mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
66449eedb0
Previously, string "{0}" was replaced by the user dn in the groups_filter attributes of the LDAP configuration. However, if the groups children only have a memberUid attribute, one would like to use the username instead of the user dn. Since the user dn can be built from the username, "{0}" is now replaced by the username instead of the user dn so that an LDAP relying on attribute 'memberUid' can be used.
39 lines
1.9 KiB
Gherkin
39 lines
1.9 KiB
Gherkin
Feature: User validate first factor
|
|
|
|
Scenario: User succeeds first factor
|
|
Given I visit "https://auth.test.local:8080/"
|
|
When I set field "username" to "bob"
|
|
And I set field "password" to "password"
|
|
And I click on "Sign in"
|
|
Then I'm redirected to "https://auth.test.local:8080/secondfactor"
|
|
|
|
Scenario: User fails first factor
|
|
Given I visit "https://auth.test.local:8080/"
|
|
When I set field "username" to "john"
|
|
And I set field "password" to "bad-password"
|
|
And I click on "Sign in"
|
|
Then I get a notification of type "error" with message "Authentication failed. Please double check your credentials."
|
|
|
|
Scenario: User registers TOTP secret and succeeds authentication
|
|
Given I visit "https://auth.test.local:8080/"
|
|
And I login with user "john" and password "password"
|
|
And I register a TOTP secret called "Sec0"
|
|
When I visit "https://admin.test.local:8080/secret.html"
|
|
And I'm redirected to "https://auth.test.local:8080/?redirect=https%3A%2F%2Fadmin.test.local%3A8080%2Fsecret.html"
|
|
And I login with user "john" and password "password"
|
|
And I use "Sec0" as TOTP token handle
|
|
And I click on "TOTP"
|
|
Then I'm redirected to "https://admin.test.local:8080/secret.html"
|
|
|
|
Scenario: User fails TOTP second factor
|
|
When I visit "https://admin.test.local:8080/secret.html"
|
|
And I'm redirected to "https://auth.test.local:8080/?redirect=https%3A%2F%2Fadmin.test.local%3A8080%2Fsecret.html"
|
|
And I login with user "john" and password "password"
|
|
And I use "BADTOKEN" as TOTP token
|
|
And I click on "TOTP"
|
|
Then I get a notification of type "error" with message "Problem with TOTP validation."
|
|
|
|
Scenario: Logout redirects user to redirect URL given in parameter
|
|
When I visit "https://auth.test.local:8080/logout?redirect=https://home.test.local:8080/"
|
|
Then I'm redirected to "https://home.test.local:8080/"
|