Change basicauth.test.local into single_factor.test.local
parent
969561f4ad
commit
22d56b1faa
|
@ -17,7 +17,7 @@ addons:
|
||||||
hosts:
|
hosts:
|
||||||
- admin.test.local
|
- admin.test.local
|
||||||
- auth.test.local
|
- auth.test.local
|
||||||
- basicauth.test.local
|
- single_factor.test.local
|
||||||
- dev.test.local
|
- dev.test.local
|
||||||
- home.test.local
|
- home.test.local
|
||||||
- mx1.mail.test.local
|
- mx1.mail.test.local
|
||||||
|
|
|
@ -101,6 +101,7 @@ Add the following lines to your **/etc/hosts** to alias multiple subdomains so t
|
||||||
127.0.0.1 admin.test.local
|
127.0.0.1 admin.test.local
|
||||||
127.0.0.1 mx1.mail.test.local
|
127.0.0.1 mx1.mail.test.local
|
||||||
127.0.0.1 mx2.mail.test.local
|
127.0.0.1 mx2.mail.test.local
|
||||||
|
127.0.0.1 single_factor.test.local
|
||||||
127.0.0.1 auth.test.local
|
127.0.0.1 auth.test.local
|
||||||
|
|
||||||
### Run it!
|
### Run it!
|
||||||
|
|
|
@ -74,7 +74,7 @@ ldap:
|
||||||
authentication_methods:
|
authentication_methods:
|
||||||
default_method: two_factor
|
default_method: two_factor
|
||||||
per_subdomain_methods:
|
per_subdomain_methods:
|
||||||
basicauth.test.local: single_factor
|
single_factor.test.local: single_factor
|
||||||
|
|
||||||
# Access Control
|
# Access Control
|
||||||
#
|
#
|
||||||
|
@ -233,4 +233,4 @@ notifier:
|
||||||
secure: false
|
secure: false
|
||||||
host: 'smtp'
|
host: 'smtp'
|
||||||
port: 1025
|
port: 1025
|
||||||
sender: admin@example.com
|
sender: admin@example.com
|
||||||
|
|
|
@ -52,7 +52,7 @@
|
||||||
mx2.main.test.local <a href="https://mx2.mail.test.local:8080/secret.html"> / secret.html</a>
|
mx2.main.test.local <a href="https://mx2.mail.test.local:8080/secret.html"> / secret.html</a>
|
||||||
</li>
|
</li>
|
||||||
<li>
|
<li>
|
||||||
basicauth.test.local <a href="https://basicauth.test.local:8080/secret.html"> / secret.html</a>
|
single_factor.test.local <a href="https://single_factor.test.local:8080/secret.html"> / secret.html</a>
|
||||||
</li>
|
</li>
|
||||||
</ul>
|
</ul>
|
||||||
|
|
||||||
|
|
|
@ -244,9 +244,9 @@ http {
|
||||||
|
|
||||||
server {
|
server {
|
||||||
listen 443 ssl;
|
listen 443 ssl;
|
||||||
root /usr/share/nginx/html/basicauth.test.local;
|
root /usr/share/nginx/html/single_factor.test.local;
|
||||||
|
|
||||||
server_name basicauth.test.local;
|
server_name single_factor.test.local;
|
||||||
|
|
||||||
ssl on;
|
ssl on;
|
||||||
ssl_certificate /etc/ssl/server.crt;
|
ssl_certificate /etc/ssl/server.crt;
|
||||||
|
|
|
@ -17,7 +17,7 @@ Feature: User has access restricted access to domains
|
||||||
| https://dev.test.local:8080/users/bob/secret.html |
|
| https://dev.test.local:8080/users/bob/secret.html |
|
||||||
| https://admin.test.local:8080/secret.html |
|
| https://admin.test.local:8080/secret.html |
|
||||||
| https://mx1.mail.test.local:8080/secret.html |
|
| https://mx1.mail.test.local:8080/secret.html |
|
||||||
| https://basicauth.test.local:8080/secret.html |
|
| https://single_factor.test.local:8080/secret.html |
|
||||||
And I have no access to:
|
And I have no access to:
|
||||||
| url |
|
| url |
|
||||||
| https://mx2.mail.test.local:8080/secret.html |
|
| https://mx2.mail.test.local:8080/secret.html |
|
||||||
|
@ -42,7 +42,7 @@ Feature: User has access restricted access to domains
|
||||||
| https://admin.test.local:8080/secret.html |
|
| https://admin.test.local:8080/secret.html |
|
||||||
| https://dev.test.local:8080/users/john/secret.html |
|
| https://dev.test.local:8080/users/john/secret.html |
|
||||||
| https://dev.test.local:8080/users/harry/secret.html |
|
| https://dev.test.local:8080/users/harry/secret.html |
|
||||||
| https://basicauth.test.local:8080/secret.html |
|
| https://single_factor.test.local:8080/secret.html |
|
||||||
|
|
||||||
@need-registered-user-harry
|
@need-registered-user-harry
|
||||||
Scenario: User harry has restricted access
|
Scenario: User harry has restricted access
|
||||||
|
@ -64,4 +64,4 @@ Feature: User has access restricted access to domains
|
||||||
| https://dev.test.local:8080/users/john/secret.html |
|
| https://dev.test.local:8080/users/john/secret.html |
|
||||||
| https://mx1.mail.test.local:8080/secret.html |
|
| https://mx1.mail.test.local:8080/secret.html |
|
||||||
| https://mx2.mail.test.local:8080/secret.html |
|
| https://mx2.mail.test.local:8080/secret.html |
|
||||||
| https://basicauth.test.local:8080/secret.html |
|
| https://single_factor.test.local:8080/secret.html |
|
||||||
|
|
|
@ -2,10 +2,10 @@ Feature: User is redirected when factors are already validated
|
||||||
|
|
||||||
@need-registered-user-john
|
@need-registered-user-john
|
||||||
Scenario: User has validated first factor and tries to access service protected by second factor. He is then redirect to second factor step.
