summaryrefslogtreecommitdiff
path: root/service
diff options
context:
space:
mode:
authorRoald de Vries <rdevries@thoughtworks.com>2016-12-01 18:25:11 +0100
committerRoald de Vries <rdevries@thoughtworks.com>2016-12-01 18:25:11 +0100
commit082d6a133a892226e6436aab26dd61f759cad30e (patch)
treed43d844b5eee9b1543b985c4a6d336e7efad2dd2 /service
parent05551265c641ac51d897a49e35f390fde7bc4d8c (diff)
fix csrf in retrieve attachment test
Diffstat (limited to 'service')
-rw-r--r--service/test/integration/test_retrieve_attachment.py4
-rw-r--r--service/test/support/integration/app_test_client.py5
2 files changed, 6 insertions, 3 deletions
diff --git a/service/test/integration/test_retrieve_attachment.py b/service/test/integration/test_retrieve_attachment.py
index b46d40d5..ac6e52e7 100644
--- a/service/test/integration/test_retrieve_attachment.py
+++ b/service/test/integration/test_retrieve_attachment.py
@@ -86,7 +86,9 @@ class RetrieveAttachmentTest(SoledadTestBase):
datagen, headers = multipart_encode([file])
post_data = "".join(datagen)
- _, req = yield self.app_test_client.post_attachment(post_data, headers)
+ response, first_request = yield self.app_test_client.get('/', as_json=False)
+ session = first_request.getSession()
+ _, req = yield self.app_test_client.post_attachment(post_data, headers, session)
self.assertEqual(201, req.code)
self.assertEqual('/attachment/B5B4ED80AC3B894523D72E375DACAA2FC6606C18EDF680FE95903086C8B5E14A', req.responseHeaders.getRawHeaders('location')[0])
diff --git a/service/test/support/integration/app_test_client.py b/service/test/support/integration/app_test_client.py
index e5d42505..0bc2eacb 100644
--- a/service/test/support/integration/app_test_client.py
+++ b/service/test/support/integration/app_test_client.py
@@ -372,8 +372,9 @@ class AppTestClient(object):
defer.returnValue((res, req))
@defer.inlineCallbacks
- def post_attachment(self, data, headers):
- deferred_result, req = self.post('/attachment', body=data, headers=headers)
+ def post_attachment(self, data, headers, session):
+ csrf = IPixelatedSession(session).get_csrf_token()
+ deferred_result, req = self.post('/attachment', body=data, headers=headers, csrf=csrf, session=session)
res = yield deferred_result
defer.returnValue((res, req))