report_agentless.html

self = <wazuh_testing.tools.system.HostManager object at 0x7ffbd91330a0>, host = 'wazuh-master', user = 'wazuh-wui', password = 'wazuh-wui', auth_context = {'username': 'elastic'}, port = 55000, check = False

def get_api_token(self, host, user='wazuh', password='wazuh', auth_context=None, port=55000, check=False):
"""Return an API token for the specified user.

Args:
host (str): Hostname.
user (str, optional): API username. Default `wazuh`
password (str, optional): API password. Default `wazuh`
auth_context (dict, optional): Authorization context body. Default `None`
port (int, optional): API port. Default `55000`
check (bool, optional): Ansible check mode("Dry Run"),
by default it is enabled so no changes will be applied. Default `False`

Returns:
API token (str): Usable API token.
"""
login_endpoint = '/security/user/authenticate'
login_method = 'POST'
login_body = ''
if auth_context is not None:
login_endpoint = '/security/user/authenticate/run_as'
login_body = 'body="{}"'.format(json.dumps(auth_context).replace('"', '\\"').replace(' ', ''))

try:
token_response = self.get_host(host).ansible('uri', f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check=check)
print(f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check)
print(token_response)
> return token_response['json']['data']['token']
E KeyError: 'json'

/usr/local/lib/python3.10/dist-packages/wazuh_testing/tools/system.py:233: KeyError

During handling of the above exception, another exception occurred:

login_endpoint = {'auth_context': {'username': 'elastic'}, 'password': 'wazuh-wui', 'user': 'wazuh-wui'}, set_default_api_conf = None, restore_default_security_settings = None

@pytest.mark.parametrize('login_endpoint', [
# User-roles based login
{},
# Auth context login
{'user': 'wazuh-wui', 'password': 'wazuh-wui', 'auth_context': {"username": "elastic"}}
])
def test_change_rbac_mode_with_endpoint(login_endpoint, set_default_api_conf, restore_default_security_settings):
"""Check that all tokens are revoked when changing RBAC mode with the security endpoint."""
# Get valid tokens
> tokens = {host: host_manager.get_api_token(host, **login_endpoint) for host in test_hosts}

test_jwt_invalidation/test_change_rbac_mode.py:43:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
test_jwt_invalidation/test_change_rbac_mode.py:43: in <dictcomp>
tokens = {host: host_manager.get_api_token(host, **login_endpoint) for host in test_hosts}
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

self = <wazuh_testing.tools.system.HostManager object at 0x7ffbd91330a0>, host = 'wazuh-master', user = 'wazuh-wui', password = 'wazuh-wui', auth_context = {'username': 'elastic'}, port = 55000, check = False

def get_api_token(self, host, user='wazuh', password='wazuh', auth_context=None, port=55000, check=False):
"""Return an API token for the specified user.

Args:
host (str): Hostname.
user (str, optional): API username. Default `wazuh`
password (str, optional): API password. Default `wazuh`
auth_context (dict, optional): Authorization context body. Default `None`
port (int, optional): API port. Default `55000`
check (bool, optional): Ansible check mode("Dry Run"),
by default it is enabled so no changes will be applied. Default `False`

Returns:
API token (str): Usable API token.
"""
login_endpoint = '/security/user/authenticate'
login_method = 'POST'
login_body = ''
if auth_context is not None:
login_endpoint = '/security/user/authenticate/run_as'
login_body = 'body="{}"'.format(json.dumps(auth_context).replace('"', '\\"').replace(' ', ''))

try:
token_response = self.get_host(host).ansible('uri', f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check=check)
print(f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check)
print(token_response)
return token_response['json']['data']['token']
except KeyError:
> raise KeyError(f'Failed to get token: {token_response}')
E KeyError: "Failed to get token: {'changed': False, 'connection': 'close', 'content_length': '65', 'content_type': 'application/problem+json; charset=utf-8', 'date': 'Wed, 03 Jan 2024 10:52:27 GMT', 'elapsed': 0, 'msg': 'Status code was 400 and not [200]: HTTP Error 400: Bad Request', 'redirected': False, 'status': 400, 'url': 'https://localhost:55000/security/user/authenticate/run_as'}"

/usr/local/lib/python3.10/dist-packages/wazuh_testing/tools/system.py:235: KeyError
------------------------------Captured stdout call------------------------------
url=https://localhost:55000/security/user/authenticate/run_as user=wazuh-wui password=wazuh-wui method=POST body="{\"username\":\"elastic\"}" validate_certs=no force_basic_auth=yes False {'changed': False, 'connection': 'close', 'content_length': '65', 'content_type': 'application/problem+json; charset=utf-8', 'date': 'Wed, 03 Jan 2024 10:52:27 GMT', 'elapsed': 0, 'msg': 'Status code was 400 and not [200]: HTTP Error 400: Bad Request', 'redirected': False, 'status': 400, 'url': 'https://localhost:55000/security/user/authenticate/run_as'}

self = <wazuh_testing.tools.system.HostManager object at 0x7ffbd91330a0>, host = 'wazuh-master', user = 'wazuh-wui', password = 'wazuh-wui', auth_context = {'username': 'elastic'}, port = 55000, check = False

def get_api_token(self, host, user='wazuh', password='wazuh', auth_context=None, port=55000, check=False):
"""Return an API token for the specified user.

Args:
host (str): Hostname.
user (str, optional): API username. Default `wazuh`
password (str, optional): API password. Default `wazuh`
auth_context (dict, optional): Authorization context body. Default `None`
port (int, optional): API port. Default `55000`
check (bool, optional): Ansible check mode("Dry Run"),
by default it is enabled so no changes will be applied. Default `False`

Returns:
API token (str): Usable API token.
"""
login_endpoint = '/security/user/authenticate'
login_method = 'POST'
login_body = ''
if auth_context is not None:
login_endpoint = '/security/user/authenticate/run_as'
login_body = 'body="{}"'.format(json.dumps(auth_context).replace('"', '\\"').replace(' ', ''))

try:
token_response = self.get_host(host).ansible('uri', f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check=check)
print(f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check)
print(token_response)
> return token_response['json']['data']['token']
E KeyError: 'json'

/usr/local/lib/python3.10/dist-packages/wazuh_testing/tools/system.py:233: KeyError

During handling of the above exception, another exception occurred:

login_endpoint = {'auth_context': {'username': 'elastic'}, 'password': 'wazuh-wui', 'user': 'wazuh-wui'}, set_default_api_conf = None, restore_default_security_settings = None

@pytest.mark.parametrize('login_endpoint', [
# Normal admin
{},
# Auth context login
{'user': 'wazuh-wui', 'password': 'wazuh-wui', 'auth_context': {"username": "elastic"}}
])
def test_change_rbac_mode_manually(login_endpoint, set_default_api_conf, restore_default_security_settings):
"""Check that all tokens are revoked when changing RBAC mode manually in the security.yaml ."""
# Get valid tokens
> tokens = {host: host_manager.get_api_token(host, **login_endpoint) for host in test_hosts}

test_jwt_invalidation/test_change_rbac_mode.py:70:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
test_jwt_invalidation/test_change_rbac_mode.py:70: in <dictcomp>
tokens = {host: host_manager.get_api_token(host, **login_endpoint) for host in test_hosts}
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

self = <wazuh_testing.tools.system.HostManager object at 0x7ffbd91330a0>, host = 'wazuh-master', user = 'wazuh-wui', password = 'wazuh-wui', auth_context = {'username': 'elastic'}, port = 55000, check = False

def get_api_token(self, host, user='wazuh', password='wazuh', auth_context=None, port=55000, check=False):
"""Return an API token for the specified user.

