techies/authelia
1
0
Fork 0
mirror of https://github.com/0rangebananaspy/authelia.git synced 2024-09-14 22:47:21 +07:00
Code Issues Projects Releases Wiki Activity

Improve UX of the second factor page

Browse Source 
Start the U2F signing request when entering in the second factor page so that
the user only has to touch the token without any other clicks.
This commit is contained in:
Clement Michaud 2017-10-22 01:23:26 +02:00
parent 1e05c41a0c
commit 3052c883a0
27 changed files with 179 additions and 172 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

79
client/src/css/01-main.css
View File

@ -1,61 +1,66 @@
body { body {
background-image: url("/img/background.svg"); background-image: url("/img/background.svg");
} }
.authelia-brand { .authelia-brand {
font-weight: bold; font-weight: bold;
font-style: italic; font-style: italic;
color: #648caf color: #648caf
} }
.poweredby-block { .poweredby-block {
margin: 0px 30px; margin: 0px 30px;
margin-top: 10px; margin-top: 10px;
padding-top: 15px; padding-top: 15px;
border-top: 1px solid rgba(0, 0, 0, 0.15); border-top: 1px solid rgba(0, 0, 0, 0.15);
} }
.poweredby { .poweredby {
font-size: 0.7em; font-size: 0.7em;
color: #6b6b6b; color: #6b6b6b;
} }
/* notifications */ /* notifications */
.notification { .notification {
padding: 10px; padding: 10px;
border-radius: 6px; margin: 10px 0px;
display: none; border-radius: 6px;
display: none;
} }
.notification img { .notification img {
width: 24px; width: 24px;
margin-right: 10px; margin-right: 10px;
} }
.notification i, .notification i,
.notification span { .notification span {
display:table-cell; display:table-cell;
vertical-align:middle; vertical-align:middle;
} }
.info { .info {
border: 1px solid #9cb1ff; border: 1px solid #9cb1ff;
background-color: rgb(192, 220, 255); background-color: rgb(192, 220, 255);
} }
.success { .success {
border: 1px solid #65ec7c; border: 1px solid #65ec7c;
background-color: rgb(163, 255, 157); background-color: rgb(163, 255, 157);
} }
.error { .error {
border: 1px solid #ffa3a3; border: 1px solid #ffa3a3;
background-color: rgb(255, 175, 175); background-color: rgb(255, 175, 175);
} }
.warning { .warning {
border: 1px solid #ffd743; border: 1px solid #ffd743;
background-color: rgb(255, 230, 143); background-color: rgb(255, 230, 143);
}
.bottom-right-links {
text-align: right;
margin-top: 10px;
font-size: 0.8em;
}
.header {
background-color: #778dab;
color: white;
margin: 0px;
}
.body {
padding: 10px;
}
h1 {
font-size: 30px;
} }

26
client/src/css/02-login.css
View File

@ -1,6 +1,5 @@
.form-signin .form-signin
{ {
padding: 15px;
margin: 0 auto; margin: 0 auto;
} }
@ -44,8 +43,7 @@
{ {
border: 1px solid #DDD; border: 1px solid #DDD;
margin-top: 20px; margin-top: 20px;
padding: 20px; padding-bottom: 20px;
padding-bottom: 15px;
background-color: #f7f7f7; background-color: #f7f7f7;
-moz-box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.3); -moz-box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.3);
-webkit-box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.3); -webkit-box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.3);
@ -53,18 +51,20 @@
} }
.account-wall h1 .account-wall h1
{ {
color: #555; margin-bottom: 20px;
margin-bottom: 30px; font-weight: 800;
font-weight: 400; display: block;
text-align: center;
}
.account-wall h3
{
display: block; display: block;
text-align: center; text-align: center;
} }
.account-wall p .account-wall p
{ {
text-align: center; text-align: center;
margin: 10px 10px; margin: 10px;
margin-top: 20px;
font-size: 1.3em;
} }
.account-wall .form-inputs .account-wall .form-inputs
{ {
@ -98,4 +98,12 @@
.btn-primary.u2f .btn-primary.u2f
{ {
background-color: rgb(83, 149, 204); background-color: rgb(83, 149, 204);
}
.u2f-token {
text-align: center;
}
.u2f-token img {
width: 70px;
} }