|
Scenario: User has validated first factor and tries to access service protected by second factor. He is then redirect to second factor step.
|
||||||
When I visit "https://basicauth.test.local:8080/secret.html"
|
When I visit "https://single_factor.test.local:8080/secret.html"
|
||||||
And I'm redirected to "https://auth.test.local:8080/?redirect=https%3A%2F%2Fbasicauth.test.local%3A8080%2Fsecret.html"
|
And I'm redirected to "https://auth.test.local:8080/?redirect=https%3A%2F%2Fsingle_factor.test.local%3A8080%2Fsecret.html"
|
||||||
And I login with user "john" and password "password"
|
And I login with user "john" and password "password"
|
||||||
And I'm redirected to "https://basicauth.test.local:8080/secret.html"
|
And I'm redirected to "https://single_factor.test.local:8080/secret.html"
|
||||||
And I visit "https://public.test.local:8080/secret.html"
|
And I visit "https://public.test.local:8080/secret.html"
|
||||||
Then I'm redirected to "https://auth.test.local:8080/secondfactor?redirect=https%3A%2F%2Fpublic.test.local%3A8080%2Fsecret.html"
|
Then I'm redirected to "https://auth.test.local:8080/secondfactor?redirect=https%3A%2F%2Fpublic.test.local%3A8080%2Fsecret.html"
|
||||||
|
|
||||||
|
@ -31,4 +31,4 @@ Feature: User is redirected when factors are already validated
|
||||||
And I click on "TOTP"
|
And I click on "TOTP"
|
||||||
And I'm redirected to "https://public.test.local:8080/secret.html"
|
And I'm redirected to "https://public.test.local:8080/secret.html"
|
||||||
And I visit "https://auth.test.local:8080?redirect=https://public.test.local:8080/secret.html"
|
And I visit "https://auth.test.local:8080?redirect=https://public.test.local:8080/secret.html"
|
||||||
Then I'm redirected to "https://public.test.local:8080/secret.html"
|
Then I'm redirected to "https://public.test.local:8080/secret.html"
|
||||||
|
|
|
@ -2,9 +2,9 @@ Feature: User can access certain subdomains with single factor
|
||||||
|
|
||||||
@need-registered-user-john
|
@need-registered-user-john
|
||||||
Scenario: User is redirected to service after first factor if allowed
|
Scenario: User is redirected to service after first factor if allowed
|
||||||
When I visit "https://auth.test.local:8080/?redirect=https%3A%2F%2Fbasicauth.test.local%3A8080%2Fsecret.html"
|
When I visit "https://auth.test.local:8080/?redirect=https%3A%2F%2Fsingle_factor.test.local%3A8080%2Fsecret.html"
|
||||||
And I login with user "john" and password "password"
|
And I login with user "john" and password "password"
|
||||||
Then I'm redirected to "https://basicauth.test.local:8080/secret.html"
|
Then I'm redirected to "https://single_factor.test.local:8080/secret.html"
|
||||||
|
|
||||||
@need-registered-user-john
|
@need-registered-user-john
|
||||||
Scenario: Redirection after first factor fails if single_factor not allowed. It redirects user to first factor.
|
Scenario: Redirection after first factor fails if single_factor not allowed. It redirects user to first factor.
|
||||||
|
|
Loading…
Reference in New Issue