Args:
host (str): Hostname.
user (str, optional): API username. Default `wazuh`
password (str, optional): API password. Default `wazuh`
auth_context (dict, optional): Authorization context body. Default `None`
port (int, optional): API port. Default `55000`
check (bool, optional): Ansible check mode("Dry Run"),
by default it is enabled so no changes will be applied. Default `False`

Returns:
API token (str): Usable API token.
"""
login_endpoint = '/security/user/authenticate'
login_method = 'POST'
login_body = ''
if auth_context is not None:
login_endpoint = '/security/user/authenticate/run_as'
login_body = 'body="{}"'.format(json.dumps(auth_context).replace('"', '\\"').replace(' ', ''))

try:
token_response = self.get_host(host).ansible('uri', f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check=check)
print(f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check)
print(token_response)
return token_response['json']['data']['token']
except KeyError:
> raise KeyError(f'Failed to get token: {token_response}')
E KeyError: "Failed to get token: {'changed': False, 'connection': 'close', 'content_length': '65', 'content_type': 'application/problem+json; charset=utf-8', 'date': 'Wed, 03 Jan 2024 10:53:11 GMT', 'elapsed': 0, 'msg': 'Status code was 400 and not [200]: HTTP Error 400: Bad Request', 'redirected': False, 'status': 400, 'url': 'https://localhost:55000/security/user/authenticate/run_as'}"

/usr/local/lib/python3.10/dist-packages/wazuh_testing/tools/system.py:235: KeyError
------------------------------Captured stdout call------------------------------
url=https://localhost:55000/security/user/authenticate/run_as user=wazuh-wui password=wazuh-wui method=POST body="{\"username\":\"elastic\"}" validate_certs=no force_basic_auth=yes False {'changed': False, 'connection': 'close', 'content_length': '65', 'content_type': 'application/problem+json; charset=utf-8', 'date': 'Wed, 03 Jan 2024 10:53:11 GMT', 'elapsed': 0, 'msg': 'Status code was 400 and not [200]: HTTP Error 400: Bad Request', 'redirected': False, 'status': 400, 'url': 'https://localhost:55000/security/user/authenticate/run_as'}
----------------------------Captured stdout teardown----------------------------
url=https://localhost:55000/security/user/authenticate user=wazuh password=wazuh method=POST validate_certs=no force_basic_auth=yes False {'cache_control': 'no-cache, no-store, must-revalidate, max-age=0', 'changed': False, 'connection': 'close', 'content_length': '433', 'content_security_policy': 'none', 'content_type': 'application/json; charset=utf-8', 'cookies': {}, 'cookies_string': '', 'date': 'Wed, 03 Jan 2024 10:53:12 GMT', 'elapsed': 0, 'expires': '0', 'json': {'data': {'token': 'eyJhbGciOiJFUzUxMiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJ3YXp1aCIsImF1ZCI6IldhenVoIEFQSSBSRVNUIiwibmJmIjoxNzA0Mjc5MTkyLCJleHAiOjE3MDQyODAwOTIsInN1YiI6IndhenVoIiwicnVuX2FzIjpmYWxzZSwicmJhY19yb2xlcyI6WzFdLCJyYmFjX21vZGUiOiJibGFjayJ9.AOY7IU3LCv6azWUIGI1vCcdKBky-B_EtobDuwGz0HbrIVCKbSBswaSDF2oNWuVN8KcoYV7Xhhftj50JX5RXGb2lQAHlaLfQvZ_ERb-NttMbt9h5njPLkNXyiIC1dWoci048HFTX9KZlXe2yAuYNBMaXiroXH_HG2J_peF7dScNOOJhqe'}, 'error': 0}, 'msg': 'OK (433 bytes)', 'pragma': 'no-cache', 'redirected': False, 'referrer_policy': 'no-referrer, strict-origin-when-cross-origin', 'status': 200, 'strict_transport_security': 'max-age=63072000; includeSubdomains', 'url': 'https://localhost:55000/security/user/authenticate', 'x_content_type_options': 'nosniff', 'x_frame_options': 'DENY', 'x_xss_protection': '1; mode=block'}

self = <wazuh_testing.tools.system.HostManager object at 0x7ffbd9133940>, host = 'wazuh-master', user = 'testing_user', password = 'Testing1*', auth_context = {'username': 'testing'}, port = 55000, check = False

def get_api_token(self, host, user='wazuh', password='wazuh', auth_context=None, port=55000, check=False):
"""Return an API token for the specified user.

Args:
host (str): Hostname.
user (str, optional): API username. Default `wazuh`
password (str, optional): API password. Default `wazuh`
auth_context (dict, optional): Authorization context body. Default `None`
port (int, optional): API port. Default `55000`
check (bool, optional): Ansible check mode("Dry Run"),
by default it is enabled so no changes will be applied. Default `False`

Returns:
API token (str): Usable API token.
"""
login_endpoint = '/security/user/authenticate'
login_method = 'POST'
login_body = ''
if auth_context is not None:
login_endpoint = '/security/user/authenticate/run_as'
login_body = 'body="{}"'.format(json.dumps(auth_context).replace('"', '\\"').replace(' ', ''))

try:
token_response = self.get_host(host).ansible('uri', f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check=check)
print(f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check)
print(token_response)
> return token_response['json']['data']['token']
E KeyError: 'json'

/usr/local/lib/python3.10/dist-packages/wazuh_testing/tools/system.py:233: KeyError

During handling of the above exception, another exception occurred:

login_endpoint = {'auth_context': {'username': 'testing'}}, node1 = 'wazuh-master', node2 = 'wazuh-worker1', set_default_api_conf = None, create_testing_api_user = None, create_security_resources = None
set_role_to_user = None

@pytest.mark.parametrize('login_endpoint', [
# User-roles based login
{},
# Auth context login
{'auth_context': {"username": "testing"}}
])
@pytest.mark.parametrize('node1, node2', [
(test_hosts[0], test_hosts[1]),
(test_hosts[1], test_hosts[2])
])
def test_change_user_policy_and_role(login_endpoint, node1, node2, set_default_api_conf, create_testing_api_user,
create_security_resources,
set_role_to_user):
"""Test that the obtained token is invalid after changing a role or policy related to the user.