8
client/src/css/03-totp-register.css
View File

@ -6,20 +6,16 @@
border: 1px solid #c7c7c7; border: 1px solid #c7c7c7;
word-wrap: break-word; word-wrap: break-word;
} }
.totp-register #qrcode img { .totp-register #qrcode img {
margin: 20px auto; margin: 10px auto;
} }
.totp-register .need-google-authenticator { .totp-register .need-google-authenticator {
text-align: center; text-align: center;
margin: 20px; margin-top: 20px;
} }
.totp-register .store-badges { .totp-register .store-badges {
margin-top: 5px; margin-top: 5px;
} }
.totp-register .store-badge { .totp-register .store-badge {
width: 110px; width: 110px;
height: 30px; height: 30px;

2
client/src/lib/secondfactor/constants.ts
View File

@ -1,5 +1,3 @@
export const TOTP_FORM_SELECTOR = ".form-signin.totp"; export const TOTP_FORM_SELECTOR = ".form-signin.totp";
export const TOTP_TOKEN_SELECTOR = ".form-signin #token"; export const TOTP_TOKEN_SELECTOR = ".form-signin #token";
export const U2F_FORM_SELECTOR = ".form-signin.u2f";

9
client/src/lib/secondfactor/index.ts
View File

@ -49,14 +49,9 @@ export default function (window: Window, $: JQueryStatic, u2fApi: typeof U2fApi)
return false; return false;
} }
function onU2FFormSubmitted(): boolean {
U2FValidator.validate($, notifierU2f, U2fApi)
.then(onU2fAuthenticationSuccess, onU2fAuthenticationFailure);
return false;
}
$(window.document).ready(function () { $(window.document).ready(function () {
$(ClientConstants.TOTP_FORM_SELECTOR).on("submit", onTOTPFormSubmitted); $(ClientConstants.TOTP_FORM_SELECTOR).on("submit", onTOTPFormSubmitted);
$(ClientConstants.U2F_FORM_SELECTOR).on("submit", onU2FFormSubmitted); U2FValidator.validate($, notifierU2f, U2fApi)
.then(onU2fAuthenticationSuccess, onU2fAuthenticationFailure);
}); });
} }

6
server/src/lib/routes/secondfactor/totp/identity/RegistrationHandler.ts
View File

@ -41,7 +41,7 @@ export default class RegistrationHandler implements IdentityValidable {
const email = authSession.email; const email = authSession.email;
if (!(userid && email)) { if (!(userid && email)) {
return BluebirdPromise.reject(new Error("User ID or email is missing")); return BluebirdPromise.reject(new Error("User ID or email is missing."));
} }
const identity = { const identity = {
@ -79,7 +79,7 @@ export default class RegistrationHandler implements IdentityValidable {
return BluebirdPromise.reject(new Error("Bad challenge.")); return BluebirdPromise.reject(new Error("Bad challenge."));
} }
const secret = that.totp.generate(); const secret = that.totp.generate();
that.logger.debug(req, "Save the TOTP secret in DB"); that.logger.debug(req, "Save the TOTP secret in DB.");
return that.userDataStore.saveTOTPSecret(userid, secret) return that.userDataStore.saveTOTPSecret(userid, secret)
.then(function () { .then(function () {
AuthenticationSession.reset(req); AuthenticationSession.reset(req);
@ -95,6 +95,6 @@ export default class RegistrationHandler implements IdentityValidable {
} }
mailSubject(): string { mailSubject(): string {
return "Register your TOTP secret key"; return "Set up Authelia's one-time password";
} }
} }

2
server/src/lib/routes/secondfactor/u2f/identity/RegistrationHandler.ts
View File

@ -11,7 +11,7 @@ import AuthenticationSession = require("../../../../AuthenticationSession");
import { IRequestLogger } from "../../../../logging/IRequestLogger"; import { IRequestLogger } from "../../../../logging/IRequestLogger";
const CHALLENGE = "u2f-register"; const CHALLENGE = "u2f-register";
const MAIL_SUBJECT = "Register your U2F device"; const MAIL_SUBJECT = "Register your security key with Authelia";
const POST_VALIDATION_TEMPLATE_NAME = "u2f-register"; const POST_VALIDATION_TEMPLATE_NAME = "u2f-register";

