mi=4dZddlmZddlmZGddZy)z Permission checks module )Logger) HTTPUtilscdeZdZdZd dedefdZdefdZdZ de fdZ defd Z defd Z defd Zy )PermissionChecksz3Check API permissions and role-based access controlloggerbase_urlc||_t|||_ ddd}|jjd|\}}}|rL|dk(rG|jj |j d|jj dd n"|jjdd |d |gd |_ y#t$r)}|jjdd |Yd}~7d}~wwxYw)NAsukarisz Asukaris123!)usernamepasswordz/api/auth/login) json_data access_token PERMISSIONSz"Successfully logged in as AsukariszFailed to login: status_code=z , response=zFailed to setup auth token: )zGET /api/healthzGET /api/streamszGET /api/streams/latestzGET /api/streams/popularzGET /api/streams/randomzGET /api/streams/searchzGET /api/streams/{stream_id}z"POST /api/streams/{stream_id}/playz%GET /api/streams/{stream_id}/commentsz.GET /api/streams/{stream_id}/download-progressz0GET /api/streams/{stream_id}/processing-progressz7GET /api/streams/{stream_id}/thumbnail/{segment_number}z!GET /api/streams/{stream_id}/chatz-GET /api/streams/{stream_id}/chat/proxy-imagezGET /api/auth/twitch/callbackzGET /zGET /api/eventszPOST /api/auth/registerzPOST /api/auth/loginzPOST /api/auth/refreshzPOST /api/auth/logout) rr http_utilspostset_auth_tokengetinfowarning Exceptionknown_public_endpoints)selfrr login_datasuccess status_coderesponsees >/home/factor_ks/STREAMA2026/tests/modules/permission_checks.py__init__zPermissionChecks.__init__ s #FH5 S'*J.2__-A-ABS_i-A-j *G[(;#-..x||N/KL   0TU ##M5RS^R__jksjt3uv ' #  S KK   1MaS/Q R R SsBB:: C,C''C,returncP|jjdd}|jxr|}|jxr|}|j xr|}|j |r|jj dd|S|jjdd|S)zRun all permission checkszPermission ChecksTrzAll permission checks passedzSome permission checks failed)rheader"_check_authentication_requirements_check_role_based_access_check_admin_endpoints_print_role_summaryrerror)rall_oks rrun_all_checkszPermissionChecks.run_all_checks8s ./88:Ev..0;V,,.96   "  KK   /M N  KK  m-L M c p|jjdd |jjd\}}}|r|dk7r|jj ddy|}i}|D]*}|jdd}||vrd ||<||xxd z cc<,t |j D](\}}|jjdd |d |d *t|} |jjdd| y#t$r)} |jj dd| Yd} ~ yd} ~ wwxYw)z"Print summary of endpoints by rolerz Role Summary/api/permissionsrz&Failed to load permissions for summaryNcategory uncategorizedrz z: z permissionszTotal permissions: z!Failed to generate role summary: ) rrrrr(sorteditemslenr) rrrr permissionscategory_countpermr.counttotal_permissionsrs rr'z$PermissionChecks._print_role_summaryQsM 7 V-1__-@-@AS-T *G[(kS0 !!-1YZ"K N# .88J@>1/0N8,x(A-(  .$*.*>*>*@#A V%   "XJb|0TU V!$K 0  KK  ].ABSAT,U V V KK  m/PQRPS-T U U VsAD!B!D D5 D00D5c |jjd\}}}|r|dk7rddiS|}i}|D]g}|jdd}|jdd}||vrg||<||j|jd d|jd d|d i|t|d S#t$r} dt | icYd } ~ Sd } ~ wwxYw)z>Get detailed summary of all endpoints with roles for reportingr-rr(zFailed to load permissionsr.r/endpoint_patternname description)r<r=r:) categoriesr8N)rrappendr3rstr) rrrrr4category_endpointsr6r.r:rs r get_detailed_permissions_summaryz1PermissionChecks.get_detailed_permissions_summaryos %-1__-@-@AS-T *G[(kS0!=>>"K"$ # 88J@#'88,>#C #5535&x0"8,33 HHVR0#'88M2#>(85 1%(%5   %SV$ $ %s#)B*A=B** C 3 C?C C c |jjdd |jjd\}}}|r|dk7r|jj ddy|}g}g}|D]j}|jdd}|s|j d d } t | d k(s9| d } | d } |j| | |f|j| | |fl|s|jjdd y d} |D] \} } }| jdd}|jdd}|jdd}|jdd}|jdd}|jdd}|jdg}|jdg}|rdj|nd}| d | }||jv}|jj| |d\}}}|r,|dk(r'|jjd| d | d |d!|r,|d"k(r'|jjd| d | d#|d!