From 5cb7927c04ce341aaa6d6000600acac51b0a6231 Mon Sep 17 00:00:00 2001
From: Pierre-Yves Chibon <pingou@pingoured.fr>
Date: Mar 06 2019 11:30:20 +0000
Subject: Port the flask_admin unit-tests to OIDC.


Basically, we need to patch user_getfield to that it returns the admin
group making the user an admin, which is necessary to test these
endpoints.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>

---

diff --git a/tests/test_flask_admin.py b/tests/test_flask_admin.py
index b7d5bc3..45ebcc6 100644
--- a/tests/test_flask_admin.py
+++ b/tests/test_flask_admin.py
@@ -32,6 +32,7 @@ from datetime import time
 from datetime import timedelta
 
 import flask
+from mock import patch, MagicMock
 
 sys.path.insert(0, os.path.join(os.path.dirname(
     os.path.abspath(__file__)), '..'))
@@ -49,16 +50,39 @@ class FlaskAdmintests(ModelFlasktests):
         user = FakeUser(
             fedora_elections.APP.config['FEDORA_ELECTIONS_ADMIN_GROUP'],
             username='toshio')
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/election_test/')
-            self.assertEqual(output.status_code, 404)
 
+        with user_set(fedora_elections.APP, user, oidc_id_token='foobar'):
+            with patch(
+                    'fedora_elections.OIDC.user_getfield',
+                    MagicMock(return_value=['elections'])):
+                output = self.app.get('/admin/election_test/')
+                self.assertEqual(output.status_code, 404)
+
+        self.setup_db()
+
+        with user_set(fedora_elections.APP, user, oidc_id_token='foobar'):
+            with patch(
+                    'fedora_elections.OIDC.user_getfield',
+                    MagicMock(return_value=['elections'])):
+                output = self.app.get('/admin/test_election/')
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue('Candidates <span class="label label-pill label-default">3</span>' in output.data)
+
+    def test_admin_no_cla(self):
+        """ Test the admin_new_election function. """
         self.setup_db()
 
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test_election/')
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue('Candidates <span class="label label-pill label-default">3</span>' in output.data)
+        user = FakeUser(
+            fedora_elections.APP.config['FEDORA_ELECTIONS_ADMIN_GROUP'],
+            username='toshio')
+
+        user.cla_done = False
+        with user_set(fedora_elections.APP, user, oidc_id_token='foobar'):
+            with patch(
+                    'fedora_elections.OIDC.user_getfield',
+                    MagicMock(return_value=['elections'])):
+                output = self.app.get('/admin/new')
+                self.assertEqual(output.status_code, 403)
 