Parameters
----------
node1 : str
Node from the cluster.
node2 : str
Node from the cluster.
"""

def check_revoked_token(node, current_token):
# Check that the token was revoked
resp = host_manager.make_api_call(node, endpoint='/agents', token=current_token)
assert resp['status'] == 401, f'Token was not revoked: {resp}'

# Get token with testing user
> token = host_manager.get_api_token(node1, user=test_user, password=test_passw, **login_endpoint)

test_jwt_invalidation/test_change_security_resources.py:68:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

self = <wazuh_testing.tools.system.HostManager object at 0x7ffbd9133940>, host = 'wazuh-master', user = 'testing_user', password = 'Testing1*', auth_context = {'username': 'testing'}, port = 55000, check = False

def get_api_token(self, host, user='wazuh', password='wazuh', auth_context=None, port=55000, check=False):
"""Return an API token for the specified user.

Args:
host (str): Hostname.
user (str, optional): API username. Default `wazuh`
password (str, optional): API password. Default `wazuh`
auth_context (dict, optional): Authorization context body. Default `None`
port (int, optional): API port. Default `55000`
check (bool, optional): Ansible check mode("Dry Run"),
by default it is enabled so no changes will be applied. Default `False`

Returns:
API token (str): Usable API token.
"""
login_endpoint = '/security/user/authenticate'
login_method = 'POST'
login_body = ''
if auth_context is not None:
login_endpoint = '/security/user/authenticate/run_as'
login_body = 'body="{}"'.format(json.dumps(auth_context).replace('"', '\\"').replace(' ', ''))

try:
token_response = self.get_host(host).ansible('uri', f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check=check)
print(f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check)
print(token_response)
return token_response['json']['data']['token']
except KeyError:
> raise KeyError(f'Failed to get token: {token_response}')
E KeyError: "Failed to get token: {'changed': False, 'connection': 'close', 'content_length': '65', 'content_type': 'application/problem+json; charset=utf-8', 'date': 'Wed, 03 Jan 2024 10:55:56 GMT', 'elapsed': 0, 'msg': 'Status code was 400 and not [200]: HTTP Error 400: Bad Request', 'redirected': False, 'status': 400, 'url': 'https://localhost:55000/security/user/authenticate/run_as'}"

/usr/local/lib/python3.10/dist-packages/wazuh_testing/tools/system.py:235: KeyError
------------------------------Captured stdout call------------------------------
url=https://localhost:55000/security/user/authenticate/run_as user=testing_user password=Testing1* method=POST body="{\"username\":\"testing\"}" validate_certs=no force_basic_auth=yes False {'changed': False, 'connection': 'close', 'content_length': '65', 'content_type': 'application/problem+json; charset=utf-8', 'date': 'Wed, 03 Jan 2024 10:55:56 GMT', 'elapsed': 0, 'msg': 'Status code was 400 and not [200]: HTTP Error 400: Bad Request', 'redirected': False, 'status': 400, 'url': 'https://localhost:55000/security/user/authenticate/run_as'}

self = <wazuh_testing.tools.system.HostManager object at 0x7ffbd9133940>, host = 'wazuh-worker1', user = 'testing_user', password = 'Testing1*', auth_context = {'username': 'testing'}, port = 55000, check = False

def get_api_token(self, host, user='wazuh', password='wazuh', auth_context=None, port=55000, check=False):
"""Return an API token for the specified user.

Args:
host (str): Hostname.
user (str, optional): API username. Default `wazuh`
password (str, optional): API password. Default `wazuh`
auth_context (dict, optional): Authorization context body. Default `None`
port (int, optional): API port. Default `55000`
check (bool, optional): Ansible check mode("Dry Run"),
by default it is enabled so no changes will be applied. Default `False`

Returns:
API token (str): Usable API token.
"""
login_endpoint = '/security/user/authenticate'
login_method = 'POST'
login_body = ''
if auth_context is not None:
login_endpoint = '/security/user/authenticate/run_as'
login_body = 'body="{}"'.format(json.dumps(auth_context).replace('"', '\\"').replace(' ', ''))

try:
token_response = self.get_host(host).ansible('uri', f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check=check)
print(f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check)
print(token_response)
> return token_response['json']['data']['token']
E KeyError: 'json'

/usr/local/lib/python3.10/dist-packages/wazuh_testing/tools/system.py:233: KeyError

During handling of the above exception, another exception occurred:

login_endpoint = {'auth_context': {'username': 'testing'}}, node1 = 'wazuh-worker1', node2 = 'wazuh-worker2', set_default_api_conf = None, create_testing_api_user = None, create_security_resources = None
set_role_to_user = None

@pytest.mark.parametrize('login_endpoint', [
# User-roles based login
{},
# Auth context login
{'auth_context': {"username": "testing"}}
])
@pytest.mark.parametrize('node1, node2', [
(test_hosts[0], test_hosts[1]),
(test_hosts[1], test_hosts[2])
])
def test_change_user_policy_and_role(login_endpoint, node1, node2, set_default_api_conf, create_testing_api_user,
create_security_resources,
set_role_to_user):
"""Test that the obtained token is invalid after changing a role or policy related to the user.

Parameters
----------
node1 : str
Node from the cluster.
node2 : str
Node from the cluster.
"""

def check_revoked_token(node, current_token):
# Check that the token was revoked
resp = host_manager.make_api_call(node, endpoint='/agents', token=current_token)
assert resp['status'] == 401, f'Token was not revoked: {resp}'

# Get token with testing user
> token = host_manager.get_api_token(node1, user=test_user, password=test_passw, **login_endpoint)

test_jwt_invalidation/test_change_security_resources.py:68:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

self = <wazuh_testing.tools.system.HostManager object at 0x7ffbd9133940>, host = 'wazuh-worker1', user = 'testing_user', password = 'Testing1*', auth_context = {'username': 'testing'}, port = 55000, check = False

def get_api_token(self, host, user='wazuh', password='wazuh', auth_context=None, port=55000, check=False):
"""Return an API token for the specified user.

Args:
host (str): Hostname.
user (str, optional): API username. Default `wazuh`
password (str, optional): API password. Default `wazuh`
auth_context (dict, optional): Authorization context body. Default `None`
port (int, optional): API port. Default `55000`
check (bool, optional): Ansible check mode("Dry Run"),
by default it is enabled so no changes will be applied. Default `False`

Returns:
API token (str): Usable API token.
"""
login_endpoint = '/security/user/authenticate'
login_method = 'POST'
login_body = ''
if auth_context is not None:
login_endpoint = '/security/user/authenticate/run_as'
login_body = 'body="{}"'.format(json.dumps(auth_context).replace('"', '\\"').replace(' ', ''))

try:
token_response = self.get_host(host).ansible('uri', f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check=check)
print(f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check)
print(token_response)
return token_response['json']['data']['token']
except KeyError:
> raise KeyError(f'Failed to get token: {token_response}')
E KeyError: "Failed to get token: {'changed': False, 'connection': 'close', 'content_length': '65', 'content_type': 'application/problem+json; charset=utf-8', 'date': 'Wed, 03 Jan 2024 10:56:13 GMT', 'elapsed': 0, 'msg': 'Status code was 400 and not [200]: HTTP Error 400: Bad Request', 'redirected': False, 'status': 400, 'url': 'https://localhost:55000/security/user/authenticate/run_as'}"

