init CTFd source

tests/cache/test_cache.py

@@ -0,0 +1,110 @@
+#!/usr/bin/env python
+# -*- coding: utf-8 -*-
+
+from redis.exceptions import ConnectionError
+
+from CTFd.cache import clear_all_user_sessions, clear_user_session
+from CTFd.config import TestingConfig
+from CTFd.models import Users
+from CTFd.utils.security.auth import login_user
+from CTFd.utils.user import get_current_user, is_admin
+from tests.helpers import create_ctfd, destroy_ctfd, register_user
+
+
+def test_clear_user_session():
+    app = create_ctfd()
+    with app.app_context():
+        register_user(app)
+
+        # Users by default should have a non-admin type
+        user = Users.query.filter_by(id=2).first()
+        with app.test_request_context("/"):
+            login_user(user)
+            user = get_current_user()
+            assert user.id == 2
+            assert user.type == "user"
+            assert is_admin() is False
+
+            # Set the user's updated type
+            user = Users.query.filter_by(id=2).first()
+            user.type = "admin"
+            app.db.session.commit()
+
+            # Should still return False because this is still cached
+            assert is_admin() is False
+
+            clear_user_session(user_id=2)
+
+            # Should now return True after clearing cache
+            assert is_admin() is True
+    destroy_ctfd(app)
+
+
+def test_clear_all_user_sessions():
+    app = create_ctfd()
+    with app.app_context():
+        register_user(app)
+
+        # Users by default should have a non-admin type
+        user = Users.query.filter_by(id=2).first()
+        with app.test_request_context("/"):
+            login_user(user)
+            user = get_current_user()
+            assert user.id == 2
+            assert user.type == "user"
+            assert is_admin() is False
+
+            # Set the user's updated type
+            user = Users.query.filter_by(id=2).first()
+            user.type = "admin"
+            app.db.session.commit()
+
+            # Should still return False because this is still cached
+            assert is_admin() is False
+
+            clear_all_user_sessions()
+
+            # Should now return True after clearing cache
+            assert is_admin() is True
+    destroy_ctfd(app)
+
+
+def test_cache_subclass_commands():
+    app = create_ctfd()
+    with app.app_context():
+        from CTFd.cache import cache
+
+        cache.inc("testing_inc")
+        resp = cache.inc("testing_inc")
+        assert resp == 2
+        assert cache.get("testing_inc") == 2
+        cache.expire("testing_inc", 0)
+        assert cache.get("testing_inc") is None
+        resp = cache.inc("testing_inc")
+        assert resp == 1
+    destroy_ctfd(app)
+
+
+def test_redis_cache_subclass_commands():
+    class RedisConfig(TestingConfig):
+        REDIS_URL = "redis://localhost:6379/1"
+        CACHE_REDIS_URL = "redis://localhost:6379/1"
+        CACHE_TYPE = "redis"
+
+    try:
+        app = create_ctfd(config=RedisConfig)
+    except ConnectionError:
+        print("Failed to connect to redis. Skipping test.")
+    else:
+        with app.app_context():
+            from CTFd.cache import cache
+
+            cache.inc("testing_inc")
+            resp = cache.inc("testing_inc")
+            assert resp == 2
+            assert cache.get("testing_inc") == 2
+            cache.expire("testing_inc", 0)
+            assert cache.get("testing_inc") is None
+            resp = cache.inc("testing_inc")
+            assert resp == 1
+        destroy_ctfd(app)