     def test_admin_new_election(self):
         """ Test the admin_new_election function. """
@@ -67,410 +91,421 @@ class FlaskAdmintests(ModelFlasktests):
         user = FakeUser(
             fedora_elections.APP.config['FEDORA_ELECTIONS_ADMIN_GROUP'],
             username='toshio')
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/new')
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                '<h2>Create new election</h2>' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" required type="text" ', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" type="text" ', output.data)
-
-            # No csrf provided
-            data = {
-                'alias': 'new_election',
-                'shortdesc': 'new election shortdesc',
-                'description': 'new election description',
-                'voting_type': 'simple',
-                'url': 'https://fedoraproject.org',
-                'start_date': TODAY + timedelta(days=2),
-                'end_date': TODAY + timedelta(days=4),
-                'seats_elected': '2',
-                'candidates_are_fasusers': False,
-                'embargoed': True,
-            }
-
-            output = self.app.post('/admin/new', data=data)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                '<h2>Create new election</h2>' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" required type="text" ', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" type="text" ', output.data)
-
-            csrf_token = self.get_csrf(output=output)
-
-            # Description missing
-            data = {
-                'alias': 'new_election',
-                'shortdesc': 'new election shortdesc',
-                'voting_type': 'simple',
-                'url': 'https://fedoraproject.org',
-                'start_date': TODAY + timedelta(days=2),
-                'end_date': TODAY + timedelta(days=4),
-                'seats_elected': '2',
-                'candidates_are_fasusers': False,
-                'embargoed': True,
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post('/admin/new', data=data)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                '<h2>Create new election</h2>' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" required type="text" ', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" type="text" ', output.data)
-            self.assertTrue(
-                '<div class="form-control-feedback">This field is required.</div>'
-                in output.data)
-
-            # Invalid alias
-            data = {
-                'alias': 'new',
-                'shortdesc': 'new election shortdesc',
-                'description': 'new election description',
-                'voting_type': 'simple',
-                'url': 'https://fedoraproject.org',
-                'start_date': TODAY + timedelta(days=2),
-                'end_date': TODAY + timedelta(days=4),
-                'seats_elected': 2,
-                'candidates_are_fasusers': False,
-                'embargoed': True,
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post('/admin/new', data=data)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                '<h2>Create new election</h2>' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" required type="text" ', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" type="text" ', output.data)
-            self.assertTrue(
-                '<div class="form-control-feedback">The alias cannot be <code>new</code>.</div>'
-                in output.data)
-
-            # Invalid: end_date earlier than start_date
-            data = {
-                'alias': 'new_election',
-                'shortdesc': 'new election shortdesc',
-                'description': 'new election description',
-                'voting_type': 'simple',
-                'url': 'https://fedoraproject.org',
-                'start_date': TODAY + timedelta(days=6),
-                'end_date': TODAY + timedelta(days=4),
-                'seats_elected': 2,
-                'candidates_are_fasusers': False,
-                'embargoed': True,
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post('/admin/new', data=data)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                '<h2>Create new election</h2>' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
+
+        with user_set(fedora_elections.APP, user, oidc_id_token='foobar'):
+            with patch(
+                    'fedora_elections.OIDC.user_getfield',
+                    MagicMock(return_value=['elections'])):
+                output = self.app.get('/admin/new')
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    '<h2>Create new election</h2>' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" required type="text" ', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" type="text" ', output.data)
+
+                # No csrf provided
+                data = {
+                    'alias': 'new_election',
+                    'shortdesc': 'new election shortdesc',
+                    'description': 'new election description',
+                    'voting_type': 'simple',
+                    'url': 'https://fedoraproject.org',
+                    'start_date': TODAY + timedelta(days=2),
+                    'end_date': TODAY + timedelta(days=4),
+                    'seats_elected': '2',
+                    'candidates_are_fasusers': False,
+                    'embargoed': True,
+                }
+
+                output = self.app.post('/admin/new', data=data)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    '<h2>Create new election</h2>' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" required type="text" ', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" type="text" ', output.data)
+
+                csrf_token = self.get_csrf(output=output)
+
+                # Description missing
+                data = {
+                    'alias': 'new_election',
+                    'shortdesc': 'new election shortdesc',
+                    'voting_type': 'simple',
+                    'url': 'https://fedoraproject.org',
+                    'start_date': TODAY + timedelta(days=2),
+                    'end_date': TODAY + timedelta(days=4),
+                    'seats_elected': '2',
+                    'candidates_are_fasusers': False,
+                    'embargoed': True,
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post('/admin/new', data=data)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    '<h2>Create new election</h2>' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" required type="text" ', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" type="text" ', output.data)
+                self.assertTrue(
+                    '<div class="form-control-feedback">This field is required.</div>'
+                    in output.data)
+
+                # Invalid alias
+                data = {
+                    'alias': 'new',
+                    'shortdesc': 'new election shortdesc',
+                    'description': 'new election description',
+                    'voting_type': 'simple',
+                    'url': 'https://fedoraproject.org',
+                    'start_date': TODAY + timedelta(days=2),
+                    'end_date': TODAY + timedelta(days=4),
+                    'seats_elected': 2,
+                    'candidates_are_fasusers': False,
+                    'embargoed': True,
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post('/admin/new', data=data)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    '<h2>Create new election</h2>' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" required type="text" ', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" type="text" ', output.data)
+                self.assertTrue(
+                    '<div class="form-control-feedback">The alias cannot be <code>new</code>.</div>'
+                    in output.data)
+
+                # Invalid: end_date earlier than start_date
+                data = {
+                    'alias': 'new_election',
+                    'shortdesc': 'new election shortdesc',
+                    'description': 'new election description',
+                    'voting_type': 'simple',
+                    'url': 'https://fedoraproject.org',
+                    'start_date': TODAY + timedelta(days=6),
+                    'end_date': TODAY + timedelta(days=4),
+                    'seats_elected': 2,
+                    'candidates_are_fasusers': False,
+                    'embargoed': True,
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post('/admin/new', data=data)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    '<h2>Create new election</h2>' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" required type="text" ', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" type="text" ', output.data)
+                self.assertTrue(
+                    'class="form-control-feedback">End date must be later than start date.</div>'
+                    in output.data)
+
+                # Invalid: alias already taken
+                data = {
+                    'alias': 'test_election',
+                    'shortdesc': 'new election shortdesc',
+                    'description': 'new election description',
+                    'voting_type': 'simple',
+                    'url': 'https://fedoraproject.org',
+                    'start_date': TODAY + timedelta(days=6),
+                    'end_date': TODAY + timedelta(days=4),
+                    'seats_elected': 2,
+                    'candidates_are_fasusers': False,
+                    'embargoed': True,
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post('/admin/new', data=data)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    '<h2>Create new election</h2>' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" required type="text" ', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" type="text" ', output.data)
+                self.assertTrue(
+                    '<div class="form-control-feedback">There is already another election with '
+                    'this alias.</div>' in output.data)
+
+                # Invalid: shortdesc already taken
+                data = {
+                    'alias': 'new_election',
+                    'shortdesc': 'test election shortdesc',