8
server/src/views/already-logged-in.pug
View File

@ -1,10 +1,10 @@
extends layout/layout.pug extends layout/layout.pug
block form-header block form-header
<h1>Sign in</h1> h1 Sign in
<img class="header-img" src="/img/success.png" alt="">
block content block content
<p>You are already logged in as <b>#{ username }</b>.<br/><br/> img(class="header-img" src="/img/success.png" alt="success")
p You are already logged in as <b>#{ username }</b>.<br/><br/>
| If you are not redirected in few seconds, click <a href="#{ redirection_url }">here</a>.<br/><br/> | If you are not redirected in few seconds, click <a href="#{ redirection_url }">here</a>.<br/><br/>
| Otherwise, click <a href="#{ logout_endpoint }">here</a> to log off.<p> | Otherwise, click <a href="#{ logout_endpoint }">here</a> to log off.

6
server/src/views/errors/401.pug
View File

@ -4,8 +4,8 @@ block variables
- page_classname = "error-401"; - page_classname = "error-401";
block form-header block form-header
<h1>Error 401</h1> h1 Error 401
<img class="header-img" src="/img/warning.png" alt="">
block content block content
<p>Please <a href="/">log in</a> to access this resource.</p> img(class="header-img" src="/img/warning.png" alt="warning")
p Please <a href="/">log in</a> to access this resource.

6
server/src/views/errors/403.pug
View File

@ -4,8 +4,8 @@ block variables
- page_classname = "error-403"; - page_classname = "error-403";
block form-header block form-header
<h1>Error 403</h1> h1 Error 403
<img class="header-img" src="/img/warning.png" alt="">
block content block content
<p>You are not authorized to access this resource.</p> img(class="header-img" src="/img/warning.png" alt="warning")
p You are not authorized to access this resource.

4
server/src/views/errors/404.pug
View File

@ -5,7 +5,7 @@ block variables
block form-header block form-header
<h1>Error 404</h1> <h1>Error 404</h1>
<img class="header-img" src="/img/warning.png" alt="">
block content block content
<p>Page not found.</p> img(class="header-img" src="/img/warning.png" alt="warning")
p Page not found.

27
server/src/views/firstfactor.pug
View File

@ -1,17 +1,20 @@
extends layout/layout.pug extends layout/layout.pug
block variables
- page_classname = "firstfactor";
block form-header block form-header
<h1>Sign in</h1> h1 Sign in
<img class="header-img" src="/img/user.png" alt="">
block content block content
<div class="notification"></div> img(class="header-img" src="/img/user.png" alt="user profile")
<form class="form-signin"> p Enter your credentials to sign in
<div class="form-inputs"> div(class="notification")
<input type="text" class="form-control" id="username" placeholder="Username" required autofocus> form(class="form-signin")
<input type="password" class="form-control" id="password" placeholder="Password" required> div(class="form-inputs")
</div> input(type="text" class="form-control" id="username" placeholder="Username" required autofocus)
<button class="btn btn-lg btn-primary btn-block" type="submit">Sign in</button> input(type="password" class="form-control" id="password" placeholder="Password" required)
a(href=reset_password_request_endpoint, class="pull-right link forgot-password") Forgot password? button(class="btn btn-lg btn-primary btn-block" type="submit") Sign in
<span class="clearfix"></span> div(class="bottom-right-links pull-right")
</form> a(href=reset_password_request_endpoint, class="link forgot-password") Forgot password?
span(class="clearfix")

