mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
a8974a9d8e
Warning: you will need to update your /etc/hosts to take this change into account for the example environment to work.
37 lines
2.6 KiB
Gherkin
37 lines
2.6 KiB
Gherkin
Feature: Non authenticated users have no access to certain pages
|
|
|
|
Scenario: Anonymous user has no access to protected pages
|
|
Then I get the following status code when requesting:
|
|
| url | code | method |
|
|
| https://login.example.com:8080/secondfactor | 401 | GET |
|
|
| https://login.example.com:8080/secondfactor/u2f/identity/start | 401 | GET |
|
|
| https://login.example.com:8080/secondfactor/u2f/identity/finish | 401 | GET |
|
|
| https://login.example.com:8080/secondfactor/totp/identity/start | 401 | GET |
|
|
| https://login.example.com:8080/secondfactor/totp/identity/finish | 401 | GET |
|
|
| https://login.example.com:8080/loggedin | 401 | GET |
|
|
| https://login.example.com:8080/api/totp | 401 | POST |
|
|
| https://login.example.com:8080/api/u2f/sign_request | 401 | GET |
|
|
| https://login.example.com:8080/api/u2f/sign | 401 | POST |
|
|
| https://login.example.com:8080/api/u2f/register_request | 401 | GET |
|
|
| https://login.example.com:8080/api/u2f/register | 401 | POST |
|
|
|
|
|
|
@needs-single_factor-config
|
|
@need-registered-user-john
|
|
Scenario: User does not have acces to second factor related endpoints when in single factor mode
|
|
Given I post "https://login.example.com:8080/api/firstfactor" with body:
|
|
| key | value |
|
|
| username | john |
|
|
| password | password |
|
|
Then I get the following status code when requesting:
|
|
| url | code | method |
|
|
| https://login.example.com:8080/secondfactor | 401 | GET |
|
|
| https://login.example.com:8080/secondfactor/u2f/identity/start | 401 | GET |
|
|
| https://login.example.com:8080/secondfactor/u2f/identity/finish | 401 | GET |
|
|
| https://login.example.com:8080/secondfactor/totp/identity/start | 401 | GET |
|
|
| https://login.example.com:8080/secondfactor/totp/identity/finish | 401 | GET |
|
|
| https://login.example.com:8080/api/totp | 401 | POST |
|
|
| https://login.example.com:8080/api/u2f/sign_request | 401 | GET |
|
|
| https://login.example.com:8080/api/u2f/sign | 401 | POST |
|
|
| https://login.example.com:8080/api/u2f/register_request | 401 | GET |
|
|
| https://login.example.com:8080/api/u2f/register | 401 | POST | |