+                    'description': 'new election description',
+                    'voting_type': 'simple',
+                    'url': 'https://fedoraproject.org',
+                    'start_date': TODAY + timedelta(days=6),
+                    'end_date': TODAY + timedelta(days=4),
+                    'seats_elected': 2,
+                    'candidates_are_fasusers': False,
+                    'embargoed': True,
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post('/admin/new', data=data)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    '<h2>Create new election</h2>' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" required type="text" ', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" type="text" ', output.data)
+                self.assertTrue(
+                    '<div class="form-control-feedback">There is already another election with '
+                    'this summary.</div>' in output.data)
+
+                # All good  -  max_votes is ignored as it is not a integer
+                data = {
+                    'alias': 'new_election',
+                    'shortdesc': 'new election shortdesc',
+                    'description': 'new election description',
+                    'voting_type': 'simple',
+                    'url': 'https://fedoraproject.org',
+                    'start_date': TODAY + timedelta(days=2),
+                    'end_date': TODAY + timedelta(days=4),
+                    'seats_elected': 2,
+                    'candidates_are_fasusers': False,
+                    'embargoed': True,
+                    'admin_grp': 'testers, sysadmin-main,,',
+                    'lgl_voters': 'testers, packager,,',
+                    'max_votes': 'wrong',
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post(
+                    '/admin/new', data=data, follow_redirects=True)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    'Election "new_election" added'
+                    in output.data)
+                self.assertTrue(
+                    'There are no candidates.' in output.data)
                 self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" required type="text" ', output.data)
-            else:
+                    'input class="form-control" id="admin_grp" '
+                    'name="admin_grp" type="text" '
+                    'value="sysadmin-main, testers">', output.data)
                 self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" type="text" ', output.data)
-            self.assertTrue(
-                'class="form-control-feedback">End date must be later than start date.</div>'
-                in output.data)
-
-            # Invalid: alias already taken
-            data = {
-                'alias': 'test_election',
-                'shortdesc': 'new election shortdesc',
-                'description': 'new election description',
-                'voting_type': 'simple',
-                'url': 'https://fedoraproject.org',
-                'start_date': TODAY + timedelta(days=6),
-                'end_date': TODAY + timedelta(days=4),
-                'seats_elected': 2,
-                'candidates_are_fasusers': False,
-                'embargoed': True,
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post('/admin/new', data=data)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                '<h2>Create new election</h2>' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
+                    'input class="form-control" id="lgl_voters" '
+                    'name="lgl_voters" type="text" '
+                    'value="packager, testers">', output.data)
                 self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" required type="text" ', output.data)
-            else:
+                    'input class="form-control" id="max_votes" '
+                    'name="max_votes" type="text" '
+                    'value="">', output.data)
+
+                # All good  -  max_votes is ignored as it is not a integer
+                data = {
+                    'alias': 'new_election2',
+                    'shortdesc': 'new election2 shortdesc',
+                    'description': 'new election2 description',
+                    'voting_type': 'simple',
+                    'url': 'https://fedoraproject.org',
+                    'start_date': TODAY + timedelta(days=2),
+                    'end_date': TODAY + timedelta(days=4),
+                    'seats_elected': 2,
+                    'candidates_are_fasusers': False,
+                    'embargoed': True,
+                    'admin_grp': 'testers, , sysadmin-main,,',
+                    'lgl_voters': 'testers, packager,,,',
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post(
+                    '/admin/new', data=data, follow_redirects=True)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    'Election "new_election2" added'
+                    in output.data)
+                self.assertTrue(
+                    'There are no candidates.' in output.data)
                 self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" type="text" ', output.data)
-            self.assertTrue(
-                '<div class="form-control-feedback">There is already another election with '
-                'this alias.</div>' in output.data)
-
-            # Invalid: shortdesc already taken
-            data = {
-                'alias': 'new_election',
-                'shortdesc': 'test election shortdesc',
-                'description': 'new election description',
-                'voting_type': 'simple',
-                'url': 'https://fedoraproject.org',
-                'start_date': TODAY + timedelta(days=6),
-                'end_date': TODAY + timedelta(days=4),
-                'seats_elected': 2,
-                'candidates_are_fasusers': False,
-                'embargoed': True,
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post('/admin/new', data=data)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                '<h2>Create new election</h2>' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
+                    'input class="form-control" id="admin_grp" '
+                    'name="admin_grp" type="text" '
+                    'value="sysadmin-main, testers">', output.data)
                 self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" required type="text" ', output.data)
-            else:
+                    'input class="form-control" id="lgl_voters" '
+                    'name="lgl_voters" type="text" '
+                    'value="packager, testers">', output.data)
                 self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" type="text" ', output.data)
-            self.assertTrue(
-                '<div class="form-control-feedback">There is already another election with '
-                'this summary.</div>' in output.data)
-
-            # All good  -  max_votes is ignored as it is not a integer
-            data = {
-                'alias': 'new_election',
-                'shortdesc': 'new election shortdesc',
-                'description': 'new election description',
-                'voting_type': 'simple',
-                'url': 'https://fedoraproject.org',
-                'start_date': TODAY + timedelta(days=2),
-                'end_date': TODAY + timedelta(days=4),
-                'seats_elected': 2,
-                'candidates_are_fasusers': False,
-                'embargoed': True,
-                'admin_grp': 'testers, sysadmin-main,,',
-                'lgl_voters': 'testers, packager,,',
-                'max_votes': 'wrong',
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post(
-                '/admin/new', data=data, follow_redirects=True)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                'Election "new_election" added'
-                in output.data)
-            self.assertTrue(
-                'There are no candidates.' in output.data)
-            self.assertIn(
-                'input class="form-control" id="admin_grp" '
-                'name="admin_grp" type="text" '
-                'value="sysadmin-main, testers">', output.data)
-            self.assertIn(
-                'input class="form-control" id="lgl_voters" '
-                'name="lgl_voters" type="text" '
-                'value="packager, testers">', output.data)
-            self.assertIn(
-                'input class="form-control" id="max_votes" '
-                'name="max_votes" type="text" '
-                'value="">', output.data)
-
-            # All good  -  max_votes is ignored as it is not a integer
-            data = {
-                'alias': 'new_election2',
-                'shortdesc': 'new election2 shortdesc',
-                'description': 'new election2 description',
-                'voting_type': 'simple',
-                'url': 'https://fedoraproject.org',
-                'start_date': TODAY + timedelta(days=2),
-                'end_date': TODAY + timedelta(days=4),
-                'seats_elected': 2,
-                'candidates_are_fasusers': False,
-                'embargoed': True,
-                'admin_grp': 'testers, , sysadmin-main,,',
-                'lgl_voters': 'testers, packager,,,',
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post(
-                '/admin/new', data=data, follow_redirects=True)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                'Election "new_election2" added'
-                in output.data)
-            self.assertTrue(
-                'There are no candidates.' in output.data)
-            self.assertIn(
-                'input class="form-control" id="admin_grp" '
-                'name="admin_grp" type="text" '
-                'value="sysadmin-main, testers">', output.data)
-            self.assertIn(
-                'input class="form-control" id="lgl_voters" '
-                'name="lgl_voters" type="text" '
-                'value="packager, testers">', output.data)
-            self.assertIn(
-                'input class="form-control" id="max_votes" '
-                'name="max_votes" type="text" '
-                'value="">', output.data)
+                    'input class="form-control" id="max_votes" '
+                    'name="max_votes" type="text" '
+                    'value="">', output.data)
 
