wehub-resource-sync
58 lines
2.1 KiB
Python
58 lines
2.1 KiB
Python
"""Tests for JSMPEG websocket authorization."""
|
|
|
|
import unittest
|
|
from types import SimpleNamespace
|
|
|
|
from frigate.config import FrigateConfig
|
|
from frigate.output.ws_auth import ws_has_camera_access
|
|
|
|
|
|
class TestWsHasCameraAccess(unittest.TestCase):
|
|
def setUp(self):
|
|
self.config = FrigateConfig(
|
|
mqtt={"host": "mqtt"},
|
|
auth={"roles": {"limited_user": ["front_door"]}},
|
|
cameras={
|
|
"front_door": {
|
|
"ffmpeg": {
|
|
"inputs": [
|
|
{"path": "rtsp://10.0.0.1:554/video", "roles": ["detect"]}
|
|
]
|
|
},
|
|
"detect": {"height": 1080, "width": 1920, "fps": 5},
|
|
},
|
|
"back_door": {
|
|
"ffmpeg": {
|
|
"inputs": [
|
|
{"path": "rtsp://10.0.0.2:554/video", "roles": ["detect"]}
|
|
]
|
|
},
|
|
"detect": {"height": 1080, "width": 1920, "fps": 5},
|
|
},
|
|
},
|
|
)
|
|
|
|
def _make_ws(self, role: str):
|
|
return SimpleNamespace(environ={"HTTP_REMOTE_ROLE": role})
|
|
|
|
def test_restricted_role_only_gets_allowed_camera(self):
|
|
ws = self._make_ws("limited_user")
|
|
self.assertTrue(ws_has_camera_access(ws, "front_door", self.config))
|
|
self.assertFalse(ws_has_camera_access(ws, "back_door", self.config))
|
|
|
|
def test_unrestricted_role_can_access_any_camera(self):
|
|
ws = self._make_ws("viewer")
|
|
self.assertTrue(ws_has_camera_access(ws, "front_door", self.config))
|
|
self.assertTrue(ws_has_camera_access(ws, "back_door", self.config))
|
|
|
|
def test_birdseye_requires_unrestricted_access(self):
|
|
self.assertTrue(
|
|
ws_has_camera_access(self._make_ws("admin"), "birdseye", self.config)
|
|
)
|
|
self.assertTrue(
|
|
ws_has_camera_access(self._make_ws("viewer"), "birdseye", self.config)
|
|
)
|
|
self.assertFalse(
|
|
ws_has_camera_access(self._make_ws("limited_user"), "birdseye", self.config)
|
|
)
|