/usr/local/lib/python3.10/dist-packages/wazuh_testing/tools/system.py:235: KeyError
------------------------------Captured stdout call------------------------------
url=https://localhost:55000/security/user/authenticate/run_as user=testing_user password=Testing1* method=POST body="{\"username\":\"testing\"}" validate_certs=no force_basic_auth=yes False {'changed': False, 'connection': 'close', 'content_length': '65', 'content_type': 'application/problem+json; charset=utf-8', 'date': 'Wed, 03 Jan 2024 10:56:13 GMT', 'elapsed': 0, 'msg': 'Status code was 400 and not [200]: HTTP Error 400: Bad Request', 'redirected': False, 'status': 400, 'url': 'https://localhost:55000/security/user/authenticate/run_as'}
----------------------------Captured stdout teardown----------------------------
url=https://localhost:55000/security/user/authenticate user=wazuh password=wazuh method=POST validate_certs=no force_basic_auth=yes False {'cache_control': 'no-cache, no-store, must-revalidate, max-age=0', 'changed': False, 'connection': 'close', 'content_length': '433', 'content_security_policy': 'none', 'content_type': 'application/json; charset=utf-8', 'cookies': {}, 'cookies_string': '', 'date': 'Wed, 03 Jan 2024 10:56:14 GMT', 'elapsed': 0, 'expires': '0', 'json': {'data': {'token': 'eyJhbGciOiJFUzUxMiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJ3YXp1aCIsImF1ZCI6IldhenVoIEFQSSBSRVNUIiwibmJmIjoxNzA0Mjc5Mzc0LCJleHAiOjE3MDQyODAyNzQsInN1YiI6IndhenVoIiwicnVuX2FzIjpmYWxzZSwicmJhY19yb2xlcyI6WzFdLCJyYmFjX21vZGUiOiJibGFjayJ9.AagyXBFBMp_byHtRd_37gE57BSa-9G_D-exR35nbBWZAfy2XZzKuok9LuNTkEDSw-Aq_8dtx9HUDLXPJffEr_-3tAK_kPf64OhNWPuhzLNuPNZpkjFfsIpFiRepRKr1TfOOEdSIYL3uMZU2Xbx5Sjyqgb2y6X8hO5LBGZlOgzhEurJRs'}, 'error': 0}, 'msg': 'OK (433 bytes)', 'pragma': 'no-cache', 'redirected': False, 'referrer_policy': 'no-referrer, strict-origin-when-cross-origin', 'status': 200, 'strict_transport_security': 'max-age=63072000; includeSubdomains', 'url': 'https://localhost:55000/security/user/authenticate', 'x_content_type_options': 'nosniff', 'x_frame_options': 'DENY', 'x_xss_protection': '1; mode=block'} url=https://localhost:55000/security/user/authenticate user=wazuh password=wazuh method=POST validate_certs=no force_basic_auth=yes False {'cache_control': 'no-cache, no-store, must-revalidate, max-age=0', 'changed': False, 'connection': 'close', 'content_length': '433', 'content_security_policy': 'none', 'content_type': 'application/json; charset=utf-8', 'cookies': {}, 'cookies_string': '', 'date': 'Wed, 03 Jan 2024 10:56:20 GMT', 'elapsed': 0, 'expires': '0', 'json': {'data': {'token': 'eyJhbGciOiJFUzUxMiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJ3YXp1aCIsImF1ZCI6IldhenVoIEFQSSBSRVNUIiwibmJmIjoxNzA0Mjc5MzgwLCJleHAiOjE3MDQyODAyODAsInN1YiI6IndhenVoIiwicnVuX2FzIjpmYWxzZSwicmJhY19yb2xlcyI6WzFdLCJyYmFjX21vZGUiOiJibGFjayJ9.AUQ606KZ966MFqNUakbb08cW3vjL8OIfrMegkADOG-gCd6wxodw0tZVYihY1jhFvvBOFDJvXSAVxw9S2cdH4jd0lAWX61wsJhrkoZer_eftxQ4FM_7NER8ynjHZb4xgQf1D8vjX9YSIvbe6jxp2lP2rS5bW1imfGPYYgTClilbV4d30x'}, 'error': 0}, 'msg': 'OK (433 bytes)', 'pragma': 'no-cache', 'redirected': False, 'referrer_policy': 'no-referrer, strict-origin-when-cross-origin', 'status': 200, 'strict_transport_security': 'max-age=63072000; includeSubdomains', 'url': 'https://localhost:55000/security/user/authenticate', 'x_content_type_options': 'nosniff', 'x_frame_options': 'DENY', 'x_xss_protection': '1; mode=block'}

self = <wazuh_testing.tools.system.HostManager object at 0x7ffbd916c040>, host = 'wazuh-master', user = 'wazuh-wui', password = 'wazuh-wui', auth_context = {'username': 'elastic'}, port = 55000, check = False

def get_api_token(self, host, user='wazuh', password='wazuh', auth_context=None, port=55000, check=False):
"""Return an API token for the specified user.

Args:
host (str): Hostname.
user (str, optional): API username. Default `wazuh`
password (str, optional): API password. Default `wazuh`
auth_context (dict, optional): Authorization context body. Default `None`
port (int, optional): API port. Default `55000`
check (bool, optional): Ansible check mode("Dry Run"),
by default it is enabled so no changes will be applied. Default `False`

Returns:
API token (str): Usable API token.
"""
login_endpoint = '/security/user/authenticate'
login_method = 'POST'
login_body = ''
if auth_context is not None:
login_endpoint = '/security/user/authenticate/run_as'
login_body = 'body="{}"'.format(json.dumps(auth_context).replace('"', '\\"').replace(' ', ''))

try:
token_response = self.get_host(host).ansible('uri', f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check=check)
print(f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check)
print(token_response)
> return token_response['json']['data']['token']
E KeyError: 'json'

/usr/local/lib/python3.10/dist-packages/wazuh_testing/tools/system.py:233: KeyError

During handling of the above exception, another exception occurred:

login_endpoint = {'auth_context': {'username': 'elastic'}, 'password': 'wazuh-wui', 'user': 'wazuh-wui'}, revoke_host = 'wazuh-master', set_default_api_conf = None

@pytest.mark.parametrize('login_endpoint', [
# User-roles based login
{},
# Auth context login
{'user': 'wazuh-wui', 'password': 'wazuh-wui', 'auth_context': {"username": "elastic"}}
])
@pytest.mark.parametrize('revoke_host', test_hosts)
def test_revoke_all_tokens_with_api(login_endpoint, revoke_host, set_default_api_conf):
"""Test that every token gets revoked after making an API call to 'PUT /security/user/revoke'.