29
server/src/views/layout/layout.pug
View File

@ -9,24 +9,19 @@ html
link(rel="icon", href="/img/icon.png" type="image/png" sizes="32x32")/ link(rel="icon", href="/img/icon.png" type="image/png" sizes="32x32")/
link(rel="stylesheet", type="text/css", href="/css/authelia.css")/ link(rel="stylesheet", type="text/css", href="/css/authelia.css")/
if redirection_url if redirection_url
<meta http-equiv="refresh" content="4;url=#{redirection_url}"> meta(http-equiv="refresh" content="4;url=" + redirection_url)
body body
<div class="container"> div(class="container")
<div class="row"> div(class="row")
<div class="col-xs-12 col-sm-8 col-sm-offset-2 col-md-6 col-md-offset-3 col-lg-6 col-lg-offset-3"> div(class="col-xs-12 col-sm-8 col-sm-offset-2 col-md-6 col-md-offset-3 col-lg-6 col-lg-offset-3")
<div class="account-wall #{page_classname}"> div(class="account-wall " + page_classname)
block form-header div(class="row header")
<div class="row"> block form-header
<div class="form col-xs-10 col-xs-offset-1 col-sm-8 col-sm-offset-2 col-md-8 col-md-offset-2"> div(class="row body")
div(class="form col-xs-10 col-xs-offset-1 col-sm-8 col-sm-offset-2 col-md-10 col-md-offset-1 col-lg-8 col-lg-offset-2")
block content block content
</div> div(class="row footer poweredby-block")
</div> div(class="poweredby col-xs-6 col-xs-offset-4 col-sm-6 col-sm-offset-4 col-md-6 col-md-offset-4")
<div class="row poweredby-block"> | Powered by <a class="authelia-brand" href="https://github.com/clems4ever/authelia">Authelia</a>
<div class="poweredby col-xs-6 col-xs-offset-4 col-sm-6 col-sm-offset-4 col-md-6 col-md-offset-4">Powered by <a class="authelia-brand" href="https://github.com/clems4ever/authelia">Authelia</a></div>
</div>
</div>
</div>
</div>
</div>
block entrypoint block entrypoint
script(src="/js/authelia.js") script(src="/js/authelia.js")

10
server/src/views/need-identity-validation.pug
View File

@ -1,8 +1,12 @@
extends layout/layout.pug extends layout/layout.pug
block variables
- page_classname = "identity-validation";
block form-header block form-header
<h1>Registration</h1> h1 Registration
<img class="header-img" src="/img/mail.png" alt="">
block content block content
<p>A confirmation email has been sent to your mailbox. Please open it and click on the link within 15 minutes to confirm the registration.</p> img(class="header-img" src="/img/mail.png" alt="mail")
p A confirmation email has been sent to your mailbox.
| Please open it and click on the link within 15 minutes to confirm the registration.

22
server/src/views/password-reset-form.pug
View File

@ -4,17 +4,15 @@ block variables
- page_classname = "password-reset-form"; - page_classname = "password-reset-form";
block form-header block form-header
<h1>Reset password</h1> h1 Reset password
<img class="header-img" src="/img/password.png" alt="">
<p>Set your new password and confirm it.</p>
block content block content
<div class="notification"></div> img(class="header-img" src="/img/password.png" alt="password")
<form class="form-signin"> p Set your new password and confirm it.
<div class="form-inputs"> div(class="notification")
<input class="form-control" type="password" name="password1" id="password1" placeholder="New password" required="required" /> form(class="form-signin")
<input class="form-control" type="password" name="password2" id="password2" placeholder="Password confirmation" required="required" /> div(class="form-inputs")
</div> input(class="form-control" type="password" name="password1" id="password1" placeholder="New password" required="required")
<button id="reset-password-button" class="btn btn-lg btn-primary btn-block" type="submit">Reset Password</button> input(class="form-control" type="password" name="password2" id="password2" placeholder="Password confirmation" required="required")
<span class="clearfix"></span> button(id="reset-password-button" class="btn btn-lg btn-primary btn-block" type="submit") Reset Password
</form> span(class="clearfix")

21
server/src/views/password-reset-request.pug
View File

@ -4,16 +4,15 @@ block variables
- page_classname = "password-reset-request"; - page_classname = "password-reset-request";
block form-header block form-header
<h1>Reset password</h1> h1 Reset password
<img class="header-img" src="/img/password.png" alt="">
<p>After giving your username, you will receive an email to change your password.</p>
block content block content
<div class="notification"></div> div
<form class="form-signin"> img(class="header-img" src="/img/password.png" alt="password")
<div class="form-inputs"> p After giving your username, you will receive an email to change your password.
<input type="text" class="form-control" name="username" id="username" placeholder="Your username" required="required" /> div(class="notification")
</div> form(class="form-signin")
<button id="reset-password-button" class="btn btn-lg btn-primary btn-block" type="submit">Reset Password</button> div(class="form-inputs")
<span class="clearfix"></span> input(type="text" class="form-control" name="username" id="username" placeholder="Your username" required="required")
</form> button(id="reset-password-button" class="btn btn-lg btn-primary btn-block" type="submit") Reset Password
span(class="clearfix")