     def test_admin_edit_election(self):
         """ Test the admin_edit_election function. """
         user = FakeUser(
             fedora_elections.APP.config['FEDORA_ELECTIONS_ADMIN_GROUP'],
             username='toshio')
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test_election/')
-            self.assertEqual(output.status_code, 404)
+
+        with user_set(fedora_elections.APP, user, oidc_id_token='foobar'):
+            with patch(
+                    'fedora_elections.OIDC.user_getfield',
+                    MagicMock(return_value=['elections'])):
+                output = self.app.get('/admin/test_election/')
+                self.assertEqual(output.status_code, 404)
 
         self.setup_db()
 
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test_election/')
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                'Election Details' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
+        with user_set(fedora_elections.APP, user, oidc_id_token='foobar'):
+            with patch(
+                    'fedora_elections.OIDC.user_getfield',
+                    MagicMock(return_value=['elections'])):
+                output = self.app.get('/admin/test_election/')
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    'Election Details' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" required type="text" ', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" type="text" ', output.data)
+
+                data = {
+                    'alias': 'test_election',
+                    'shortdesc': 'test election shortdesc',
+                    'description': 'test election description',
+                    'voting_type': 'simple',
+                    'url': 'https://fedoraproject.org',
+                    'start_date': TODAY - timedelta(days=10),
+                    'end_date': TODAY - timedelta(days=8),
+                    'seats_elected': '2',
+                    'candidates_are_fasusers': False,
+                    'embargoed': False,
+                }
+
+                output = self.app.post('/admin/test_election/', data=data)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    'Election Details' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" required type="text" ', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" type="text" ', output.data)
+
+                csrf_token = self.get_csrf()
+
+                data = {
+                    'alias': 'test_election',
+                    'voting_type': 'simple',
+                    'url': 'https://fedoraproject.org',
+                    'start_date': TODAY - timedelta(days=10),
+                    'end_date': TODAY - timedelta(days=8),
+                    'seats_elected': '2',
+                    'candidates_are_fasusers': False,
+                    'embargoed': False,
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post(
+                    '/admin/test_election/', data=data)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    'Election Details' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" required type="text" ', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="shortdesc" '
+                        'name="shortdesc" type="text" ', output.data)
                 self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" required type="text" ', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" type="text" ', output.data)
-
-            data = {
-                'alias': 'test_election',
-                'shortdesc': 'test election shortdesc',
-                'description': 'test election description',
-                'voting_type': 'simple',
-                'url': 'https://fedoraproject.org',
-                'start_date': TODAY - timedelta(days=10),
-                'end_date': TODAY - timedelta(days=8),
-                'seats_elected': '2',
-                'candidates_are_fasusers': False,
-                'embargoed': False,
-            }
-
-            output = self.app.post('/admin/test_election/', data=data)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                'Election Details' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" required type="text" ', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" type="text" ', output.data)
-
-            csrf_token = self.get_csrf()
-
-            data = {
-                'alias': 'test_election',
-                'voting_type': 'simple',
-                'url': 'https://fedoraproject.org',
-                'start_date': TODAY - timedelta(days=10),
-                'end_date': TODAY - timedelta(days=8),
-                'seats_elected': '2',
-                'candidates_are_fasusers': False,
-                'embargoed': False,
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post(
-                '/admin/test_election/', data=data)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                'Election Details' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" required type="text" ', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="shortdesc" '
-                    'name="shortdesc" type="text" ', output.data)
-            self.assertIn(
-                '<div class="form-control-feedback">This field is required.</div>',
-                output.data)
-
-            # Check election before edit
-            output = self.app.get('/admin/test_election/')
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue('Candidates <span class="label label-pill label-default">3</span>' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="seats_elected" '
-                    'name="seats_elected" required type="text" '
-                    'value="1">', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="seats_elected" '
-                    'name="seats_elected" type="text" '
-                    'value="1">', output.data)
-
-            data = {
-                'alias': 'test_election',
-                'shortdesc': 'test election shortdesc',
-                'description': 'test election description',
-                'voting_type': 'simple',
-                'url': 'https://fedoraproject.org',
-                'start_date': TODAY - timedelta(days=10),
-                'end_date': TODAY - timedelta(days=8),
-                'seats_elected': '2',
-                'candidates_are_fasusers': False,
-                'embargoed': False,
-                'max_votes': 'wrong',
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post(
-                '/admin/test_election/', data=data, follow_redirects=True)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                'Election "test_election" saved'
-                in output.data)
-            # We edited the seats_elected from 1 to 2
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="seats_elected" '
-                    'name="seats_elected" required type="text" '
-                    'value="2">', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="seats_elected" '
-                    'name="seats_elected" type="text" '
-                    'value="2">', output.data)
-            self.assertTrue('Candidates <span class="label label-pill label-default">3</span>' in output.data)
+                    '<div class="form-control-feedback">This field is required.</div>',
+                    output.data)
+
+                # Check election before edit
+                output = self.app.get('/admin/test_election/')
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue('Candidates <span class="label label-pill label-default">3</span>' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="seats_elected" '
+                        'name="seats_elected" required type="text" '
+                        'value="1">', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="seats_elected" '
+                        'name="seats_elected" type="text" '
+                        'value="1">', output.data)
+
+                data = {
+                    'alias': 'test_election',
+                    'shortdesc': 'test election shortdesc',
+                    'description': 'test election description',
+                    'voting_type': 'simple',
+                    'url': 'https://fedoraproject.org',
+                    'start_date': TODAY - timedelta(days=10),
+                    'end_date': TODAY - timedelta(days=8),
+                    'seats_elected': '2',
+                    'candidates_are_fasusers': False,
+                    'embargoed': False,
+                    'max_votes': 'wrong',
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post(
+                    '/admin/test_election/', data=data, follow_redirects=True)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    'Election "test_election" saved'
+                    in output.data)
+                # We edited the seats_elected from 1 to 2
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="seats_elected" '
+                        'name="seats_elected" required type="text" '
+                        'value="2">', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="seats_elected" '
+                        'name="seats_elected" type="text" '
+                        'value="2">', output.data)
+                self.assertTrue('Candidates <span class="label label-pill label-default">3</span>' in output.data)
 
     def test_admin_edit_election_admin_groups(self):
         """ Test the admin_edit_election function when editing admin groups.
@@ -478,109 +513,116 @@ class FlaskAdmintests(ModelFlasktests):
         user = FakeUser(
             fedora_elections.APP.config['FEDORA_ELECTIONS_ADMIN_GROUP'],
             username='toshio')
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test_election/edit')
-            self.assertEqual(output.status_code, 404)
-
-        self.setup_db()
 
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test_election2/')
-            self.assertEqual(output.status_code, 200)
-            csrf_token = self.get_csrf(output=output)
+        with user_set(fedora_elections.APP, user, oidc_id_token='foobar'):
+            with patch(
+                    'fedora_elections.OIDC.user_getfield',
+                    MagicMock(return_value=['elections'])):
+                output = self.app.get('/admin/test_election/edit')
+                self.assertEqual(output.status_code, 404)
 
-            # Edit Admin Group
+        self.setup_db()
 
-            # Check election before edit
-            output = self.app.get('/admin/test_election2/')
-            self.assertEqual(output.status_code, 200)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="seats_elected" '
-                    'name="seats_elected" required type="text" '
-                    'value="1">', output.data)
-            else:
+        with user_set(fedora_elections.APP, user, oidc_id_token='foobar'):
+            with patch(
+                    'fedora_elections.OIDC.user_getfield',
+                    MagicMock(return_value=['elections'])):
+                output = self.app.get('/admin/test_election2/')
+                self.assertEqual(output.status_code, 200)
+                csrf_token = self.get_csrf(output=output)
+
+                # Edit Admin Group
+
+                # Check election before edit
+                output = self.app.get('/admin/test_election2/')
+                self.assertEqual(output.status_code, 200)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="seats_elected" '
+                        'name="seats_elected" required type="text" '
+                        'value="1">', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="seats_elected" '
+                        'name="seats_elected" type="text" '
+                        'value="1">', output.data)
+                self.assertTrue('Candidates <span class="label' in output.data)
+
+                # Add a new admin group: sysadmin-main
+                data = {
+                    'alias': 'test_election2',
+                    'shortdesc': 'test election 2 shortdesc',
+                    'description': 'test election 2 description',
+                    'voting_type': 'range',
+                    'url': 'https://fedoraproject.org',
+                    'start_date': TODAY - timedelta(days=7),
+                    'end_date': TODAY - timedelta(days=5),
+                    'seats_elected': '2',
+                    'candidates_are_fasusers': False,
+                    'embargoed': False,
+                    'admin_grp': 'testers, sysadmin-main',
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post(
+                    '/admin/test_election2/', data=data, follow_redirects=True)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    'Election "test_election2" saved'
+                    in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="seats_elected" '
+                        'name="seats_elected" required type="text" '
+                        'value="2">', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="seats_elected" '
+                        'name="seats_elected" type="text" '
+                        'value="2">', output.data)
+                # We edited the admin groups
                 self.assertIn(
-                    'input class="form-control" id="seats_elected" '
-                    'name="seats_elected" type="text" '
-                    'value="1">', output.data)
-            self.assertTrue('Candidates <span class="label' in output.data)
-
-            # Add a new admin group: sysadmin-main
-            data = {
-                'alias': 'test_election2',
-                'shortdesc': 'test election 2 shortdesc',
-                'description': 'test election 2 description',
-                'voting_type': 'range',
-                'url': 'https://fedoraproject.org',
-                'start_date': TODAY - timedelta(days=7),
-                'end_date': TODAY - timedelta(days=5),
-                'seats_elected': '2',
-                'candidates_are_fasusers': False,
-                'embargoed': False,
-                'admin_grp': 'testers, sysadmin-main',
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post(
-                '/admin/test_election2/', data=data, follow_redirects=True)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                'Election "test_election2" saved'
-                in output.data)
-            if self.get_wtforms_version() >= (2, 2):
+                    'input class="form-control" id="admin_grp" '
+                    'name="admin_grp" type="text" '
+                    'value="sysadmin-main, testers">', output.data)
+
+                # Remove an existing group: testers
+                data = {
+                    'alias': 'test_election2',
+                    'shortdesc': 'test election 2 shortdesc',
+                    'description': 'test election 2 description',
+                    'voting_type': 'range',
+                    'url': 'https://fedoraproject.org',
+                    'start_date': TODAY - timedelta(days=7),
+                    'end_date': TODAY - timedelta(days=5),
+                    'seats_elected': '2',
+                    'candidates_are_fasusers': False,
+                    'embargoed': False,
+                    'admin_grp': 'sysadmin-main',
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post(
+                    '/admin/test_election2/', data=data, follow_redirects=True)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    'Election "test_election2" saved'
+                    in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="seats_elected" '
+                        'name="seats_elected" required type="text" '
+                        'value="2">', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="seats_elected" '
+                        'name="seats_elected" type="text" '
+                        'value="2">', output.data)
+                # We edited the admin groups
                 self.assertIn(
-                    'input class="form-control" id="seats_elected" '
-                    'name="seats_elected" required type="text" '
-                    'value="2">', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="seats_elected" '
-                    'name="seats_elected" type="text" '
-                    'value="2">', output.data)
-            # We edited the admin groups
-            self.assertIn(
-                'input class="form-control" id="admin_grp" '
-                'name="admin_grp" type="text" '
-                'value="sysadmin-main, testers">', output.data)
-
-            # Remove an existing group: testers
-            data = {
-                'alias': 'test_election2',
-                'shortdesc': 'test election 2 shortdesc',
-                'description': 'test election 2 description',
-                'voting_type': 'range',
-                'url': 'https://fedoraproject.org',
-                'start_date': TODAY - timedelta(days=7),
-                'end_date': TODAY - timedelta(days=5),
-                'seats_elected': '2',
-                'candidates_are_fasusers': False,
-                'embargoed': False,
-                'admin_grp': 'sysadmin-main',
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post(
-                '/admin/test_election2/', data=data, follow_redirects=True)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                'Election "test_election2" saved'
-                in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="seats_elected" '
-                    'name="seats_elected" required type="text" '
-                    'value="2">', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="seats_elected" '
-                    'name="seats_elected" type="text" '
-                    'value="2">', output.data)
-            # We edited the admin groups
-            self.assertIn(
-                'input class="form-control" id="admin_grp" '
-                'name="admin_grp" type="text" '
-                'value="sysadmin-main">', output.data)
+                    'input class="form-control" id="admin_grp" '
+                    'name="admin_grp" type="text" '
+                    'value="sysadmin-main">', output.data)
 
