1957717160
* core: add ability to choose a default authentication flow for a provider Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space> * update web to use correct ak-search-select I don't think this element existed when the PR was initially created, lol Signed-off-by: Jens Langhammer <jens@goauthentik.io> * only use provider authentication flow for authentication designation Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space> Signed-off-by: Jens Langhammer <jens@goauthentik.io> Co-authored-by: Jens Langhammer <jens@goauthentik.io>
78 lines
3.4 KiB
Python
78 lines
3.4 KiB
Python
"""flow views tests"""
|
|
from django.test import TestCase
|
|
from django.urls import reverse
|
|
|
|
from authentik.core.models import Application
|
|
from authentik.core.tests.utils import create_test_flow
|
|
from authentik.flows.models import Flow, FlowDesignation
|
|
from authentik.flows.planner import FlowPlan
|
|
from authentik.flows.views.executor import SESSION_KEY_APPLICATION_PRE, SESSION_KEY_PLAN
|
|
from authentik.lib.generators import generate_id
|
|
from authentik.providers.oauth2.models import OAuth2Provider
|
|
|
|
|
|
class TestHelperView(TestCase):
|
|
"""Test helper views logic"""
|
|
|
|
def test_default_view(self):
|
|
"""Test that ToDefaultFlow returns the expected URL"""
|
|
Flow.objects.filter(designation=FlowDesignation.INVALIDATION).delete()
|
|
flow = create_test_flow(FlowDesignation.INVALIDATION)
|
|
response = self.client.get(
|
|
reverse("authentik_flows:default-invalidation"),
|
|
)
|
|
expected_url = reverse("authentik_core:if-flow", kwargs={"flow_slug": flow.slug})
|
|
self.assertEqual(response.status_code, 302)
|
|
self.assertEqual(response.url, expected_url)
|
|
|
|
def test_default_view_app(self):
|
|
"""Test that ToDefaultFlow returns the expected URL (when accessing an application)"""
|
|
Flow.objects.filter(designation=FlowDesignation.AUTHENTICATION).delete()
|
|
flow = create_test_flow(FlowDesignation.AUTHENTICATION)
|
|
self.client.session[SESSION_KEY_APPLICATION_PRE] = Application(
|
|
name=generate_id(),
|
|
slug=generate_id(),
|
|
provider=OAuth2Provider(
|
|
name=generate_id(),
|
|
authentication_flow=flow,
|
|
),
|
|
)
|
|
response = self.client.get(
|
|
reverse("authentik_flows:default-authentication"),
|
|
)
|
|
expected_url = reverse("authentik_core:if-flow", kwargs={"flow_slug": flow.slug})
|
|
self.assertEqual(response.status_code, 302)
|
|
self.assertEqual(response.url, expected_url)
|
|
|
|
def test_default_view_app_no_provider(self):
|
|
"""Test that ToDefaultFlow returns the expected URL
|
|
(when accessing an application, without a provider)"""
|
|
Flow.objects.filter(designation=FlowDesignation.AUTHENTICATION).delete()
|
|
flow = create_test_flow(FlowDesignation.AUTHENTICATION)
|
|
self.client.session[SESSION_KEY_APPLICATION_PRE] = Application(
|
|
name=generate_id(),
|
|
slug=generate_id(),
|
|
)
|
|
response = self.client.get(
|
|
reverse("authentik_flows:default-authentication"),
|
|
)
|
|
expected_url = reverse("authentik_core:if-flow", kwargs={"flow_slug": flow.slug})
|
|
self.assertEqual(response.status_code, 302)
|
|
self.assertEqual(response.url, expected_url)
|
|
|
|
def test_default_view_invalid_plan(self):
|
|
"""Test that ToDefaultFlow returns the expected URL (with an invalid plan)"""
|
|
Flow.objects.filter(designation=FlowDesignation.INVALIDATION).delete()
|
|
flow = create_test_flow(FlowDesignation.INVALIDATION)
|
|
plan = FlowPlan(flow_pk=flow.pk.hex + "aa")
|
|
session = self.client.session
|
|
session[SESSION_KEY_PLAN] = plan
|
|
session.save()
|
|
|
|
response = self.client.get(
|
|
reverse("authentik_flows:default-invalidation"),
|
|
)
|
|
expected_url = reverse("authentik_core:if-flow", kwargs={"flow_slug": flow.slug})
|
|
self.assertEqual(response.status_code, 302)
|
|
self.assertEqual(response.url, expected_url)
|