44
server/src/views/secondfactor.pug
View File

@ -1,24 +1,30 @@
extends layout/layout.pug extends layout/layout.pug
block variables
- page_classname = "secondfactor";
block form-header block form-header
<h1>Sign in</h1> h1 Sign in
<img class="header-img" src="../img/padlock.png" alt="">
block content block content
p Hi <b>#{username}</b>, please complete second factor or <a href="/logout">logout</a>. div
<div class="notification notification-totp"></div> h3 Hi <b>#{username}</b>
<form class="form-signin totp"> div(class="row")
<div class="form-inputs"> div(class="u2f-token")
<input type="text" autocomplete="off" class="form-control" id="token" placeholder="Token" required autofocus> img(src="/img/pendrive.png", alt="security key")
</div> p
<button class="btn btn-lg btn-primary btn-block totp-button" type="submit">TOTP</button> | touch your U2F device<br/>
a(href=totp_identity_start_endpoint, class="pull-right link register-totp") Need to register? b Or<br/>
<span class="clearfix"></span> | get a one-time password
</form> div(class="notification notification-totp")
<hr> form(class="form-signin totp")
<div class="notification notification-u2f"></div> div(class="form-inputs")
<form class="form-signin u2f"> input(type="text" autocomplete="off" class="form-control" id="token" placeholder="Token" required autofocus)
<button class="btn btn-lg btn-primary btn-block u2f-button" type="submit">U2F</button> button(class="btn btn-lg btn-primary btn-block totp-button" type="submit") Sign in
a(href=u2f_identity_start_endpoint, class="pull-right link register-u2f") Need to register? div(class="pull-right bottom-right-links")
<span class="clearfix"></span> div Need to register?
</form> div
a(href=u2f_identity_start_endpoint, class="link register-u2f") U2F
| |
a(href=totp_identity_start_endpoint, class="link register-totp") Google Authenticator
span(class="clearfix")

8
server/src/views/totp-register.pug
View File

@ -4,12 +4,12 @@ block variables
- page_classname = "totp-register"; - page_classname = "totp-register";
block form-header block form-header
<h1>One-time passwords</h1> h1 One-time passwords
<p>Open Google Authenticator and add this entry</p>
block content block content
p Open Google Authenticator and add this entry
p(id="secret") #{ base32_secret } p(id="secret") #{ base32_secret }
p Or scan this barcode p or scan this barcode
div(id="qrcode") #{ otpauth_url } div(id="qrcode") #{ otpauth_url }
p p
a(href=login_endpoint, id="login-button") Login a(href=login_endpoint, id="login-button") Login
@ -22,4 +22,4 @@ block content
img(alt='Get it on Apple Store' src='/img/stores/applestore-badge.svg' class="store-badge") img(alt='Get it on Apple Store' src='/img/stores/applestore-badge.svg' class="store-badge")
block entrypoint block entrypoint
<script src="/js/qrcode.min.js"></script> script(src="/js/qrcode.min.js")

6
server/src/views/u2f-register.pug
View File

@ -4,8 +4,8 @@ block variables
- page_classname = "u2f-register"; - page_classname = "u2f-register";
block form-header block form-header
<h1>U2F Registration</h1> h1 Register your security key
<p>Touch the token to register your U2F device.</p>
block content block content
<img src="/img/pendrive.png" alt="pendrive" /> p Touch the token to register your security key.
img(src="/img/pendrive.png" alt="pendrive")

6
test/features/access-control.feature
View File

@ -5,7 +5,7 @@ Feature: User has access restricted access to domains
When I visit "https://auth.test.local:8080?redirect=https%3A%2F%2Fhome.test.local%3A8080%2F" When I visit "https://auth.test.local:8080?redirect=https%3A%2F%2Fhome.test.local%3A8080%2F"
And I login with user "john" and password "password" And I login with user "john" and password "password"
And I use "REGISTERED" as TOTP token handle And I use "REGISTERED" as TOTP token handle
And I click on "TOTP" And I click on "Sign in"
And I'm redirected to "https://home.test.local:8080/" And I'm redirected to "https://home.test.local:8080/"
Then I have access to: Then I have access to:
| url | | url |
@ -27,7 +27,7 @@ Feature: User has access restricted access to domains
When I visit "https://auth.test.local:8080?redirect=https%3A%2F%2Fhome.test.local%3A8080%2F" When I visit "https://auth.test.local:8080?redirect=https%3A%2F%2Fhome.test.local%3A8080%2F"
And I login with user "bob" and password "password" And I login with user "bob" and password "password"
And I use "REGISTERED" as TOTP token handle And I use "REGISTERED" as TOTP token handle
And I click on "TOTP" And I click on "Sign in"
And I'm redirected to "https://home.test.local:8080/" And I'm redirected to "https://home.test.local:8080/"
Then I have access to: Then I have access to:
| url | | url |
@ -49,7 +49,7 @@ Feature: User has access restricted access to domains
When I visit "https://auth.test.local:8080?redirect=https%3A%2F%2Fhome.test.local%3A8080%2F" When I visit "https://auth.test.local:8080?redirect=https%3A%2F%2Fhome.test.local%3A8080%2F"
And I login with user "harry" and password "password" And I login with user "harry" and password "password"
And I use "REGISTERED" as TOTP token handle And I use "REGISTERED" as TOTP token handle
And I click on "TOTP" And I click on "Sign in"
And I'm redirected to "https://home.test.local:8080/" And I'm redirected to "https://home.test.local:8080/"
Then I have access to: Then I have access to:
| url | | url |

