mirror of
https://github.com/mattermost/mattermost.git
synced 2026-02-03 20:40:00 -05:00
78 lines
1.9 KiB
Go
78 lines
1.9 KiB
Go
// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
|
|
// See LICENSE.txt for license information.
|
|
|
|
package api4
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/mattermost/mattermost/server/public/model"
|
|
"github.com/mattermost/mattermost/server/v8/einterfaces/mocks"
|
|
)
|
|
|
|
func TestGetSamlMetadata(t *testing.T) {
|
|
mainHelper.Parallel(t)
|
|
th := Setup(t)
|
|
client := th.Client
|
|
|
|
_, resp, err := client.GetSamlMetadata(context.Background())
|
|
require.Error(t, err)
|
|
CheckNotImplementedStatus(t, resp)
|
|
|
|
// Rest is tested by enterprise tests
|
|
}
|
|
|
|
func TestSamlCompleteCSRFPass(t *testing.T) {
|
|
mainHelper.Parallel(t)
|
|
th := Setup(t).InitBasic(t)
|
|
|
|
url := th.Client.URL + "/login/sso/saml"
|
|
req, err := http.NewRequest("POST", url, nil)
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
cookie1 := &http.Cookie{
|
|
Name: model.SessionCookieUser,
|
|
Value: th.BasicUser.Username,
|
|
}
|
|
cookie2 := &http.Cookie{
|
|
Name: model.SessionCookieToken,
|
|
Value: th.Client.AuthToken,
|
|
}
|
|
req.AddCookie(cookie1)
|
|
req.AddCookie(cookie2)
|
|
|
|
client := &http.Client{}
|
|
resp, err := client.Do(req)
|
|
require.NoError(t, err)
|
|
require.NotEqual(t, http.StatusUnauthorized, resp.StatusCode)
|
|
defer resp.Body.Close()
|
|
}
|
|
|
|
func TestSamlResetId(t *testing.T) {
|
|
mainHelper.Parallel(t)
|
|
th := SetupEnterprise(t).InitBasic(t)
|
|
|
|
th.App.Channels().Saml = &mocks.SamlInterface{}
|
|
|
|
user := th.BasicUser
|
|
_, appErr := th.App.UpdateUserAuth(nil, user.Id, &model.UserAuth{
|
|
AuthData: model.NewPointer(model.NewId()),
|
|
AuthService: model.UserAuthServiceSaml,
|
|
})
|
|
require.Nil(t, appErr)
|
|
|
|
_, resp, err := th.Client.ResetSamlAuthDataToEmail(context.Background(), false, false, nil)
|
|
require.Error(t, err)
|
|
CheckForbiddenStatus(t, resp)
|
|
|
|
numAffected, resp, err := th.SystemAdminClient.ResetSamlAuthDataToEmail(context.Background(), false, false, nil)
|
|
require.NoError(t, err)
|
|
CheckOKStatus(t, resp)
|
|
require.Equal(t, int64(1), numAffected)
|
|
}
|