     def test_admin_edit_election_legal_voters(self):
         """ Test the admin_edit_election function when editing legal voters.
@@ -588,256 +630,275 @@ class FlaskAdmintests(ModelFlasktests):
         user = FakeUser(
             fedora_elections.APP.config['FEDORA_ELECTIONS_ADMIN_GROUP'],
             username='toshio')
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test_election/edit')
-            self.assertEqual(output.status_code, 404)
+
+        with user_set(fedora_elections.APP, user, oidc_id_token='foobar'):
+            with patch(
+                    'fedora_elections.OIDC.user_getfield',
+                    MagicMock(return_value=['elections'])):
+                output = self.app.get('/admin/test_election/edit')
+                self.assertEqual(output.status_code, 404)
 
         self.setup_db()
 
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test_election3/')
-            self.assertEqual(output.status_code, 200)
-            csrf_token = self.get_csrf(output=output)
-            # Edit LegalVoter Group
+        with user_set(fedora_elections.APP, user, oidc_id_token='foobar'):
+            with patch(
+                    'fedora_elections.OIDC.user_getfield',
+                    MagicMock(return_value=['elections'])):
+                output = self.app.get('/admin/test_election3/')
+                self.assertEqual(output.status_code, 200)
+                csrf_token = self.get_csrf(output=output)
+                # Edit LegalVoter Group
+
+                # Check election before edit
+                output = self.app.get('/admin/test_election3/')
+                self.assertEqual(output.status_code, 200)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="seats_elected" '
+                        'name="seats_elected" required type="text"', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="seats_elected" '
+                        'name="seats_elected" type="text"', output.data)
+                self.assertTrue('Candidates <span class="label'
+                    in output.data)
+                self.assertTrue(
+                    '<input class="form-control" id="admin_grp" name="admin_grp" type="text" value="">'
+                    in output.data)
+                self.assertIn(
+                    'input class="form-control" id="lgl_voters" '
+                    'name="lgl_voters" type="text" value="voters">',
+                    output.data)
 
