Nextcloud MCP Server

"""Integration tests for OAuth authentication.""" import logging import os import pytest from httpx import HTTPStatusError from nextcloud_mcp_server.auth import BearerAuth from nextcloud_mcp_server.client import NextcloudClient logger = logging.getLogger(__name__) pytestmark = [pytest.mark.integration, pytest.mark.oauth] # OAuth Client Tests async def test_oauth_client_capabilities(nc_oauth_client: NextcloudClient): """Test that OAuth client can fetch capabilities.""" capabilities = await nc_oauth_client.capabilities() assert capabilities is not None assert "ocs" in capabilities logger.info( f"OAuth client successfully fetched capabilities: {capabilities.get('ocs').get('meta')}" ) async def test_oauth_client_notes_list(nc_oauth_client: NextcloudClient): """Test that OAuth client can list notes.""" notes = [note async for note in nc_oauth_client.notes.get_all_notes()] assert isinstance(notes, list) logger.info(f"OAuth client successfully listed {len(notes)} notes") async def test_oauth_client_create_note(nc_oauth_client: NextcloudClient): """Test that OAuth client can create and delete a note.""" # Create note note_title = "OAuth Test Note" note_content = "This note was created with OAuth authentication" created_note = await nc_oauth_client.notes.create_note( title=note_title, content=note_content ) assert created_note is not None assert created_note.get("title") == note_title note_id = created_note.get("id") assert note_id is not None logger.info(f"OAuth client successfully created note with ID: {note_id}") # Clean up - delete the note try: await nc_oauth_client.notes.delete_note(note_id=note_id) logger.info(f"OAuth client successfully deleted note {note_id}") except Exception as e: logger.error(f"Failed to clean up test note {note_id}: {e}") raise # OAuth Token Validation Tests async def test_token_in_request_headers( nc_oauth_client: NextcloudClient, playwright_oauth_token: str ): """Verify that bearer token is being used in requests.""" # The client should be using BearerAuth assert nc_oauth_client._client.auth is not None # Make a request and verify it works capabilities = await nc_oauth_client.capabilities() assert capabilities is not None logger.info("OAuth bearer token is correctly included in requests") async def test_invalid_token_fails(): """Test that an invalid token results in authentication failure.""" nextcloud_host = os.getenv("NEXTCLOUD_HOST") if not nextcloud_host: pytest.skip("NEXTCLOUD_HOST not set") # Create client with invalid token using BearerAuth invalid_client = NextcloudClient( base_url=nextcloud_host, username="testuser", auth=BearerAuth("invalid_token_12345"), ) # Attempt to use a protected endpoint - should fail with 401 # Note: capabilities endpoint is public and doesn't require auth with pytest.raises(HTTPStatusError) as exc_info: _ = [note async for note in invalid_client.notes.get_all_notes()] assert exc_info.value.response.status_code == 401 await invalid_client.close() logger.info("Invalid OAuth token correctly rejected")