How to test protected areas in Web sites

Overview

This guide will show you how to test protected areas and authentication, separately, using PasteDeploy, WebTest and repoze.who.plugins.testutil.

I assume that you already have repoze.who working the way you want, configured via an Ini file or Python code. If not, please set it up first using the repoze.who manual and then come back to this guide.

Likewise, I also assume that you already have a PasteDeploy configuration file for your application. It’s not strictly necessary, but we’re going to use it in this HOWTO.

Three steps are required to test protected areas and authentication separately:

• Reconfigure repoze.who
  • Via Python code
  • Via .ini file
• Test protected areas without authentication
  • The test configuration
  • The base test case
  • A sample test case
• Test authentication independently
  • The test case
  • Sample test case