Django custom middleware to check header token.Tests with valid request header tokens still fails

Question

I am checking a request header for a valid token in my custom middleware.

class CustomTokenAuthentication(object):

def process_request(self, request):

    access_token = request.META.get('HTTP_TOKEN', '')
    if AccessToken.objects.filter(token=access_token).exists():
        return None
    else:
        # return None
        res =  HttpResponse("Invalid token", status=401)
        res["WWW-Authenticate"] = "Invalid Token"
        return res

seems to work fine, but im stuck writing a test by setting a header HTTP_TOKEN with a valid token value and geting a 200 response.

my sample testcode

def test_invalid_token_present(self):
    resp = self.client.get(reverse('productlist'), **{'HTTP_TOKEN':'8742627sdfsdfsf4e3423dsd23'})
    self.assertEqual(resp.status_code,200)

seems to fail always.

can you print the contents of request.META.keys() and check. — madhukar93
– madhukar93, Commented Jul 30, 2016 at 13:41
I meant try the header TOKEN in the request. I actually went ahead and tried it. If it doesn't work, then we'll have to look at the contents of request.META. — madhukar93
– madhukar93, Commented Jul 30, 2016 at 14:02

madhukar93 · Accepted Answer · 2018-02-02 11:07:11Z

5

Django renames CUSTOM-HEADER to HTTP_CUSTOM_HEADER. When you send it HTTP_TOKEN it will get renamed to HTTP_HTTP_TOKEN in the request.META dict. A simple way to check what headers you are getting is to either print request.META and check the console or insert a pdb breakpoint just before the check and examin the request.META dict - link to relevant Django doc. So try:

    resp = self.client.get(reverse('productlist'),
                           **{'TOKEN':'8742627sdfsdfsf4e3423dsd23'})

I advise you to limit your line lengths, so that people don't have to scroll horizontally to read your code. PEP-8 prescribes an 80 character limit.

edited Feb 2, 2018 at 11:07

answered Jul 30, 2016 at 13:41

madhukar93

5156 silver badges24 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Django custom middleware to check header token.Tests with valid request header tokens still fails

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related