英文:
Flask-WTF - Unable to test a form submission
问题
我想测试一个带有CSRF令牌的wtf表单，但我不知道如何发送这个令牌。
这是我的表单：
class myLoginForm(FlaskForm):username = StringField()password = StringField()mySubmit = SubmitField('Save')
这是我的路由：
@app.route('/login', methods=['GET', 'POST'])def login():loginForm = myLoginForm()if loginForm.validate_on_submit():result = request.formusername = result.get("username")password = result.get("password")
这是我的测试：
import unittestfrom flask_testing import TestCasefrom flask import Flaskimport jsonclass TestLogin(TestCase):def create_app(self):app = Flask(__name__)return appdef test_submission(self):headers = {'ContentType': 'application/json','dataType': 'json'}data = {'username': 'foo','password': 'bar'}response = app.test_client().post('/login',data=json.dumps(data),content_type='application/json',follow_redirects=True)assert self.get_context_variable("loginForm").validate_on_submit() == True
断言失败，因为validate_on_submit()返回False。我认为这是由于CSRF令牌导致的。
如何将CSRF令牌发送到POST请求？
祝你有个愉快的一天！
英文:
I would like to test a wtf-form with a crsf token but I don't know how to send the token.
Here is my form :
class myLoginForm(FlaskForm):username = StringField()password = StringField()mySubmit = SubmitField('Save')
Here is my route :
@app.route('/login', methods=['GET', 'POST'])def login():loginForm = myLoginForm()if loginForm.validate_on_submit():result = request.formusername = result.get("username")password = result.get("password")
Here is my test :
import unittestfrom flask_testing import TestCasefrom flask import Flaskimport jsonclass TestLogin(TestCase):def create_app(self):app = Flask(__name__)return appdef test_submission(self):headers = {'ContentType': 'application/json','dataType': 'json'}data = {'username': 'foo','password': 'bar'}response = app.test_client().post('/login',data=json.dumps(data),content_type='application/json',follow_redirects=True)assert self.get_context_variable("loginForm").validate_on_submit() == True
The assertion fails, because the validate_on_submit() returns False. I think it is due to the crsf token.
How can I send the crsf token to the POST request ?
Have a nice day
答案1
得分: 2
也许这可以帮助您。
使在自动化测试中更容易访问CSRF令牌
英文:
Maybe this could help you.
Make it easier to access a CSRF token in automated tests
答案2
得分: 1
除非你想要在Flask-WTF中测试实际的CSRF保护，在运行单元测试时完全关闭CSRF在应用程序配置中会更简单。触发CSRF保护的条件可能更容易通过集成/端对端测试来测试。
英文:
Unless you want to test actual CSRF protection in Flask-WTF it's much simpler to turn off CSRF completely in app config when running unit tests. The conditions that trigger CSRF protection may be easier tested with integration/e2e tests.
通过集体智慧和协作来改善编程学习和解决问题的方式。致力于成为全球开发者共同参与的知识库，让每个人都能够通过互相帮助和分享经验来进步。
评论