4
test/features/auth-portal-redirection.feature
View File

@ -15,7 +15,7 @@ Feature: User is redirected when factors are already validated
And I'm redirected to "https://auth.test.local:8080/?redirect=https%3A%2F%2Fpublic.test.local%3A8080%2Fsecret.html" And I'm redirected to "https://auth.test.local:8080/?redirect=https%3A%2F%2Fpublic.test.local%3A8080%2Fsecret.html"
And I login with user "john" and password "password" And I login with user "john" and password "password"
And I use "REGISTERED" as TOTP token handle And I use "REGISTERED" as TOTP token handle
And I click on "TOTP" And I click on "Sign in"
And I'm redirected to "https://public.test.local:8080/secret.html" And I'm redirected to "https://public.test.local:8080/secret.html"
And I visit "https://auth.test.local:8080" And I visit "https://auth.test.local:8080"
Then I'm redirected to "https://auth.test.local:8080/loggedin" Then I'm redirected to "https://auth.test.local:8080/loggedin"
@ -28,7 +28,7 @@ Feature: User is redirected when factors are already validated
And I'm redirected to "https://auth.test.local:8080/?redirect=https%3A%2F%2Fpublic.test.local%3A8080%2Fsecret.html" And I'm redirected to "https://auth.test.local:8080/?redirect=https%3A%2F%2Fpublic.test.local%3A8080%2Fsecret.html"
And I login with user "john" and password "password" And I login with user "john" and password "password"
And I use "REGISTERED" as TOTP token handle And I use "REGISTERED" as TOTP token handle
And I click on "TOTP" And I click on "Sign in"
And I'm redirected to "https://public.test.local:8080/secret.html" And I'm redirected to "https://public.test.local:8080/secret.html"
And I visit "https://auth.test.local:8080?redirect=https://public.test.local:8080/secret.html" And I visit "https://auth.test.local:8080?redirect=https://public.test.local:8080/secret.html"
Then I'm redirected to "https://public.test.local:8080/secret.html" Then I'm redirected to "https://public.test.local:8080/secret.html"

4
test/features/authentication.feature
View File

@ -22,7 +22,7 @@ Feature: Authentication scenarii
And I'm redirected to "https://auth.test.local:8080/?redirect=https%3A%2F%2Fadmin.test.local%3A8080%2Fsecret.html" And I'm redirected to "https://auth.test.local:8080/?redirect=https%3A%2F%2Fadmin.test.local%3A8080%2Fsecret.html"
And I login with user "john" and password "password" And I login with user "john" and password "password"
And I use "Sec0" as TOTP token handle And I use "Sec0" as TOTP token handle
And I click on "TOTP" And I click on "Sign in"
Then I'm redirected to "https://admin.test.local:8080/secret.html" Then I'm redirected to "https://admin.test.local:8080/secret.html"
Scenario: User fails TOTP second factor Scenario: User fails TOTP second factor
@ -30,7 +30,7 @@ Feature: Authentication scenarii
And I'm redirected to "https://auth.test.local:8080/?redirect=https%3A%2F%2Fadmin.test.local%3A8080%2Fsecret.html" And I'm redirected to "https://auth.test.local:8080/?redirect=https%3A%2F%2Fadmin.test.local%3A8080%2Fsecret.html"
And I login with user "john" and password "password" And I login with user "john" and password "password"
And I use "BADTOKEN" as TOTP token And I use "BADTOKEN" as TOTP token
And I click on "TOTP" And I click on "Sign in"
Then I get a notification of type "error" with message "Authentication failed. Have you already registered your secret?" Then I get a notification of type "error" with message "Authentication failed. Have you already registered your secret?"
Scenario: Logout redirects user to redirect URL given in parameter Scenario: Logout redirects user to redirect URL given in parameter