Parameters
----------
host : str
Host where the test will be run.
"""

def default_api_call(token_dikt, expected_code=200):
for host, token in token_dikt.items():
response = host_manager.make_api_call(host, endpoint='/agents', token=token)
assert response['status'] == expected_code, f'API call failed. Response: {response}'

# Get valid tokens
> tokens = {host: host_manager.get_api_token(host, **login_endpoint) for host in test_hosts}

test_jwt_invalidation/test_revoke_endpoint.py:43:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
test_jwt_invalidation/test_revoke_endpoint.py:43: in <dictcomp>
tokens = {host: host_manager.get_api_token(host, **login_endpoint) for host in test_hosts}
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

self = <wazuh_testing.tools.system.HostManager object at 0x7ffbd916c040>, host = 'wazuh-master', user = 'wazuh-wui', password = 'wazuh-wui', auth_context = {'username': 'elastic'}, port = 55000, check = False

def get_api_token(self, host, user='wazuh', password='wazuh', auth_context=None, port=55000, check=False):
"""Return an API token for the specified user.

Args:
host (str): Hostname.
user (str, optional): API username. Default `wazuh`
password (str, optional): API password. Default `wazuh`
auth_context (dict, optional): Authorization context body. Default `None`
port (int, optional): API port. Default `55000`
check (bool, optional): Ansible check mode("Dry Run"),
by default it is enabled so no changes will be applied. Default `False`

Returns:
API token (str): Usable API token.
"""
login_endpoint = '/security/user/authenticate'
login_method = 'POST'
login_body = ''
if auth_context is not None:
login_endpoint = '/security/user/authenticate/run_as'
login_body = 'body="{}"'.format(json.dumps(auth_context).replace('"', '\\"').replace(' ', ''))

try:
token_response = self.get_host(host).ansible('uri', f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check=check)
print(f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check)
print(token_response)
return token_response['json']['data']['token']
except KeyError:
> raise KeyError(f'Failed to get token: {token_response}')
E KeyError: "Failed to get token: {'changed': False, 'connection': 'close', 'content_length': '65', 'content_type': 'application/problem+json; charset=utf-8', 'date': 'Wed, 03 Jan 2024 11:03:06 GMT', 'elapsed': 0, 'msg': 'Status code was 400 and not [200]: HTTP Error 400: Bad Request', 'redirected': False, 'status': 400, 'url': 'https://localhost:55000/security/user/authenticate/run_as'}"

/usr/local/lib/python3.10/dist-packages/wazuh_testing/tools/system.py:235: KeyError
------------------------------Captured stdout call------------------------------
url=https://localhost:55000/security/user/authenticate/run_as user=wazuh-wui password=wazuh-wui method=POST body="{\"username\":\"elastic\"}" validate_certs=no force_basic_auth=yes False {'changed': False, 'connection': 'close', 'content_length': '65', 'content_type': 'application/problem+json; charset=utf-8', 'date': 'Wed, 03 Jan 2024 11:03:06 GMT', 'elapsed': 0, 'msg': 'Status code was 400 and not [200]: HTTP Error 400: Bad Request', 'redirected': False, 'status': 400, 'url': 'https://localhost:55000/security/user/authenticate/run_as'}

self = <wazuh_testing.tools.system.HostManager object at 0x7ffbd916c040>, host = 'wazuh-master', user = 'wazuh-wui', password = 'wazuh-wui', auth_context = {'username': 'elastic'}, port = 55000, check = False

def get_api_token(self, host, user='wazuh', password='wazuh', auth_context=None, port=55000, check=False):
"""Return an API token for the specified user.

Args:
host (str): Hostname.
user (str, optional): API username. Default `wazuh`
password (str, optional): API password. Default `wazuh`
auth_context (dict, optional): Authorization context body. Default `None`
port (int, optional): API port. Default `55000`
check (bool, optional): Ansible check mode("Dry Run"),
by default it is enabled so no changes will be applied. Default `False`

Returns:
API token (str): Usable API token.
"""
login_endpoint = '/security/user/authenticate'
login_method = 'POST'
login_body = ''
if auth_context is not None:
login_endpoint = '/security/user/authenticate/run_as'
login_body = 'body="{}"'.format(json.dumps(auth_context).replace('"', '\\"').replace(' ', ''))

try:
token_response = self.get_host(host).ansible('uri', f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check=check)
print(f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check)
print(token_response)
> return token_response['json']['data']['token']
E KeyError: 'json'

/usr/local/lib/python3.10/dist-packages/wazuh_testing/tools/system.py:233: KeyError

During handling of the above exception, another exception occurred:

login_endpoint = {'auth_context': {'username': 'elastic'}, 'password': 'wazuh-wui', 'user': 'wazuh-wui'}, revoke_host = 'wazuh-worker1', set_default_api_conf = None

@pytest.mark.parametrize('login_endpoint', [
# User-roles based login
{},
# Auth context login
{'user': 'wazuh-wui', 'password': 'wazuh-wui', 'auth_context': {"username": "elastic"}}
])
@pytest.mark.parametrize('revoke_host', test_hosts)
def test_revoke_all_tokens_with_api(login_endpoint, revoke_host, set_default_api_conf):
"""Test that every token gets revoked after making an API call to 'PUT /security/user/revoke'.

Parameters
----------
host : str
Host where the test will be run.
"""

def default_api_call(token_dikt, expected_code=200):
for host, token in token_dikt.items():
response = host_manager.make_api_call(host, endpoint='/agents', token=token)
assert response['status'] == expected_code, f'API call failed. Response: {response}'

# Get valid tokens
> tokens = {host: host_manager.get_api_token(host, **login_endpoint) for host in test_hosts}

test_jwt_invalidation/test_revoke_endpoint.py:43:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
test_jwt_invalidation/test_revoke_endpoint.py:43: in <dictcomp>
tokens = {host: host_manager.get_api_token(host, **login_endpoint) for host in test_hosts}
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

self = <wazuh_testing.tools.system.HostManager object at 0x7ffbd916c040>, host = 'wazuh-master', user = 'wazuh-wui', password = 'wazuh-wui', auth_context = {'username': 'elastic'}, port = 55000, check = False

def get_api_token(self, host, user='wazuh', password='wazuh', auth_context=None, port=55000, check=False):
"""Return an API token for the specified user.

