e744336385
C-6: ConnectorRuntime enforces capability_mask per operation.
READ-only ACs cannot invoke MUTATE operations (wipe, lock, retire).
C-7: AC validated against database (exists, active, not expired)
before connector invocation.
C-9: Delegated AC capability bounded by delegator's capability.
C-10: Command counter uses atomic SQL increment with limit check.
M-23: expire_stale() uses same atomic SQL pattern.
H-1: Sensitive credential fields hidden from repr/logs via repr=False.
H-2: Stub backend requires ALLOW_STUB_CREDENTIALS=true to activate.
H-3: Kerberos backend raises CredentialResolutionError instead of
returning stub ticket.
H-4: Chronicle INTENT emitted before execution, RESULT after.
H-5: device_id validated as UUID before Graph API URL interpolation.
H-8: ConnectorRuntime enforces governance for all connector invocations.
Signed-off-by: Tyler King <tking@guildhouse.dev>
98 lines
3.1 KiB
Python
98 lines
3.1 KiB
Python
from __future__ import annotations
|
|
|
|
from collections.abc import Generator
|
|
|
|
from _pytest._io.saferepr import saferepr
|
|
from _pytest.config import Config
|
|
from _pytest.config import ExitCode
|
|
from _pytest.config.argparsing import Parser
|
|
from _pytest.fixtures import FixtureDef
|
|
from _pytest.fixtures import SubRequest
|
|
from _pytest.scope import Scope
|
|
import pytest
|
|
|
|
|
|
def pytest_addoption(parser: Parser) -> None:
|
|
group = parser.getgroup("debugconfig")
|
|
group.addoption(
|
|
"--setuponly",
|
|
"--setup-only",
|
|
action="store_true",
|
|
help="Only setup fixtures, do not execute tests",
|
|
)
|
|
group.addoption(
|
|
"--setupshow",
|
|
"--setup-show",
|
|
action="store_true",
|
|
help="Show setup of fixtures while executing tests",
|
|
)
|
|
|
|
|
|
@pytest.hookimpl(wrapper=True)
|
|
def pytest_fixture_setup(
|
|
fixturedef: FixtureDef[object], request: SubRequest
|
|
) -> Generator[None, object, object]:
|
|
try:
|
|
return (yield)
|
|
finally:
|
|
if request.config.option.setupshow:
|
|
if hasattr(request, "param"):
|
|
# Save the fixture parameter so ._show_fixture_action() can
|
|
# display it now and during the teardown (in .finish()).
|
|
if fixturedef.ids:
|
|
if callable(fixturedef.ids):
|
|
param = fixturedef.ids(request.param)
|
|
else:
|
|
param = fixturedef.ids[request.param_index]
|
|
else:
|
|
param = request.param
|
|
fixturedef.cached_param = param # type: ignore[attr-defined]
|
|
_show_fixture_action(fixturedef, request.config, "SETUP")
|
|
|
|
|
|
def pytest_fixture_post_finalizer(
|
|
fixturedef: FixtureDef[object], request: SubRequest
|
|
) -> None:
|
|
if fixturedef.cached_result is not None:
|
|
config = request.config
|
|
if config.option.setupshow:
|
|
_show_fixture_action(fixturedef, request.config, "TEARDOWN")
|
|
if hasattr(fixturedef, "cached_param"):
|
|
del fixturedef.cached_param
|
|
|
|
|
|
def _show_fixture_action(
|
|
fixturedef: FixtureDef[object], config: Config, msg: str
|
|
) -> None:
|
|
capman = config.pluginmanager.getplugin("capturemanager")
|
|
if capman:
|
|
capman.suspend_global_capture()
|
|
|
|
tw = config.get_terminal_writer()
|
|
tw.line()
|
|
# Use smaller indentation the higher the scope: Session = 0, Package = 1, etc.
|
|
scope_indent = list(reversed(Scope)).index(fixturedef._scope)
|
|
tw.write(" " * 2 * scope_indent)
|
|
|
|
scopename = fixturedef.scope[0].upper()
|
|
tw.write(f"{msg:<8} {scopename} {fixturedef.argname}")
|
|
|
|
if msg == "SETUP":
|
|
deps = sorted(arg for arg in fixturedef.argnames if arg != "request")
|
|
if deps:
|
|
tw.write(" (fixtures used: {})".format(", ".join(deps)))
|
|
|
|
if hasattr(fixturedef, "cached_param"):
|
|
tw.write(f"[{saferepr(fixturedef.cached_param, maxsize=42)}]")
|
|
|
|
tw.flush()
|
|
|
|
if capman:
|
|
capman.resume_global_capture()
|
|
|
|
|
|
@pytest.hookimpl(tryfirst=True)
|
|
def pytest_cmdline_main(config: Config) -> int | ExitCode | None:
|
|
if config.option.setuponly:
|
|
config.option.setupshow = True
|
|
return None
|