-            # Check election before edit
-            output = self.app.get('/admin/test_election3/')
-            self.assertEqual(output.status_code, 200)
-            if self.get_wtforms_version() >= (2, 2):
+                # Add a new admin group: sysadmin-main
+                data = {
+                    'alias': 'test_election3',
+                    'shortdesc': 'test election 3 shortdesc',
+                    'description': 'test election 3 description',
+                    'voting_type': 'range',
+                    'url': 'https://fedoraproject.org',
+                    'start_date': TODAY - timedelta(days=2),
+                    'end_date': TODAY + timedelta(days=3),
+                    'seats_elected': '1',
+                    'candidates_are_fasusers': False,
+                    'embargoed': False,
+                    'lgl_voters': 'voters, sysadmin-main',
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post(
+                    '/admin/test_election3/', data=data, follow_redirects=True)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    'Election "test_election3" saved'
+                    in output.data)
+                # We edited the legal_voters
                 self.assertIn(
-                    'input class="form-control" id="seats_elected" '
-                    'name="seats_elected" required type="text"', output.data)
-            else:
+                    'input class="form-control" id="lgl_voters" '
+                    'name="lgl_voters" type="text" '
+                    'value="sysadmin-main, voters">', output.data)
+
+                # Remove an existing group: voters
+                data = {
+                    'alias': 'test_election3',
+                    'shortdesc': 'test election 3 shortdesc',
+                    'description': 'test election 3 description',
+                    'voting_type': 'range',
+                    'url': 'https://fedoraproject.org',
+                    'start_date': TODAY - timedelta(days=2),
+                    'end_date': TODAY + timedelta(days=3),
+                    'seats_elected': '1',
+                    'candidates_are_fasusers': False,
+                    'embargoed': False,
+                    'lgl_voters': 'sysadmin-main',
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post(
+                    '/admin/test_election3/', data=data, follow_redirects=True)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    'Election "test_election3" saved'
+                    in output.data)
+                # We edited the legal_voters
                 self.assertIn(
-                    'input class="form-control" id="seats_elected" '
-                    'name="seats_elected" type="text"', output.data)
-            self.assertTrue('Candidates <span class="label'
-                in output.data)
-            self.assertTrue(
-                '<input class="form-control" id="admin_grp" name="admin_grp" type="text" value="">'
-                in output.data)
-            self.assertIn(
-                'input class="form-control" id="lgl_voters" '
-                'name="lgl_voters" type="text" value="voters">',
-                output.data)
-
-            # Add a new admin group: sysadmin-main
-            data = {
-                'alias': 'test_election3',
-                'shortdesc': 'test election 3 shortdesc',
-                'description': 'test election 3 description',
-                'voting_type': 'range',
-                'url': 'https://fedoraproject.org',
-                'start_date': TODAY - timedelta(days=2),
-                'end_date': TODAY + timedelta(days=3),
-                'seats_elected': '1',
-                'candidates_are_fasusers': False,
-                'embargoed': False,
-                'lgl_voters': 'voters, sysadmin-main',
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post(
-                '/admin/test_election3/', data=data, follow_redirects=True)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                'Election "test_election3" saved'
-                in output.data)
-            # We edited the legal_voters
-            self.assertIn(
-                'input class="form-control" id="lgl_voters" '
-                'name="lgl_voters" type="text" '
-                'value="sysadmin-main, voters">', output.data)
-
-            # Remove an existing group: voters
-            data = {
-                'alias': 'test_election3',
-                'shortdesc': 'test election 3 shortdesc',
-                'description': 'test election 3 description',
-                'voting_type': 'range',
-                'url': 'https://fedoraproject.org',
-                'start_date': TODAY - timedelta(days=2),
-                'end_date': TODAY + timedelta(days=3),
-                'seats_elected': '1',
-                'candidates_are_fasusers': False,
-                'embargoed': False,
-                'lgl_voters': 'sysadmin-main',
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post(
-                '/admin/test_election3/', data=data, follow_redirects=True)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                'Election "test_election3" saved'
-                in output.data)
-            # We edited the legal_voters
-            self.assertIn(
-                'input class="form-control" id="lgl_voters" '
-                'name="lgl_voters" type="text" '
-                'value="sysadmin-main">', output.data)
+                    'input class="form-control" id="lgl_voters" '
+                    'name="lgl_voters" type="text" '
+                    'value="sysadmin-main">', output.data)
 
     def test_admin_add_candidate(self):
         """ Test the admin_add_candidate function. """
         user = FakeUser(
             fedora_elections.APP.config['FEDORA_ELECTIONS_ADMIN_GROUP'],
             username='toshio')
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test_election/candidates/new')
-            self.assertEqual(output.status_code, 404)
+        with user_set(fedora_elections.APP, user, oidc_id_token='foobar'):
+            with patch(
+                    'fedora_elections.OIDC.user_getfield',
+                    MagicMock(return_value=['elections'])):
+                output = self.app.get('/admin/test_election/candidates/new')
+                self.assertEqual(output.status_code, 404)
 
         self.setup_db()
 
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test_election/candidates/new')
-            self.assertEqual(output.status_code, 200)
-
-            self.assertTrue('Add candidate' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="name" name="name" '
-                    'required type="text"', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="name" name="name" '
-                    'type="text"', output.data)
-
-            data = {
-                'name': 'pingou',
-                'url': '',
-            }
-
-            output = self.app.post(
-                '/admin/test_election/candidates/new', data=data)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue('Add candidate' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="name" name="name" '
-                    'required type="text"', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="name" name="name" '
-                    'type="text"', output.data)
-
-            csrf_token = self.get_csrf(output=output)
-
-            data = {
-                'name': '',
-                'url': '',
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post(
-                '/admin/test_election/candidates/new', data=data)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue('Add candidate' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="name" name="name" '
-                    'required type="text"', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="name" name="name" '
-                    'type="text"', output.data)
-            self.assertTrue(
-                '<div class="form-control-feedback">This field is required.</div>'
-                in output.data)
-
-            data = {
-                'name': 'pingou',
-                'url': '',
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post(
-                '/admin/test_election/candidates/new', data=data,
-                follow_redirects=True)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                'Candidate "pingou" saved'
-                in output.data)
-            self.assertTrue('Candidates <span class="label label-pill label-default">4</span>' in output.data)
+        with user_set(fedora_elections.APP, user, oidc_id_token='foobar'):
+            with patch(
+                    'fedora_elections.OIDC.user_getfield',
+                    MagicMock(return_value=['elections'])):
+                output = self.app.get('/admin/test_election/candidates/new')
+                self.assertEqual(output.status_code, 200)
+
+                self.assertTrue('Add candidate' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="name" name="name" '
+                        'required type="text"', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="name" name="name" '
+                        'type="text"', output.data)
+
+                data = {
+                    'name': 'pingou',
+                    'url': '',
+                }
+
+                output = self.app.post(
+                    '/admin/test_election/candidates/new', data=data)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue('Add candidate' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="name" name="name" '
+                        'required type="text"', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="name" name="name" '
+                        'type="text"', output.data)
+
+                csrf_token = self.get_csrf(output=output)
+
+                data = {
+                    'name': '',
+                    'url': '',
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post(
+                    '/admin/test_election/candidates/new', data=data)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue('Add candidate' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="name" name="name" '
+                        'required type="text"', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="name" name="name" '
+                        'type="text"', output.data)
+                self.assertTrue(
+                    '<div class="form-control-feedback">This field is required.</div>'
+                    in output.data)
+
+                data = {
+                    'name': 'pingou',
+                    'url': '',
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post(
+                    '/admin/test_election/candidates/new', data=data,
+                    follow_redirects=True)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    'Candidate "pingou" saved'
+                    in output.data)
+                self.assertTrue('Candidates <span class="label label-pill label-default">4</span>' in output.data)
 
     def test_admin_add_multi_candidate(self):
         """ Test the admin_add_multi_candidate function. """
         user = FakeUser(
             fedora_elections.APP.config['FEDORA_ELECTIONS_ADMIN_GROUP'],
             username='toshio')
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test_election/candidates/new/multi')
-            self.assertEqual(output.status_code, 404)
+        with user_set(fedora_elections.APP, user, oidc_id_token='foobar'):
+            with patch(
+                    'fedora_elections.OIDC.user_getfield',
+                    MagicMock(return_value=['elections'])):
+                output = self.app.get('/admin/test_election/candidates/new/multi')
+                self.assertEqual(output.status_code, 404)
 
         self.setup_db()
 