Args:
host (str): Hostname.
user (str, optional): API username. Default `wazuh`
password (str, optional): API password. Default `wazuh`
auth_context (dict, optional): Authorization context body. Default `None`
port (int, optional): API port. Default `55000`
check (bool, optional): Ansible check mode("Dry Run"),
by default it is enabled so no changes will be applied. Default `False`

Returns:
API token (str): Usable API token.
"""
login_endpoint = '/security/user/authenticate'
login_method = 'POST'
login_body = ''
if auth_context is not None:
login_endpoint = '/security/user/authenticate/run_as'
login_body = 'body="{}"'.format(json.dumps(auth_context).replace('"', '\\"').replace(' ', ''))

try:
token_response = self.get_host(host).ansible('uri', f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check=check)
print(f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check)
print(token_response)
return token_response['json']['data']['token']
except KeyError:
> raise KeyError(f'Failed to get token: {token_response}')
E KeyError: "Failed to get token: {'changed': False, 'connection': 'close', 'content_length': '65', 'content_type': 'application/problem+json; charset=utf-8', 'date': 'Wed, 03 Jan 2024 11:03:24 GMT', 'elapsed': 0, 'msg': 'Status code was 400 and not [200]: HTTP Error 400: Bad Request', 'redirected': False, 'status': 400, 'url': 'https://localhost:55000/security/user/authenticate/run_as'}"

/usr/local/lib/python3.10/dist-packages/wazuh_testing/tools/system.py:235: KeyError
------------------------------Captured stdout call------------------------------
url=https://localhost:55000/security/user/authenticate/run_as user=wazuh-wui password=wazuh-wui method=POST body="{\"username\":\"elastic\"}" validate_certs=no force_basic_auth=yes False {'changed': False, 'connection': 'close', 'content_length': '65', 'content_type': 'application/problem+json; charset=utf-8', 'date': 'Wed, 03 Jan 2024 11:03:24 GMT', 'elapsed': 0, 'msg': 'Status code was 400 and not [200]: HTTP Error 400: Bad Request', 'redirected': False, 'status': 400, 'url': 'https://localhost:55000/security/user/authenticate/run_as'}

self = <wazuh_testing.tools.system.HostManager object at 0x7ffbd916c040>, host = 'wazuh-master', user = 'wazuh-wui', password = 'wazuh-wui', auth_context = {'username': 'elastic'}, port = 55000, check = False

def get_api_token(self, host, user='wazuh', password='wazuh', auth_context=None, port=55000, check=False):
"""Return an API token for the specified user.

Args:
host (str): Hostname.
user (str, optional): API username. Default `wazuh`
password (str, optional): API password. Default `wazuh`
auth_context (dict, optional): Authorization context body. Default `None`
port (int, optional): API port. Default `55000`
check (bool, optional): Ansible check mode("Dry Run"),
by default it is enabled so no changes will be applied. Default `False`

Returns:
API token (str): Usable API token.
"""
login_endpoint = '/security/user/authenticate'
login_method = 'POST'
login_body = ''
if auth_context is not None:
login_endpoint = '/security/user/authenticate/run_as'
login_body = 'body="{}"'.format(json.dumps(auth_context).replace('"', '\\"').replace(' ', ''))

try:
token_response = self.get_host(host).ansible('uri', f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check=check)
print(f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check)
print(token_response)
> return token_response['json']['data']['token']
E KeyError: 'json'

/usr/local/lib/python3.10/dist-packages/wazuh_testing/tools/system.py:233: KeyError

During handling of the above exception, another exception occurred:

login_endpoint = {'auth_context': {'username': 'elastic'}, 'password': 'wazuh-wui', 'user': 'wazuh-wui'}, revoke_host = 'wazuh-worker2', set_default_api_conf = None

@pytest.mark.parametrize('login_endpoint', [
# User-roles based login
{},
# Auth context login
{'user': 'wazuh-wui', 'password': 'wazuh-wui', 'auth_context': {"username": "elastic"}}
])
@pytest.mark.parametrize('revoke_host', test_hosts)
def test_revoke_all_tokens_with_api(login_endpoint, revoke_host, set_default_api_conf):
"""Test that every token gets revoked after making an API call to 'PUT /security/user/revoke'.

Parameters
----------
host : str
Host where the test will be run.
"""

def default_api_call(token_dikt, expected_code=200):
for host, token in token_dikt.items():
response = host_manager.make_api_call(host, endpoint='/agents', token=token)
assert response['status'] == expected_code, f'API call failed. Response: {response}'

# Get valid tokens
> tokens = {host: host_manager.get_api_token(host, **login_endpoint) for host in test_hosts}

test_jwt_invalidation/test_revoke_endpoint.py:43:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
test_jwt_invalidation/test_revoke_endpoint.py:43: in <dictcomp>
tokens = {host: host_manager.get_api_token(host, **login_endpoint) for host in test_hosts}
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

self = <wazuh_testing.tools.system.HostManager object at 0x7ffbd916c040>, host = 'wazuh-master', user = 'wazuh-wui', password = 'wazuh-wui', auth_context = {'username': 'elastic'}, port = 55000, check = False

def get_api_token(self, host, user='wazuh', password='wazuh', auth_context=None, port=55000, check=False):
"""Return an API token for the specified user.

Args:
host (str): Hostname.
user (str, optional): API username. Default `wazuh`
password (str, optional): API password. Default `wazuh`
auth_context (dict, optional): Authorization context body. Default `None`
port (int, optional): API port. Default `55000`
check (bool, optional): Ansible check mode("Dry Run"),
by default it is enabled so no changes will be applied. Default `False`

Returns:
API token (str): Usable API token.
"""
login_endpoint = '/security/user/authenticate'
login_method = 'POST'
login_body = ''
if auth_context is not None:
login_endpoint = '/security/user/authenticate/run_as'
login_body = 'body="{}"'.format(json.dumps(auth_context).replace('"', '\\"').replace(' ', ''))

try:
token_response = self.get_host(host).ansible('uri', f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check=check)
print(f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check)
print(token_response)
return token_response['json']['data']['token']
except KeyError:
> raise KeyError(f'Failed to get token: {token_response}')
E KeyError: "Failed to get token: {'changed': False, 'connection': 'close', 'content_length': '65', 'content_type': 'application/problem+json; charset=utf-8', 'date': 'Wed, 03 Jan 2024 11:03:42 GMT', 'elapsed': 0, 'msg': 'Status code was 400 and not [200]: HTTP Error 400: Bad Request', 'redirected': False, 'status': 400, 'url': 'https://localhost:55000/security/user/authenticate/run_as'}"

/usr/local/lib/python3.10/dist-packages/wazuh_testing/tools/system.py:235: KeyError
------------------------------Captured stdout call------------------------------
url=https://localhost:55000/security/user/authenticate/run_as user=wazuh-wui password=wazuh-wui method=POST body="{\"username\":\"elastic\"}" validate_certs=no force_basic_auth=yes False {'changed': False, 'connection': 'close', 'content_length': '65', 'content_type': 'application/problem+json; charset=utf-8', 'date': 'Wed, 03 Jan 2024 11:03:42 GMT', 'elapsed': 0, 'msg': 'Status code was 400 and not [200]: HTTP Error 400: Bad Request', 'redirected': False, 'status': 400, 'url': 'https://localhost:55000/security/user/authenticate/run_as'}

self = <wazuh_testing.tools.system.HostManager object at 0x7ffbd916c2b0>, host = 'wazuh-master', user = 'testing_user', password = 'Newpass2*', auth_context = {'username': 'testing'}, port = 55000, check = False

def get_api_token(self, host, user='wazuh', password='wazuh', auth_context=None, port=55000, check=False):
"""Return an API token for the specified user.

