138 lines
3.6 KiB
Go
138 lines
3.6 KiB
Go
package handlers
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/suite"
|
|
|
|
"github.com/authelia/authelia/v4/internal/authorization"
|
|
"github.com/authelia/authelia/v4/internal/configuration/schema"
|
|
"github.com/authelia/authelia/v4/internal/mocks"
|
|
)
|
|
|
|
type SecondFactorAvailableMethodsFixture struct {
|
|
suite.Suite
|
|
mock *mocks.MockAutheliaCtx
|
|
}
|
|
|
|
func (s *SecondFactorAvailableMethodsFixture) SetupTest() {
|
|
s.mock = mocks.NewMockAutheliaCtx(s.T())
|
|
s.mock.Ctx.Providers.Authorizer = authorization.NewAuthorizer(&schema.Configuration{
|
|
AccessControl: schema.AccessControlConfiguration{
|
|
DefaultPolicy: "deny",
|
|
Rules: []schema.ACLRule{},
|
|
}})
|
|
}
|
|
|
|
func (s *SecondFactorAvailableMethodsFixture) TearDownTest() {
|
|
s.mock.Close()
|
|
}
|
|
|
|
func (s *SecondFactorAvailableMethodsFixture) TestShouldServeDefaultMethods() {
|
|
expectedBody := configurationBody{
|
|
AvailableMethods: []string{"totp", "u2f"},
|
|
SecondFactorEnabled: false,
|
|
}
|
|
|
|
ConfigurationGet(s.mock.Ctx)
|
|
s.mock.Assert200OK(s.T(), expectedBody)
|
|
}
|
|
|
|
func (s *SecondFactorAvailableMethodsFixture) TestShouldServeDefaultMethodsAndMobilePush() {
|
|
s.mock.Ctx.Configuration = schema.Configuration{
|
|
DuoAPI: &schema.DuoAPIConfiguration{},
|
|
}
|
|
expectedBody := configurationBody{
|
|
AvailableMethods: []string{"totp", "u2f", "mobile_push"},
|
|
SecondFactorEnabled: false,
|
|
}
|
|
|
|
ConfigurationGet(s.mock.Ctx)
|
|
s.mock.Assert200OK(s.T(), expectedBody)
|
|
}
|
|
|
|
func (s *SecondFactorAvailableMethodsFixture) TestShouldCheckSecondFactorIsDisabledWhenNoRuleIsSetToTwoFactor() {
|
|
s.mock.Ctx.Providers.Authorizer = authorization.NewAuthorizer(
|
|
&schema.Configuration{
|
|
AccessControl: schema.AccessControlConfiguration{
|
|
DefaultPolicy: "bypass",
|
|
Rules: []schema.ACLRule{
|
|
{
|
|
Domains: []string{"example.com"},
|
|
Policy: "deny",
|
|
},
|
|
{
|
|
Domains: []string{"abc.example.com"},
|
|
Policy: "single_factor",
|
|
},
|
|
{
|
|
Domains: []string{"def.example.com"},
|
|
Policy: "bypass",
|
|
},
|
|
},
|
|
}})
|
|
ConfigurationGet(s.mock.Ctx)
|
|
s.mock.Assert200OK(s.T(), configurationBody{
|
|
AvailableMethods: []string{"totp", "u2f"},
|
|
SecondFactorEnabled: false,
|
|
})
|
|
}
|
|
|
|
func (s *SecondFactorAvailableMethodsFixture) TestShouldCheckSecondFactorIsEnabledWhenDefaultPolicySetToTwoFactor() {
|
|
s.mock.Ctx.Providers.Authorizer = authorization.NewAuthorizer(&schema.Configuration{
|
|
AccessControl: schema.AccessControlConfiguration{
|
|
DefaultPolicy: "two_factor",
|
|
Rules: []schema.ACLRule{
|
|
{
|
|
Domains: []string{"example.com"},
|
|
Policy: "deny",
|
|
},
|
|
{
|
|
Domains: []string{"abc.example.com"},
|
|
Policy: "single_factor",
|
|
},
|
|
{
|
|
Domains: []string{"def.example.com"},
|
|
Policy: "bypass",
|
|
},
|
|
},
|
|
}})
|
|
ConfigurationGet(s.mock.Ctx)
|
|
s.mock.Assert200OK(s.T(), configurationBody{
|
|
AvailableMethods: []string{"totp", "u2f"},
|
|
SecondFactorEnabled: true,
|
|
})
|
|
}
|
|
|
|
func (s *SecondFactorAvailableMethodsFixture) TestShouldCheckSecondFactorIsEnabledWhenSomePolicySetToTwoFactor() {
|
|
s.mock.Ctx.Providers.Authorizer = authorization.NewAuthorizer(
|
|
&schema.Configuration{
|
|
AccessControl: schema.AccessControlConfiguration{
|
|
DefaultPolicy: "bypass",
|
|
Rules: []schema.ACLRule{
|
|
{
|
|
Domains: []string{"example.com"},
|
|
Policy: "deny",
|
|
},
|
|
{
|
|
Domains: []string{"abc.example.com"},
|
|
Policy: "two_factor",
|
|
},
|
|
{
|
|
Domains: []string{"def.example.com"},
|
|
Policy: "bypass",
|
|
},
|
|
},
|
|
}})
|
|
ConfigurationGet(s.mock.Ctx)
|
|
s.mock.Assert200OK(s.T(), configurationBody{
|
|
AvailableMethods: []string{"totp", "u2f"},
|
|
SecondFactorEnabled: true,
|
|
})
|
|
}
|
|
|
|
func TestRunSuite(t *testing.T) {
|
|
s := new(SecondFactorAvailableMethodsFixture)
|
|
suite.Run(t, s)
|
|
}
|