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test_election/candidates/new/multi')
-            self.assertEqual(output.status_code, 200)
-
-            self.assertTrue('Add candidates' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="candidate" '
-                    'name="candidate" required type="text"', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="candidate" '
-                    'name="candidate" type="text"', output.data)
-
-            data = {
-                'candidate': 'pingou',
-            }
-
-            output = self.app.post(
-                '/admin/test_election/candidates/new/multi', data=data)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue('Add candidates' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="candidate" '
-                    'name="candidate" required type="text"', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="candidate" '
-                    'name="candidate" type="text"', output.data)
-
-            csrf_token = self.get_csrf(output=output)
-
-            data = {
-                'candidate': '',
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post(
-                '/admin/test_election/candidates/new/multi', data=data)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue('Add candidates' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="candidate" '
-                    'name="candidate" required type="text"', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="candidate" '
-                    'name="candidate" type="text"', output.data)
-            self.assertTrue(
-                '<div class="form-control-feedback">This field is required.</div>'
-                in output.data)
-
-            data = {
-                'candidate': 'pingou|patrick!https://fedoraproject.org|'
-                'shaiton!https://fedoraproject.org!test|sochotni',
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post(
-                '/admin/test_election/candidates/new/multi', data=data,
-                follow_redirects=True)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                'Added 3 candidates'
-                in output.data)
-            self.assertTrue('Candidates <span class="label label-pill label-default">6</span>' in output.data)
+        with user_set(fedora_elections.APP, user, oidc_id_token='foobar'):
+            with patch(
+                    'fedora_elections.OIDC.user_getfield',
+                    MagicMock(return_value=['elections'])):
+                output = self.app.get('/admin/test_election/candidates/new/multi')
+                self.assertEqual(output.status_code, 200)
+
+                self.assertTrue('Add candidates' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="candidate" '
+                        'name="candidate" required type="text"', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="candidate" '
+                        'name="candidate" type="text"', output.data)
+
+                data = {
+                    'candidate': 'pingou',
+                }
+
+                output = self.app.post(
+                    '/admin/test_election/candidates/new/multi', data=data)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue('Add candidates' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="candidate" '
+                        'name="candidate" required type="text"', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="candidate" '
+                        'name="candidate" type="text"', output.data)
+
+                csrf_token = self.get_csrf(output=output)
+
+                data = {
+                    'candidate': '',
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post(
+                    '/admin/test_election/candidates/new/multi', data=data)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue('Add candidates' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="candidate" '
+                        'name="candidate" required type="text"', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="candidate" '
+                        'name="candidate" type="text"', output.data)
+                self.assertTrue(
+                    '<div class="form-control-feedback">This field is required.</div>'
+                    in output.data)
+
+                data = {
+                    'candidate': 'pingou|patrick!https://fedoraproject.org|'
+                    'shaiton!https://fedoraproject.org!test|sochotni',
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post(
+                    '/admin/test_election/candidates/new/multi', data=data,
+                    follow_redirects=True)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    'Added 3 candidates'
+                    in output.data)
+                self.assertTrue('Candidates <span class="label label-pill label-default">6</span>' in output.data)
 
     def test_admin_edit_candidate(self):
         """ Test the admin_edit_candidate function. """
@@ -848,103 +909,103 @@ class FlaskAdmintests(ModelFlasktests):
         self.setup_db()
 
         # Election does not exist
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test/candidates/1/edit')
-            self.assertEqual(output.status_code, 404)
-
-        # Candidate does not exist
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test_election/candidates/100/edit')
-            self.assertEqual(output.status_code, 404)
-
-        # Candidate not in election
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test_election/candidates/5/edit')
-            self.assertEqual(output.status_code, 404)
-
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test_election/candidates/1/edit')
-            self.assertEqual(output.status_code, 200)
-
-            self.assertTrue('Edit candidate' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="name" name="name" '
-                    'required type="text"', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="name" name="name" '
-                    'type="text"', output.data)
-
-            data = {
-                'name': 'Toshio Kuratomi',
-                'url': 'https://fedoraproject.org/wiki/User:Toshio',
-            }
-
-            self.assertTrue('Edit candidate' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="name" name="name" '
-                    'required type="text"', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="name" name="name" '
-                    'type="text"', output.data)
-
-            csrf_token = self.get_csrf(output=output)
-
-            data = {
-                'name': '',
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post(
-                '/admin/test_election/candidates/1/edit', data=data)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue('Edit candidate' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="name" name="name" '
-                    'required type="text"', output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="name" name="name" '
-                    'type="text"', output.data)
-            self.assertTrue(
-                '<div class="form-control-feedback">This field is required.</div>'
-                in output.data)
-
-            # Check election before edit
-            output = self.app.get('/admin/test_election/')
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue('Candidates <span class="label label-pill label-default">3</span>' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="seats_elected" '
-                    'name="seats_elected" required type="text" value="1"',
-                    output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="seats_elected" '
-                    'name="seats_elected" type="text" value="1"',
-                    output.data)
-            self.assertTrue('<div class="list-group-item">Toshio' in output.data)
-
-            data = {
-                'name': 'Toshio Kuratomi',
-                'url': 'https://fedoraproject.org/wiki/User:Toshio',
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post(
-                '/admin/test_election/candidates/1/edit', data=data,
-                follow_redirects=True)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                'Candidate "Toshio Kuratomi" saved'
-                in output.data)
-            self.assertTrue('Candidates <span class="label label-pill label-default">3</span>' in output.data)
-            self.assertTrue('<div class="list-group-item">Toshio' in output.data)
+        with user_set(fedora_elections.APP, user, oidc_id_token='foobar'):
+            with patch(
+                    'fedora_elections.OIDC.user_getfield',
+                    MagicMock(return_value=['elections'])):
+                output = self.app.get('/admin/test/candidates/1/edit')
+                self.assertEqual(output.status_code, 404)
+
+                # Candidate does not exist
+                output = self.app.get('/admin/test_election/candidates/100/edit')
+                self.assertEqual(output.status_code, 404)
+
+                # Candidate not in election
+                output = self.app.get('/admin/test_election/candidates/5/edit')
+                self.assertEqual(output.status_code, 404)
+
+                output = self.app.get('/admin/test_election/candidates/1/edit')
+                self.assertEqual(output.status_code, 200)
+
+                self.assertTrue('Edit candidate' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="name" name="name" '
+                        'required type="text"', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="name" name="name" '
+                        'type="text"', output.data)
+
+                data = {
+                    'name': 'Toshio Kuratomi',
+                    'url': 'https://fedoraproject.org/wiki/User:Toshio',
+                }
+
+                self.assertTrue('Edit candidate' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="name" name="name" '
+                        'required type="text"', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="name" name="name" '
+                        'type="text"', output.data)
+
+                csrf_token = self.get_csrf(output=output)
+
+                data = {
+                    'name': '',
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post(
+                    '/admin/test_election/candidates/1/edit', data=data)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue('Edit candidate' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="name" name="name" '
+                        'required type="text"', output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="name" name="name" '
+                        'type="text"', output.data)
+                self.assertTrue(
+                    '<div class="form-control-feedback">This field is required.</div>'
+                    in output.data)
+
+                # Check election before edit
+                output = self.app.get('/admin/test_election/')
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue('Candidates <span class="label label-pill label-default">3</span>' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="seats_elected" '
+                        'name="seats_elected" required type="text" value="1"',
+                        output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="seats_elected" '
+                        'name="seats_elected" type="text" value="1"',
+                        output.data)
+                self.assertTrue('<div class="list-group-item">Toshio' in output.data)
+
+                data = {
+                    'name': 'Toshio Kuratomi',
+                    'url': 'https://fedoraproject.org/wiki/User:Toshio',
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post(
+                    '/admin/test_election/candidates/1/edit', data=data,
+                    follow_redirects=True)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    'Candidate "Toshio Kuratomi" saved'
+                    in output.data)
+                self.assertTrue('Candidates <span class="label label-pill label-default">3</span>' in output.data)
+                self.assertTrue('<div class="list-group-item">Toshio' in output.data)
 