Args:
host (str): Hostname.
user (str, optional): API username. Default `wazuh`
password (str, optional): API password. Default `wazuh`
auth_context (dict, optional): Authorization context body. Default `None`
port (int, optional): API port. Default `55000`
check (bool, optional): Ansible check mode("Dry Run"),
by default it is enabled so no changes will be applied. Default `False`

Returns:
API token (str): Usable API token.
"""
login_endpoint = '/security/user/authenticate'
login_method = 'POST'
login_body = ''
if auth_context is not None:
login_endpoint = '/security/user/authenticate/run_as'
login_body = 'body="{}"'.format(json.dumps(auth_context).replace('"', '\\"').replace(' ', ''))

try:
token_response = self.get_host(host).ansible('uri', f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check=check)
print(f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check)
print(token_response)
> return token_response['json']['data']['token']
E KeyError: 'json'

/usr/local/lib/python3.10/dist-packages/wazuh_testing/tools/system.py:233: KeyError

During handling of the above exception, another exception occurred:

login_endpoint = {'auth_context': {'username': 'testing'}}, host = 'wazuh-master', old_password = 'Newpass2*', new_password = 'Newpass1*', set_default_api_conf = None, create_testing_api_user = None
create_security_resources = None

@pytest.mark.parametrize('login_endpoint, host, old_password, new_password', [
# User-roles based login
({}, 'wazuh-master', test_passw, 'Newpass1*'),
({}, 'wazuh-worker1', 'Newpass1*', 'Newpass2*'),
# Auth context login
({"auth_context": {"username": "testing"}}, 'wazuh-master', 'Newpass2*', 'Newpass1*'),
({"auth_context": {"username": "testing"}}, 'wazuh-worker1', 'Newpass1*', 'Newpass2*')
])
def test_update_password(login_endpoint, host, old_password, new_password, set_default_api_conf,
create_testing_api_user,
create_security_resources):
"""Test that the obtained token is invalid after updating the password from its user.

Parameters
----------
host : str
Host where the test will be run.
old_password : str
Password before updating.
new_password : str
New password to update to.
"""
# Get token
> token = host_manager.get_api_token(host, user=test_user, password=test_passw if not old_password else old_password,
**login_endpoint)

test_jwt_invalidation/test_update_password.py:49:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

self = <wazuh_testing.tools.system.HostManager object at 0x7ffbd916c2b0>, host = 'wazuh-master', user = 'testing_user', password = 'Newpass2*', auth_context = {'username': 'testing'}, port = 55000, check = False

def get_api_token(self, host, user='wazuh', password='wazuh', auth_context=None, port=55000, check=False):
"""Return an API token for the specified user.

Args:
host (str): Hostname.
user (str, optional): API username. Default `wazuh`
password (str, optional): API password. Default `wazuh`
auth_context (dict, optional): Authorization context body. Default `None`
port (int, optional): API port. Default `55000`
check (bool, optional): Ansible check mode("Dry Run"),
by default it is enabled so no changes will be applied. Default `False`

Returns:
API token (str): Usable API token.
"""
login_endpoint = '/security/user/authenticate'
login_method = 'POST'
login_body = ''
if auth_context is not None:
login_endpoint = '/security/user/authenticate/run_as'
login_body = 'body="{}"'.format(json.dumps(auth_context).replace('"', '\\"').replace(' ', ''))

try:
token_response = self.get_host(host).ansible('uri', f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check=check)
print(f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check)
print(token_response)
return token_response['json']['data']['token']
except KeyError:
> raise KeyError(f'Failed to get token: {token_response}')
E KeyError: "Failed to get token: {'changed': False, 'connection': 'close', 'content_length': '65', 'content_type': 'application/problem+json; charset=utf-8', 'date': 'Wed, 03 Jan 2024 11:05:54 GMT', 'elapsed': 0, 'msg': 'Status code was 400 and not [200]: HTTP Error 400: Bad Request', 'redirected': False, 'status': 400, 'url': 'https://localhost:55000/security/user/authenticate/run_as'}"

/usr/local/lib/python3.10/dist-packages/wazuh_testing/tools/system.py:235: KeyError
------------------------------Captured stdout call------------------------------
url=https://localhost:55000/security/user/authenticate/run_as user=testing_user password=Newpass2* method=POST body="{\"username\":\"testing\"}" validate_certs=no force_basic_auth=yes False {'changed': False, 'connection': 'close', 'content_length': '65', 'content_type': 'application/problem+json; charset=utf-8', 'date': 'Wed, 03 Jan 2024 11:05:54 GMT', 'elapsed': 0, 'msg': 'Status code was 400 and not [200]: HTTP Error 400: Bad Request', 'redirected': False, 'status': 400, 'url': 'https://localhost:55000/security/user/authenticate/run_as'}

self = <wazuh_testing.tools.system.HostManager object at 0x7ffbd916c2b0>, host = 'wazuh-worker1', user = 'testing_user', password = 'Newpass1*', auth_context = {'username': 'testing'}, port = 55000, check = False

def get_api_token(self, host, user='wazuh', password='wazuh', auth_context=None, port=55000, check=False):
"""Return an API token for the specified user.

Args:
host (str): Hostname.
user (str, optional): API username. Default `wazuh`
password (str, optional): API password. Default `wazuh`
auth_context (dict, optional): Authorization context body. Default `None`
port (int, optional): API port. Default `55000`
check (bool, optional): Ansible check mode("Dry Run"),
by default it is enabled so no changes will be applied. Default `False`

Returns:
API token (str): Usable API token.
"""
login_endpoint = '/security/user/authenticate'
login_method = 'POST'
login_body = ''
if auth_context is not None:
login_endpoint = '/security/user/authenticate/run_as'
login_body = 'body="{}"'.format(json.dumps(auth_context).replace('"', '\\"').replace(' ', ''))

try:
token_response = self.get_host(host).ansible('uri', f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check=check)
print(f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check)
print(token_response)
> return token_response['json']['data']['token']
E KeyError: 'json'

/usr/local/lib/python3.10/dist-packages/wazuh_testing/tools/system.py:233: KeyError

During handling of the above exception, another exception occurred:

login_endpoint = {'auth_context': {'username': 'testing'}}, host = 'wazuh-worker1', old_password = 'Newpass1*', new_password = 'Newpass2*', set_default_api_conf = None, create_testing_api_user = None
create_security_resources = None

@pytest.mark.parametrize('login_endpoint, host, old_password, new_password', [
# User-roles based login
({}, 'wazuh-master', test_passw, 'Newpass1*'),
({}, 'wazuh-worker1', 'Newpass1*', 'Newpass2*'),
# Auth context login
({"auth_context": {"username": "testing"}}, 'wazuh-master', 'Newpass2*', 'Newpass1*'),
({"auth_context": {"username": "testing"}}, 'wazuh-worker1', 'Newpass1*', 'Newpass2*')
])
def test_update_password(login_endpoint, host, old_password, new_password, set_default_api_conf,
create_testing_api_user,
create_security_resources):
"""Test that the obtained token is invalid after updating the password from its user.

