mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
73d5253297
Notifier is not mandatory when authentication method is single_factor for all sub-domains since there is no registration required.
67 lines
3.6 KiB
Gherkin
67 lines
3.6 KiB
Gherkin
Feature: User has access restricted access to domains
|
|
|
|
@need-registered-user-john
|
|
Scenario: User john has admin access
|
|
When I visit "https://auth.test.local:8080?redirect=https%3A%2F%2Fhome.test.local%3A8080%2F"
|
|
And I login with user "john" and password "password"
|
|
And I use "REGISTERED" as TOTP token handle
|
|
And I click on "Sign in"
|
|
And I'm redirected to "https://home.test.local:8080/"
|
|
Then I have access to:
|
|
| url |
|
|
| https://public.test.local:8080/secret.html |
|
|
| https://dev.test.local:8080/groups/admin/secret.html |
|
|
| https://dev.test.local:8080/groups/dev/secret.html |
|
|
| https://dev.test.local:8080/users/john/secret.html |
|
|
| https://dev.test.local:8080/users/harry/secret.html |
|
|
| https://dev.test.local:8080/users/bob/secret.html |
|
|
| https://admin.test.local:8080/secret.html |
|
|
| https://mx1.mail.test.local:8080/secret.html |
|
|
| https://single_factor.test.local:8080/secret.html |
|
|
And I have no access to:
|
|
| url |
|
|
| https://mx2.mail.test.local:8080/secret.html |
|
|
|
|
@need-registered-user-bob
|
|
Scenario: User bob has restricted access
|
|
When I visit "https://auth.test.local:8080?redirect=https%3A%2F%2Fhome.test.local%3A8080%2F"
|
|
And I login with user "bob" and password "password"
|
|
And I use "REGISTERED" as TOTP token handle
|
|
And I click on "Sign in"
|
|
And I'm redirected to "https://home.test.local:8080/"
|
|
Then I have access to:
|
|
| url |
|
|
| https://public.test.local:8080/secret.html |
|
|
| https://dev.test.local:8080/groups/dev/secret.html |
|
|
| https://dev.test.local:8080/users/bob/secret.html |
|
|
| https://mx1.mail.test.local:8080/secret.html |
|
|
| https://mx2.mail.test.local:8080/secret.html |
|
|
And I have no access to:
|
|
| url |
|
|
| https://dev.test.local:8080/groups/admin/secret.html |
|
|
| https://admin.test.local:8080/secret.html |
|
|
| https://dev.test.local:8080/users/john/secret.html |
|
|
| https://dev.test.local:8080/users/harry/secret.html |
|
|
| https://single_factor.test.local:8080/secret.html |
|
|
|
|
@need-registered-user-harry
|
|
Scenario: User harry has restricted access
|
|
When I visit "https://auth.test.local:8080?redirect=https%3A%2F%2Fhome.test.local%3A8080%2F"
|
|
And I login with user "harry" and password "password"
|
|
And I use "REGISTERED" as TOTP token handle
|
|
And I click on "Sign in"
|
|
And I'm redirected to "https://home.test.local:8080/"
|
|
Then I have access to:
|
|
| url |
|
|
| https://public.test.local:8080/secret.html |
|
|
| https://dev.test.local:8080/users/harry/secret.html |
|
|
And I have no access to:
|
|
| url |
|
|
| https://dev.test.local:8080/groups/dev/secret.html |
|
|
| https://dev.test.local:8080/users/bob/secret.html |
|
|
| https://dev.test.local:8080/groups/admin/secret.html |
|
|
| https://admin.test.local:8080/secret.html |
|
|
| https://dev.test.local:8080/users/john/secret.html |
|
|
| https://mx1.mail.test.local:8080/secret.html |
|
|
| https://mx2.mail.test.local:8080/secret.html |
|
|
| https://single_factor.test.local:8080/secret.html | |