca.pem"}
|