mirror of
https://github.com/home-assistant/supervisor.git
synced 2025-11-05 17:09:36 +00:00
1448a33dbf
* Formally deprecate CodeNotary build config * Remove CodeNotary specific integrity checking The current code is specific to how CodeNotary was doing integrity checking. A future integrity checking mechanism likely will work differently (e.g. through EROFS based containers). Remove the current code to make way for a future implementation. * Drop CodeNotary integrity fixups * Drop unused tests * Fix pytest * Fix pytest * Remove CodeNotary related exceptions and handling Remove CodeNotary related exceptions and handling from the Docker interface. * Drop unnecessary comment * Remove Codenotary specific IssueType/SuggestionType * Drop Codenotary specific environment and secret reference * Remove unused constants * Introduce APIGone exception for removed APIs Introduce a new exception class APIGone to indicate that certain API features have been removed and are no longer available. Update the security integrity check endpoint to raise this new exception instead of a generic APIError, providing clearer communication to clients that the feature has been intentionally removed. * Drop content trust A cosign based signature verification will likely be named differently to avoid confusion with existing implementations. For now, remove the content trust option entirely. * Drop code sign test * Remove source_mods/content_trust evaluations * Remove content_trust reference in bootstrap.py * Fix security tests * Drop unused tests * Drop codenotary from schema Since we have "remove extra" in voluptuous, we can remove the codenotary field from the addon schema. * Remove content_trust from tests * Remove content_trust unsupported reason * Remove unnecessary comment * Remove unrelated pytest * Remove unrelated fixtures
39 lines
1.0 KiB
Python
39 lines
1.0 KiB
Python
"""Test Supervisor API."""
|
|
|
|
from unittest.mock import AsyncMock
|
|
|
|
import pytest
|
|
|
|
from supervisor.coresys import CoreSys
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_api_security_options_force_security(api_client, coresys: CoreSys):
|
|
"""Test security options force security."""
|
|
assert not coresys.security.force
|
|
|
|
await api_client.post("/security/options", json={"force_security": True})
|
|
|
|
assert coresys.security.force
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_api_security_options_pwned(api_client, coresys: CoreSys):
|
|
"""Test security options pwned."""
|
|
assert coresys.security.pwned
|
|
|
|
await api_client.post("/security/options", json={"pwned": False})
|
|
|
|
assert not coresys.security.pwned
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_api_integrity_check(
|
|
api_client, coresys: CoreSys, supervisor_internet: AsyncMock
|
|
):
|
|
"""Test security integrity check - now deprecated."""
|
|
resp = await api_client.post("/security/integrity")
|
|
|
|
# CodeNotary integrity check has been removed, should return 410 Gone
|
|
assert resp.status == 410
|