Parameters
----------
host : str
Host where the test will be run.
old_password : str
Password before updating.
new_password : str
New password to update to.
"""
# Get token
> token = host_manager.get_api_token(host, user=test_user, password=test_passw if not old_password else old_password,
**login_endpoint)

test_jwt_invalidation/test_update_password.py:49:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

self = <wazuh_testing.tools.system.HostManager object at 0x7ffbd916c2b0>, host = 'wazuh-worker1', user = 'testing_user', password = 'Newpass1*', auth_context = {'username': 'testing'}, port = 55000, check = False

def get_api_token(self, host, user='wazuh', password='wazuh', auth_context=None, port=55000, check=False):
"""Return an API token for the specified user.

Args:
host (str): Hostname.
user (str, optional): API username. Default `wazuh`
password (str, optional): API password. Default `wazuh`
auth_context (dict, optional): Authorization context body. Default `None`
port (int, optional): API port. Default `55000`
check (bool, optional): Ansible check mode("Dry Run"),
by default it is enabled so no changes will be applied. Default `False`

Returns:
API token (str): Usable API token.
"""
login_endpoint = '/security/user/authenticate'
login_method = 'POST'
login_body = ''
if auth_context is not None:
login_endpoint = '/security/user/authenticate/run_as'
login_body = 'body="{}"'.format(json.dumps(auth_context).replace('"', '\\"').replace(' ', ''))

try:
token_response = self.get_host(host).ansible('uri', f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check=check)
print(f"url=https://localhost:{port}{login_endpoint} "
f"user={user} password={password} "
f"method={login_method} {login_body} validate_certs=no "
f"force_basic_auth=yes",
check)
print(token_response)
return token_response['json']['data']['token']
except KeyError:
> raise KeyError(f'Failed to get token: {token_response}')
E KeyError: "Failed to get token: {'changed': False, 'connection': 'close', 'content_length': '59', 'content_type': 'application/problem+json; charset=utf-8', 'date': 'Wed, 03 Jan 2024 11:05:56 GMT', 'elapsed': 0, 'msg': 'Status code was 401 and not [200]: HTTP Error 401: Unauthorized', 'redirected': False, 'status': 401, 'url': 'https://localhost:55000/security/user/authenticate/run_as'}"

/usr/local/lib/python3.10/dist-packages/wazuh_testing/tools/system.py:235: KeyError
------------------------------Captured stdout call------------------------------
url=https://localhost:55000/security/user/authenticate/run_as user=testing_user password=Newpass1* method=POST body="{\"username\":\"testing\"}" validate_certs=no force_basic_auth=yes False {'changed': False, 'connection': 'close', 'content_length': '59', 'content_type': 'application/problem+json; charset=utf-8', 'date': 'Wed, 03 Jan 2024 11:05:56 GMT', 'elapsed': 0, 'msg': 'Status code was 401 and not [200]: HTTP Error 401: Unauthorized', 'redirected': False, 'status': 401, 'url': 'https://localhost:55000/security/user/authenticate/run_as'}
----------------------------Captured stdout teardown----------------------------
url=https://localhost:55000/security/user/authenticate user=wazuh password=wazuh method=POST validate_certs=no force_basic_auth=yes False {'cache_control': 'no-cache, no-store, must-revalidate, max-age=0', 'changed': False, 'connection': 'close', 'content_length': '433', 'content_security_policy': 'none', 'content_type': 'application/json; charset=utf-8', 'cookies': {}, 'cookies_string': '', 'date': 'Wed, 03 Jan 2024 11:05:58 GMT', 'elapsed': 0, 'expires': '0', 'json': {'data': {'token': 'eyJhbGciOiJFUzUxMiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJ3YXp1aCIsImF1ZCI6IldhenVoIEFQSSBSRVNUIiwibmJmIjoxNzA0Mjc5OTU4LCJleHAiOjE3MDQyODA4NTgsInN1YiI6IndhenVoIiwicnVuX2FzIjpmYWxzZSwicmJhY19yb2xlcyI6WzFdLCJyYmFjX21vZGUiOiJibGFjayJ9.AQRFJG10_hT4WIJ8Aib81hPr5SWj0FChBwPx0CueA6J5aAahkTEr_UOhiUCB_neonFIAUi4XojnLHfaB-D8ez5JbAJjVEygKPARId_klMye0MdyrxuiCOJvHYPc3NZ2_zkr8i3BI1_9wXF0emQUNTZpUA4HosKJ8j8tSHMzJeDY11yy-'}, 'error': 0}, 'msg': 'OK (433 bytes)', 'pragma': 'no-cache', 'redirected': False, 'referrer_policy': 'no-referrer, strict-origin-when-cross-origin', 'status': 200, 'strict_transport_security': 'max-age=63072000; includeSubdomains', 'url': 'https://localhost:55000/security/user/authenticate', 'x_content_type_options': 'nosniff', 'x_frame_options': 'DENY', 'x_xss_protection': '1; mode=block'} url=https://localhost:55000/security/user/authenticate user=wazuh password=wazuh method=POST validate_certs=no force_basic_auth=yes False {'cache_control': 'no-cache, no-store, must-revalidate, max-age=0', 'changed': False, 'connection': 'close', 'content_length': '433', 'content_security_policy': 'none', 'content_type': 'application/json; charset=utf-8', 'cookies': {}, 'cookies_string': '', 'date': 'Wed, 03 Jan 2024 11:06:04 GMT', 'elapsed': 0, 'expires': '0', 'json': {'data': {'token': 'eyJhbGciOiJFUzUxMiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJ3YXp1aCIsImF1ZCI6IldhenVoIEFQSSBSRVNUIiwibmJmIjoxNzA0Mjc5OTY0LCJleHAiOjE3MDQyODA4NjQsInN1YiI6IndhenVoIiwicnVuX2FzIjpmYWxzZSwicmJhY19yb2xlcyI6WzFdLCJyYmFjX21vZGUiOiJibGFjayJ9.ACLwJdlpOcDHvEYQwQHHwdGY1Yb_-DSb8jFyDFWD8tDdnA3a1NxgdrbCQwmEAzpdAFUF1pHIKj8-Dv-JpEwWSwFsAGR9WtuBJEBE1T5ohJPzcKV7Qa-ZKNAx9Z1s2jwFjwRvXeNkClB8YSZO-jXTCgIQtw9yP4sIoLsahjEQjlwmlreT'}, 'error': 0}, 'msg': 'OK (433 bytes)', 'pragma': 'no-cache', 'redirected': False, 'referrer_policy': 'no-referrer, strict-origin-when-cross-origin', 'status': 200, 'strict_transport_security': 'max-age=63072000; includeSubdomains', 'url': 'https://localhost:55000/security/user/authenticate', 'x_content_type_options': 'nosniff', 'x_frame_options': 'DENY', 'x_xss_protection': '1; mode=block'}