Function test_cookie_lenient_parsing

tests/test_requests.py:359–390

The following test is based on a cookie set by Okta, a well-known authorization service. It turns out that it's common practice to set cookies that would be invalid according to the spec.

(test_client_factory: TestClientFactory)

def test_cookie_lenient_parsing(test_client_factory: TestClientFactory) -> None:
    class="st">"""
    The following test is based on a cookie set by Okta, a well-known authorization
    service. It turns out that it&class="cm">#x27;s common practice to set cookies that would be
    invalid according to the spec.
    class="st">"""
    tough_cookie = (
        class="st">"provider-oauth-nonce=validAsciiblabla; "
        &class="cm">#x27;okta-oauth-redirect-params={class="st">"responseType":class="st">"code",class="st">"state":class="st">"somestate",'
        &class="cm">#x27;class="st">"nonce":class="st">"somenonce",class="st">"scopes":[class="st">"openid",class="st">"profile",class="st">"email",class="st">"phone"],'
        &class="cm">#x27;class="st">"urls":{class="st">"issuer":class="st">"https://subdomain.okta.com/oauth2/authServer",'
        &class="cm">#x27;class="st">"authorizeUrl":class="st">"https://subdomain.okta.com/oauth2/authServer/v1/authorize",'
        &class="cm">#x27;class="st">"userinfoUrl":class="st">"https://subdomain.okta.com/oauth2/authServer/v1/userinfo"}}; '
        class="st">"importantCookie=importantValue; sessionCookie=importantSessionValue"
    )
    expected_keys = {
        class="st">"importantCookie",
        class="st">"okta-oauth-redirect-params",
        class="st">"provider-oauth-nonce",
        class="st">"sessionCookie",
    }

    async def app(scope: Scope, receive: Receive, send: Send) -> None:
        request = Request(scope, receive)
        response = JSONResponse({class="st">"cookies": request.cookies})
        await response(scope, receive, send)

    client = test_client_factory(app)
    response = client.get(class="st">"/", headers={class="st">"cookie": tough_cookie})
    result = response.json()
    assert len(result[class="st">"cookies"]) == 4
    assert set(result[class="st">"cookies"].keys()) == expected_keys


class="cm"># These test cases copied from Tornado's implementation