tests/cache/test_challenges.py

@@ -0,0 +1,128 @@
+#!/usr/bin/env python
+# -*- coding: utf-8 -*-
+
+from CTFd.models import Users
+from tests.helpers import (
+    create_ctfd,
+    destroy_ctfd,
+    login_as_user,
+    register_user,
+    simulate_user_activity,
+)
+
+
+def test_adding_challenge_clears_cache():
+    """
+    Test that when we add a challenge, it appears in our challenge list
+    """
+    app = create_ctfd()
+    with app.app_context():
+        register_user(app)
+
+        with login_as_user(app) as client, login_as_user(
+            app, name="admin", password="password"
+        ) as admin:
+            req = client.get("/api/v1/challenges")
+            data = req.get_json()
+            assert data["data"] == []
+
+            challenge_data = {
+                "name": "name",
+                "category": "category",
+                "description": "description",
+                "value": 100,
+                "state": "visible",
+                "type": "standard",
+            }
+
+            r = admin.post("/api/v1/challenges", json=challenge_data)
+            assert r.get_json().get("data")["id"] == 1
+
+            req = client.get("/api/v1/challenges")
+            data = req.get_json()
+            assert data["data"] != []
+    destroy_ctfd(app)
+
+
+def test_deleting_challenge_clears_cache_solves():
+    """
+    Test that deleting a challenge clears the cached solves for the challenge
+    """
+    app = create_ctfd()
+    with app.app_context():
+        register_user(app)
+        user = Users.query.filter_by(id=2).first()
+        simulate_user_activity(app.db, user)
+        with login_as_user(app) as client, login_as_user(
+            app, name="admin", password="password"
+        ) as admin:
+            req = client.get("/api/v1/challenges")
+            data = req.get_json()["data"]
+            challenge = data[0]
+            assert challenge["solves"] == 1
+            from CTFd.utils.challenges import (  # noqa: I001
+                get_solve_counts_for_challenges,
+                get_solves_for_challenge_id,
+            )
+
+            solves = get_solves_for_challenge_id(1)
+            solve_counts = get_solve_counts_for_challenges()
+            solves_req = client.get("/api/v1/challenges/1/solves").get_json()["data"]
+            assert len(solves_req) == 1
+            assert len(solves) == 1
+            assert solve_counts[1] == 1
+
+            r = admin.delete("/api/v1/challenges/1", json="")
+            assert r.status_code == 200
+
+            solve_counts = get_solve_counts_for_challenges()
+            solves = get_solves_for_challenge_id(1)
+            r = client.get("/api/v1/challenges/1/solves")
+            assert r.status_code == 404
+            assert len(solves) == 0
+            assert solve_counts.get(1) is None
+    destroy_ctfd(app)
+
+
+def test_deleting_solve_clears_cache():
+    """
+    Test that deleting a solve clears out the solve count cache
+    """
+    app = create_ctfd()
+    with app.app_context():
+        register_user(app)
+        user = Users.query.filter_by(id=2).first()
+        simulate_user_activity(app.db, user)
+        with login_as_user(app) as client, login_as_user(
+            app, name="admin", password="password"
+        ) as admin:
+            req = client.get("/api/v1/challenges")
+            data = req.get_json()["data"]
+            challenge = data[0]
+            assert challenge["solves"] == 1
+            from CTFd.utils.challenges import (  # noqa: I001
+                get_solve_counts_for_challenges,
+                get_solves_for_challenge_id,
+            )
+
+            solves = get_solves_for_challenge_id(1)
+            solve_counts = get_solve_counts_for_challenges()
+            solves_req = client.get("/api/v1/challenges/1/solves").get_json()["data"]
+            assert len(solves_req) == 1
+            assert len(solves) == 1
+            assert solve_counts[1] == 1
+
+            r = admin.get("/api/v1/submissions/6", json="")
+            assert r.get_json()["data"]["type"] == "correct"
+            r = admin.delete("/api/v1/submissions/6", json="")
+            assert r.status_code == 200
+            r = admin.get("/api/v1/submissions/6", json="")
+            assert r.status_code == 404
+
+            solve_counts = get_solve_counts_for_challenges()
+            solves = get_solves_for_challenge_id(1)
+            solves_req = client.get("/api/v1/challenges/1/solves").get_json()["data"]
+            assert len(solves_req) == 0
+            assert len(solves) == 0
+            assert solve_counts.get(1) is None
+    destroy_ctfd(app)