Files
mattermost/api4/saml_test.go
Max Erenberg 869da7a78b [MM-32044] Reset SAML auth data (#17161)
Automatic Merge
2021-04-13 00:46:30 +02:00

74 lines
1.7 KiB
Go

// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
// See LICENSE.txt for license information.
package api4
import (
"net/http"
"testing"
"github.com/stretchr/testify/require"
"github.com/mattermost/mattermost-server/v5/einterfaces/mocks"
"github.com/mattermost/mattermost-server/v5/model"
)
func TestGetSamlMetadata(t *testing.T) {
th := Setup(t)
defer th.TearDown()
Client := th.Client
_, resp := Client.GetSamlMetadata()
CheckNotImplementedStatus(t, resp)
// Rest is tested by enterprise tests
}
func TestSamlCompleteCSRFPass(t *testing.T) {
th := Setup(t).InitBasic()
defer th.TearDown()
url := th.Client.Url + "/login/sso/saml"
req, err := http.NewRequest("POST", url, nil)
if err != nil {
return
}
cookie1 := &http.Cookie{
Name: model.SESSION_COOKIE_USER,
Value: th.BasicUser.Username,
}
cookie2 := &http.Cookie{
Name: model.SESSION_COOKIE_TOKEN,
Value: th.Client.AuthToken,
}
req.AddCookie(cookie1)
req.AddCookie(cookie2)
client := &http.Client{}
resp, err := client.Do(req)
require.NoError(t, err)
require.NotEqual(t, http.StatusUnauthorized, resp.StatusCode)
defer resp.Body.Close()
}
func TestSamlResetId(t *testing.T) {
th := SetupEnterprise(t).InitBasic()
defer th.TearDown()
th.App.Srv().Saml = &mocks.SamlInterface{}
user := th.BasicUser
_, appErr := th.App.UpdateUserAuth(user.Id, &model.UserAuth{
AuthData: model.NewString(model.NewId()),
AuthService: model.USER_AUTH_SERVICE_SAML,
})
require.Nil(t, appErr)
_, resp := th.Client.ResetSamlAuthDataToEmail(false, false, nil)
CheckForbiddenStatus(t, resp)
numAffected, resp := th.SystemAdminClient.ResetSamlAuthDataToEmail(false, false, nil)
CheckOKStatus(t, resp)
require.Equal(t, int64(1), numAffected)
}