@|r)|d$k(r$|jjd| d | d%k|r)|d&k(r$|jjd| d | d'|rR|r'|jjd| d | d(|d)|jj d| d | d*|d)d} |jjd| d | d+|D](\} } }|jjd| d | d,*| S#t$r)} |jj dd| Yd} ~ yd} ~ wwxYw)-z5Check that protected endpoints require authenticationrz'Checking authentication requirements...r-r'Failed to load permissions from backendFr:r; r0rz+No protected endpoints found in permissionsTFailed to load permissions: Nz {stream_id}$00000000-0000-0000-0000-000000000000z{tag_id} {user_id}z {comment_id}z{key}test_key {filename}test_file.jsonrequired_rolesaccessible_rolesz, all authenticatedz: requires auth (roles: ) ✓z: protected (roles: : not found (placeholder ID)z&: method not allowed (endpoint exists)z.: Unregistered (known public endpoint, roles: )z": accessible without auth (roles: z: request failedz!: Unregistered (no auth required))rrrrr(splitr3r?rrreplacejoinrrequestr)rrrrr4protected_endpointspublic_endpointsr6r:partsmethodendpointrr) perm_data test_endpointrMrN roles_str endpoint_keyis_known_public_s rr$z3PermissionChecks._check_authentication_requirementss (QR -1__-@-@AS-T *G[(kS0 !!-1Z["K"$ ! # J#'88,>#C #,223:E5zQ!&q#(8+22Hfd3KL(//640HI J' ##M3`a'+>% [ 'Hfi$,,]deM)11+?efM)11.BhiM)11':FM)11,@PQM']]+;R@N(}}-?D 5C .1I%XQxj1L*d.I.IIO'+oo&=&=fmch&=&i #G[!;#- ##MfXQxjH`aj`kkp3qr[C/ ##MfXQxjH\]f\ggl3mn[C/   6(!H:Ea0bc[C/   6(!H:Ek0lm"KK$$]vhazIwyBxCCD5EFKK%%mxq Jlmvlwwx5yz"F ##MfXQxjHX3YZK% [P,< e 'Hfi KK  ]vhazAb,c d e a  KK  m/KA3-O P s+AL8!L8 L8"AL88 M*M%%M*c t|jjdd |jjd\}}}|r|dk7r|jj ddy|}g}|D]V}|jdd}|s|j d d }t |d k(s9|d } |d } |j| | |fX |s|jjddyd} |D]\} } } | jdd}|jdd}| jdd}|}| d | }||jv}|jj| |d\}}}|r*|dvr&|jjd| d | d|d|r(|dk(r#|jjd| d | d|r&|jjd| d | d|d|jj d| d | d|dd} | S#t$r)} |jj dd | Yd} ~ yd} ~ wwxYw)z3Check that role-based access control is implementedrz%Checking role-based access control...r-rrDFr:r;rEr0rFrrGNz,No role-based endpoints found in permissionsTrIrHrKrLr.rPrRrT: protected (category: rSrUz: not found (may be optional)z1: Unregistered (known public endpoint, category: rXz%: accessible without role (category: )rrrrr(rYr3r?rrrZrr\r)rrrrr4role_endpointsr6r:r_r`rarr)rbrcr.rdrerfrgs rr%z)PermissionChecks._check_role_based_accesss (OP -1__-@-@AS-T *G[(kS0 !!-1Z["KN# H#'88,>#C #,223:E5zQ!&q#(8&--x.FG H KK   /] ^+9 # 'Hfi$,,[:`aM)11,@PQM!}}Z4H I%XQxj1L*d.I.IIO&*oo&=&=fmch&=&i #G[!;*4 ##MfXQxjH_`i_jjo3pq[C/   6(!H:Eb0cd"KK$$]vhazIz|E{FFG5HIKK%%mxq Jopyozz{5|}"F1 #4 G  KK  m/KA3-O P s*AH!H? H H H7H22H7c |jjdd |jjd\}}}|r|dk7r|jj ddy|}g}|D]n}|jdd}|jd d}|d k(s-|s0|j d d } t | d k(sQ| d} | d } |j| | |fp |s|jjddyd} |D] \} } }| jdd}|jdd}|jdd}|}|jj| |d\}}}|r+|dvr'|jjdd| d | d|d|r)|dk(r$|jjdd| d | d|r)|dk(r$|jjdd| d | d|jj dd| d | d |d!d} | S#t$r)} |jj dd| Yd} ~ yd} ~ wwxYw)"z,Check admin endpoints are properly protectedrz&Checking admin endpoints protection...r-rrDFr.r;r:z api/adminrEr0rFrrGNz'No admin endpoints found in permissionsTrIrHrKrLrPriz Admin route rjrSrUrVrWz: method not allowedz%: accessible without auth (category: rX) rrrrr(rYr3r?rrrZr\r)rrrrr4admin_endpointsr6r.r:r_r`rarr)rbrcrdrgs rr&z'PermissionChecks._check_admin_endpointss (PQ -1__-@-@AS-T *G[(kS0 !!-1Z["K O# I88J3#'88,>#C {*/?,223:E5zQ!&q#(8'..&$/GH I KK   /X Y+:  'Hfi$,,[:`aM)11,@PQM!}}Z4H I&*oo&=&=fmch&=&i #G[!;*4 ##M\&8*Tklukvv{3|}[C/   ,vhazQm0no[C/   ,vhazQe0fg !!-<xq RwyBxCCD2EF+ . A  KK  m/KA3-O P s0AH!2HH H8 H IH;;IN)zhttp://localhost:8000)__name__ __module__ __qualname____doc__rr@r boolr*r'dictrBr$r%r&r+rrrs_=+ v+ + Z2V<%$%>QDQf:$:x88r+rN)rqtests.utils.loggerrtests.utils.http_utilsrrrtr+rrws&,MMr+