Resolve "API Token nur bei Einträgen in der Session zulassen"

Closes #38 (closed)

test/test_sams_proxy.py

@@ -234,4 +234,38 @@ class TestSAMSHubWithThreadedAPI(unittest.TestCase):
           self.assertEqual(resDict['body']['g'], 'bar')
           self.assertEqual(resDict['header']['Lang'], 'klingon')
           eprint(resDict[param_type]) 
-          self.assertEquals(resDict[param_type]['Api-Token'], '53CUR34P170K3N')
+          self.assertEquals(resDict[param_type]['Api-Token'], '53CUR34P170K3N')
\ No newline at end of file
+
+  def test_no_token_passthrough_without_session(self):
+    """The proxy passes the specified token and the other params"""
+    for param_type in ('header', 'url', 'body'):
+      proxyApp = Flask('test')
+      proxyApp.config['TESTING'] = True
+      proxyApp.secret_key = 'A0Zr98j/3yX R~XHH!jmN]LWX/,?RT'
+      proxy = SAMSProxy(
+        proxySpec = {
+          'in': '/proxy', 'out': 'http://localhost:4711',
+          'token': {
+            'name': 'Api-Token', 'value': '53CUR34P170K3N',
+            'param-type': param_type
+          }
+        }
+      )
+      with self.subTest(param_type):
+        proxyApp.add_url_rule(rule = proxy.urlRule, endpoint = 'proxy',
+          view_func = proxy.proxy, methods=['GET', 'POST', 'PUT', 'UPDATE',
+            'PATCH', 'DELETE', 'OPTIONS'])
+        proxyApp.add_url_rule(rule = proxy.rootUrlRule, endpoint = 'proxy',
+          view_func = proxy.proxy, methods=['GET', 'POST', 'PUT', 'UPDATE',
+            'PATCH', 'DELETE', 'OPTIONS'])
+        with proxyApp.test_client(self) as client:
+          res = client.get(path='/proxy/passthrough',
+            query_string={'u':'foo'}, data={'g':'bar'},
+            headers={'lang': 'klingon'})
+          resDict = json.loads(res.data.decode('utf-8'))
+          self.assertEqual(resDict['url']['u'], 'foo')
+          self.assertEqual(resDict['body']['g'], 'bar')
+          self.assertEqual(resDict['header']['Lang'], 'klingon')
+          eprint(resDict[param_type]) 
+          self.assertNotEquals(
+            resDict.get(param_type, {}).get('Api-Token'), '53CUR34P170K3N')
\ No newline at end of file