6
test/features/redirection.feature
View File

@ -12,7 +12,7 @@ Feature: User is correctly redirected
And I clear field "username" And I clear field "username"
And I login with user "john" and password "password" And I login with user "john" and password "password"
And I use "REGISTERED" as TOTP token handle And I use "REGISTERED" as TOTP token handle
And I click on "TOTP" And I click on "Sign in"
Then I'm redirected to "https://public.test.local:8080/secret.html" Then I'm redirected to "https://public.test.local:8080/secret.html"
Scenario: User Harry does not have access to admin domain and thus he must get an error 403 Scenario: User Harry does not have access to admin domain and thus he must get an error 403
@ -39,7 +39,7 @@ Feature: User is correctly redirected
When I visit "https://public.test.local:8080/secret.html" When I visit "https://public.test.local:8080/secret.html"
And I login with user "john" and password "password" And I login with user "john" and password "password"
And I use "Sec0" as TOTP token handle And I use "Sec0" as TOTP token handle
And I click on "TOTP" And I click on "Sign in"
Then I'm redirected to "https://public.test.local:8080/secret.html" Then I'm redirected to "https://public.test.local:8080/secret.html"
@need-registered-user-john @need-registered-user-john
@ -47,5 +47,5 @@ Feature: User is correctly redirected
When I visit "https://auth.test.local:8080" When I visit "https://auth.test.local:8080"
And I login with user "john" and password "password" And I login with user "john" and password "password"
And I use "REGISTERED" as TOTP token handle And I use "REGISTERED" as TOTP token handle
And I click on "TOTP" And I click on "Sign in"
Then I'm redirected to "https://home.test.local:8080/" Then I'm redirected to "https://home.test.local:8080/"

2
test/features/regulation.feature
View File

@ -35,5 +35,5 @@ Feature: Authelia regulates authentication to avoid brute force
And I set field "password" to "password" And I set field "password" to "password"
And I click on "Sign in" And I click on "Sign in"
And I use "REGISTERED" as TOTP token handle And I use "REGISTERED" as TOTP token handle
And I click on "TOTP" And I click on "Sign in"
Then I'm redirected to "https://public.test.local:8080/secret.html" Then I'm redirected to "https://public.test.local:8080/secret.html"

2
test/features/resilience.feature
View File

@ -13,5 +13,5 @@ Feature: Authelia keeps user sessions despite the application restart
And I visit "https://admin.test.local:8080/secret.html" and get redirected "https://auth.test.local:8080/?redirect=https%3A%2F%2Fadmin.test.local%3A8080%2Fsecret.html" And I visit "https://admin.test.local:8080/secret.html" and get redirected "https://auth.test.local:8080/?redirect=https%3A%2F%2Fadmin.test.local%3A8080%2Fsecret.html"
And I login with user "john" and password "password" And I login with user "john" and password "password"
And I use "REGISTERED" as TOTP token handle And I use "REGISTERED" as TOTP token handle
And I click on "TOTP" And I click on "Sign in"
Then I'm redirected to "https://admin.test.local:8080/secret.html" Then I'm redirected to "https://admin.test.local:8080/secret.html"

2
test/features/step_definitions/hooks.ts
View File

@ -97,7 +97,7 @@ Cucumber.defineSupportCode(function ({ After, Before }) {
return context.useTotpTokenHandle("REGISTERED"); return context.useTotpTokenHandle("REGISTERED");
}) })
.then(function () { .then(function () {
return context.clickOnButton("TOTP"); return context.clickOnButton("Sign in");
}); });
} }

2
test/features/support/world.ts
View File

@ -164,7 +164,7 @@ function CustomWorld() {
return that.useTotpTokenHandle(totpHandle); return that.useTotpTokenHandle(totpHandle);
}) })
.then(function () { .then(function () {
return that.clickOnButton("TOTP"); return that.clickOnButton("Sign in");
}); });
}; };
} }