mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
6b78240d39
From this commit on, api endpoints reply with a 401 error code and non api endpoints redirect to /error/40X. This commit also fixes missing restrictions on /loggedin (the "already logged in page). This was not a security issue, though. The change also makes error pages automatically redirect the user after few seconds based on the referrer or the default_redirection_url if provided in the configuration. Warning: The old /verify endpoint of the REST API has moved to /api/verify. You will need to update your nginx configuration to take this change into account.
79 lines
2.9 KiB
TypeScript
79 lines
2.9 KiB
TypeScript
|
|
import PasswordResetHandler from "../../../../src/lib/routes/password-reset/identity/PasswordResetHandler";
|
|
import PasswordUpdater = require("../../../../src/lib/ldap/PasswordUpdater");
|
|
import { UserDataStore } from "../../../../src/lib/storage/UserDataStore";
|
|
import Sinon = require("sinon");
|
|
import winston = require("winston");
|
|
import assert = require("assert");
|
|
import BluebirdPromise = require("bluebird");
|
|
import ExpressMock = require("../../../mocks/express");
|
|
import { ServerVariablesMock, ServerVariablesMockBuilder } from "../../../mocks/ServerVariablesMockBuilder";
|
|
import { ServerVariables } from "../../../../src/lib/ServerVariables";
|
|
|
|
describe("test reset password identity check", function () {
|
|
let req: ExpressMock.RequestMock;
|
|
let res: ExpressMock.ResponseMock;
|
|
let mocks: ServerVariablesMock;
|
|
let vars: ServerVariables;
|
|
|
|
beforeEach(function () {
|
|
req = {
|
|
originalUrl: "/non-api/xxx",
|
|
query: {
|
|
userid: "user"
|
|
},
|
|
session: {
|
|
auth: {
|
|
userid: "user",
|
|
email: "user@example.com",
|
|
first_factor: true,
|
|
second_factor: false
|
|
}
|
|
},
|
|
headers: {
|
|
host: "localhost"
|
|
}
|
|
};
|
|
|
|
const options = {
|
|
inMemoryOnly: true
|
|
};
|
|
|
|
const s = ServerVariablesMockBuilder.build();
|
|
mocks = s.mocks;
|
|
vars = s.variables;
|
|
|
|
mocks.userDataStore.saveU2FRegistrationStub.returns(BluebirdPromise.resolve({}));
|
|
mocks.userDataStore.retrieveU2FRegistrationStub.returns(BluebirdPromise.resolve({}));
|
|
mocks.userDataStore.produceIdentityValidationTokenStub.returns(BluebirdPromise.resolve({}));
|
|
mocks.userDataStore.consumeIdentityValidationTokenStub.returns(BluebirdPromise.resolve({}));
|
|
res = ExpressMock.ResponseMock();
|
|
});
|
|
|
|
describe("test reset password identity pre check", () => {
|
|
it("should fail when no userid is provided", function () {
|
|
req.query.userid = undefined;
|
|
const handler = new PasswordResetHandler(vars.logger, vars.ldapEmailsRetriever);
|
|
return handler.preValidationInit(req as any)
|
|
.then(function () { return BluebirdPromise.reject("It should fail"); })
|
|
.catch(function (err: Error) {
|
|
return BluebirdPromise.resolve();
|
|
});
|
|
});
|
|
|
|
it("should fail if ldap fail", function () {
|
|
mocks.ldapEmailsRetriever.retrieveStub.returns(BluebirdPromise.reject("Internal error"));
|
|
new PasswordResetHandler(vars.logger, vars.ldapEmailsRetriever).preValidationInit(req as any)
|
|
.then(function () { return BluebirdPromise.reject(new Error("should not be here")); },
|
|
function (err: Error) {
|
|
return BluebirdPromise.resolve();
|
|
});
|
|
});
|
|
|
|
it("should returns identity when ldap replies", function () {
|
|
mocks.ldapEmailsRetriever.retrieveStub.returns(BluebirdPromise.resolve(["test@example.com"]));
|
|
return new PasswordResetHandler(vars.logger, vars.ldapEmailsRetriever).preValidationInit(req as any);
|
|
});
|
|
});
|
|
});
|