7e385fc126
Some checks failed
SonarQube / SonarQube (push) Failing after 5m28s
E2e test on main branch push / server and client test (map[name:admin port:8080]) (push) Failing after 3m33s
Server and lib tests / Library test (js) (push) Failing after 1m36s
Server and lib tests / Library test (vue) (push) Successful in 2m24s
Server and lib tests / Web client test (admin) (push) Successful in 2m52s
Server and lib tests / Web client test (compose) (push) Successful in 3m23s
Server and lib tests / Web client test (discovery) (push) Successful in 2m49s
Server and lib tests / Web client test (one) (push) Successful in 2m52s
Server and lib tests / Web client test (privacy) (push) Successful in 2m44s
Server and lib tests / Web client test (reporter) (push) Successful in 2m56s
Server and lib tests / Web client test (workflow) (push) Successful in 3m0s
Server and lib tests / Server tests (push) Failing after 4m55s
E2e test on main branch push / notify-failure (push) Failing after 9s
Server and lib tests / Send matrix testing notification (push) Successful in 2s
Mark stale issues and pull requests / stale (push) Successful in 40s
49 lines
1.3 KiB
Go
49 lines
1.3 KiB
Go
package handlers
|
|
|
|
import (
|
|
"net/http"
|
|
"net/url"
|
|
"testing"
|
|
|
|
"github.com/cortezaproject/corteza/server/auth/request"
|
|
"github.com/cortezaproject/corteza/server/auth/settings"
|
|
"github.com/cortezaproject/corteza/server/system/service"
|
|
"github.com/cortezaproject/corteza/server/system/types"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func Test_logoutProc(t *testing.T) {
|
|
var (
|
|
user = makeMockUser()
|
|
|
|
req = &http.Request{}
|
|
|
|
authService authService
|
|
authHandlers *AuthHandlers
|
|
authReq *request.AuthReq
|
|
|
|
authSettings = &settings.Settings{}
|
|
|
|
rq = require.New(t)
|
|
)
|
|
|
|
service.CurrentSettings = &types.AppSettings{}
|
|
service.CurrentSettings.Auth.Internal.Enabled = true
|
|
|
|
authService = &authServiceMocked{}
|
|
authHandlers = prepareClientAuthHandlers(authService, authSettings)
|
|
authReq = prepareClientAuthReq(authHandlers, req, user)
|
|
|
|
req.PostForm = url.Values{}
|
|
req.PostForm.Add("back", "\"><script>alert(origin)</script><\"")
|
|
authReq.Session.Values = map[interface{}]interface{}{"key": url.Values{"key": []string{"value"}}}
|
|
|
|
err := authHandlers.logoutProc(authReq)
|
|
rq.NoError(err)
|
|
rq.Empty(authReq.Session.Values)
|
|
rq.Empty(authReq.AuthUser)
|
|
rq.Empty(authReq.Client)
|
|
rq.Equal("//scriptalert(origin)/script", authReq.Data["link"])
|
|
rq.Equal(TmplLogout, authReq.Template)
|
|
}
|