diff options
| author | Michael Merickel <michael@merickel.org> | 2018-11-03 13:54:51 -0500 |
|---|---|---|
| committer | Michael Merickel <michael@merickel.org> | 2018-11-03 14:22:07 -0500 |
| commit | 870eb3bcc9e9cc39a84f8268fee5b59ed4692bf4 (patch) | |
| tree | 227108d91f88b71d0c6491b016f52f062b6588b6 /tests/test_session.py | |
| parent | 133db09d179c3f5afe7e02dc13ab6687517db5a1 (diff) | |
| download | pyramid-870eb3bcc9e9cc39a84f8268fee5b59ed4692bf4.tar.gz pyramid-870eb3bcc9e9cc39a84f8268fee5b59ed4692bf4.tar.bz2 pyramid-870eb3bcc9e9cc39a84f8268fee5b59ed4692bf4.zip | |
change to use JSONSerializer for SignedCookieSessionFactory
Diffstat (limited to 'tests/test_session.py')
| -rw-r--r-- | tests/test_session.py | 22 |
1 files changed, 2 insertions, 20 deletions
diff --git a/tests/test_session.py b/tests/test_session.py index 6f93864a5..5e2a1ff55 100644 --- a/tests/test_session.py +++ b/tests/test_session.py @@ -364,10 +364,10 @@ class TestSignedCookieSession(SharedCookieSessionTests, unittest.TestCase): import base64 import hashlib import hmac - import pickle + import json digestmod = lambda: hashlib.new(hashalg) - cstruct = pickle.dumps(value, pickle.HIGHEST_PROTOCOL) + cstruct = json.dumps(value).encode('utf-8') sig = hmac.new(salt + b'secret', cstruct, digestmod).digest() return base64.urlsafe_b64encode(sig + cstruct).rstrip(b'=') @@ -505,24 +505,6 @@ class TestSignedCookieSession(SharedCookieSessionTests, unittest.TestCase): self.assertEqual(result, None) self.assertTrue('Set-Cookie' in dict(response.headerlist)) - def test_bad_pickle(self): - import base64 - import hashlib - import hmac - - digestmod = lambda: hashlib.new('sha512') - # generated from dumping an object that cannot be found anymore, eg: - # class Foo: pass - # print(pickle.dumps(Foo())) - cstruct = b'(i__main__\nFoo\np0\n(dp1\nb.' - sig = hmac.new(b'pyramid.session.secret', cstruct, digestmod).digest() - cookieval = base64.urlsafe_b64encode(sig + cstruct).rstrip(b'=') - - request = testing.DummyRequest() - request.cookies['session'] = cookieval - session = self._makeOne(request, secret='secret') - self.assertEqual(session, {}) - class Test_manage_accessed(unittest.TestCase): def _makeOne(self, wrapped): |