     def test_admin_delete_candidate(self):
         """ Test the admin_delete_candidate function. """
@@ -955,85 +1016,85 @@ class FlaskAdmintests(ModelFlasktests):
         self.setup_db()
 
         # Election does not exist
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test/candidates/1/delete')
-            self.assertEqual(output.status_code, 404)
-
-        # Candidate does not exist
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test_election/candidates/100/delete')
-            self.assertEqual(output.status_code, 404)
-
-        # Candidate not in election
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test_election/candidates/5/delete')
-            self.assertEqual(output.status_code, 404)
-
-        with user_set(fedora_elections.APP, user):
-            output = self.app.get('/admin/test_election/candidates/1/delete')
-            self.assertEqual(output.status_code, 200)
-
-            self.assertTrue('<h2>Delete candidate</h2>' in output.data)
-            self.assertTrue(
-                'p>Are you sure you want to delete candidate "Toshio"?</p'
-                in output.data)
-
-            output = self.app.post('/admin/test_election/candidates/1/delete')
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue('<h2>Delete candidate</h2>' in output.data)
-            self.assertTrue(
-                'p>Are you sure you want to delete candidate "Toshio"?</p'
-                in output.data)
-
-            csrf_token = self.get_csrf(output=output)
-
-            # Try to delete while there are votes link to this candidates
-            data = {
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post(
-                '/admin/test_election/candidates/1/delete', data=data,
-                follow_redirects=True)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue('<h2>test election shortdesc</h2>' in output.data)
-            self.assertTrue(
-                'Could not delete this candidate. Is it '
-                'already part of an election?' in output.data)
-
-            # Check election before edit
-            output = self.app.get('/admin/test_election4/')
-            self.assertTrue('Candidates <span class="label label-pill label-default">2</span>' in output.data)
-            if self.get_wtforms_version() >= (2, 2):
-                self.assertIn(
-                    'input class="form-control" id="seats_elected" '
-                    'name="seats_elected" required type="text" value="1"',
-                    output.data)
-            else:
-                self.assertIn(
-                    'input class="form-control" id="seats_elected" '
-                    'name="seats_elected" type="text" value="1"',
-                    output.data)
-            self.assertTrue('<div class="list-group-item">Toshio' in output.data)
-            self.assertTrue(
-                'value="test election 4 shortdesc">' in output.data)
-
-            # Delete one candidate
-            data = {
-                'csrf_token': csrf_token,
-            }
-
-            output = self.app.post(
-                '/admin/test_election4/candidates/10/delete', data=data,
-                follow_redirects=True)
-            self.assertEqual(output.status_code, 200)
-            self.assertTrue(
-                'Candidate "Toshio" deleted'
-                in output.data)
-            self.assertTrue(
-                'value="test election 4 shortdesc">' in output.data)
-            self.assertTrue('Candidates <span class="label label-pill label-default">1</span>' in output.data)
-            self.assertFalse('<div class="list-group-item">Toshio' in output.data)
+        with user_set(fedora_elections.APP, user, oidc_id_token='foobar'):
+            with patch(
+                    'fedora_elections.OIDC.user_getfield',
+                    MagicMock(return_value=['elections'])):
+                output = self.app.get('/admin/test/candidates/1/delete')
+                self.assertEqual(output.status_code, 404)
+
+                # Candidate does not exist
+                output = self.app.get('/admin/test_election/candidates/100/delete')
+                self.assertEqual(output.status_code, 404)
+
+                # Candidate not in election
+                output = self.app.get('/admin/test_election/candidates/5/delete')
+                self.assertEqual(output.status_code, 404)
+
+                output = self.app.get('/admin/test_election/candidates/1/delete')
+                self.assertEqual(output.status_code, 200)
+
+                self.assertTrue('<h2>Delete candidate</h2>' in output.data)
+                self.assertTrue(
+                    'p>Are you sure you want to delete candidate "Toshio"?</p'
+                    in output.data)
+
+                output = self.app.post('/admin/test_election/candidates/1/delete')
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue('<h2>Delete candidate</h2>' in output.data)
+                self.assertTrue(
+                    'p>Are you sure you want to delete candidate "Toshio"?</p'
+                    in output.data)
+
+                csrf_token = self.get_csrf(output=output)
+
+                # Try to delete while there are votes link to this candidates
+                data = {
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post(
+                    '/admin/test_election/candidates/1/delete', data=data,
+                    follow_redirects=True)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue('<h2>test election shortdesc</h2>' in output.data)
+                self.assertTrue(
+                    'Could not delete this candidate. Is it '
+                    'already part of an election?' in output.data)
+
+                # Check election before edit
+                output = self.app.get('/admin/test_election4/')
+                self.assertTrue('Candidates <span class="label label-pill label-default">2</span>' in output.data)
+                if self.get_wtforms_version() >= (2, 2):
+                    self.assertIn(
+                        'input class="form-control" id="seats_elected" '
+                        'name="seats_elected" required type="text" value="1"',
+                        output.data)
+                else:
+                    self.assertIn(
+                        'input class="form-control" id="seats_elected" '
+                        'name="seats_elected" type="text" value="1"',
+                        output.data)
+                self.assertTrue('<div class="list-group-item">Toshio' in output.data)
+                self.assertTrue(
+                    'value="test election 4 shortdesc">' in output.data)
+
+                # Delete one candidate
+                data = {
+                    'csrf_token': csrf_token,
+                }
+
+                output = self.app.post(
+                    '/admin/test_election4/candidates/10/delete', data=data,
+                    follow_redirects=True)
+                self.assertEqual(output.status_code, 200)
+                self.assertTrue(
+                    'Candidate "Toshio" deleted'
+                    in output.data)
+                self.assertTrue(
+                    'value="test election 4 shortdesc">' in output.data)
+                self.assertTrue('Candidates <span class="label label-pill label-default">1</span>' in output.data)
+                self.assertFalse('<div class="list-group-item">Toshio' in output.data)
 
 
 if __name__ == '__main__':