Some checks failed
CI / Run tests and lints (push) Failing after 29s
CI / Build CLI docs (push) Has been skipped
CI / Run Playwright end-to-end tests (mysql) (push) Failing after 3s
CI / Run Playwright end-to-end tests (postgres) (push) Failing after 2s
CI / Run Playwright end-to-end tests (sqlite) (push) Failing after 3s
CodeQL / Analyze (go) (push) Failing after 4s
CodeQL / Analyze (javascript) (push) Failing after 3s
Docker Image Scanners / scanners (push) Failing after 4s
Synchronize Issue Labels / Synchronize Issue Labels (push) Has been skipped
CI / Run end-to-end tests (postgres) (push) Failing after 19s
CI / Run end-to-end tests (sqlite) (push) Failing after 2s
CI / Run Playwright end-to-end tests (cockroach) (push) Failing after 2s
CI / Draft newsletter (push) Has been skipped
CI / Generate release (push) Has been skipped
CI / Pending approval Slack notification (push) Has been skipped
CI / Send newsletter (push) Has been skipped
44 lines
1.8 KiB
Go
44 lines
1.8 KiB
Go
// Copyright © 2026 Ory Corp
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package sms_test
|
|
|
|
import (
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/ory/kratos/courier/template/sms"
|
|
"github.com/ory/kratos/pkg"
|
|
)
|
|
|
|
// TestOriginBoundSMSBodies asserts that the login, registration, and
|
|
// verification code SMS bodies include the Web OTP origin-bound last line
|
|
// `@<domain> #<code>`, mirroring the recovery code template.
|
|
func TestOriginBoundSMSBodies(t *testing.T) {
|
|
_, reg := pkg.NewFastRegistryWithMocks(t)
|
|
|
|
t.Run("template=login_code", func(t *testing.T) {
|
|
body, err := sms.NewLoginCodeValid(reg, &sms.LoginCodeValidModel{LoginCode: "012345", RequestURLDomain: "auth.example.com"}).SMSBody(t.Context())
|
|
require.NoError(t, err)
|
|
assert.True(t, strings.HasSuffix(strings.TrimRight(body, "\n"), "@auth.example.com #012345"),
|
|
"body must end with the origin-bound line, got: %q", body)
|
|
})
|
|
|
|
t.Run("template=registration_code", func(t *testing.T) {
|
|
body, err := sms.NewRegistrationCodeValid(reg, &sms.RegistrationCodeValidModel{RegistrationCode: "012345", RequestURLDomain: "auth.example.com"}).SMSBody(t.Context())
|
|
require.NoError(t, err)
|
|
assert.True(t, strings.HasSuffix(strings.TrimRight(body, "\n"), "@auth.example.com #012345"),
|
|
"body must end with the origin-bound line, got: %q", body)
|
|
})
|
|
|
|
t.Run("template=verification_code", func(t *testing.T) {
|
|
body, err := sms.NewVerificationCodeValid(reg, &sms.VerificationCodeValidModel{VerificationCode: "012345", RequestURLDomain: "auth.example.com"}).SMSBody(t.Context())
|
|
require.NoError(t, err)
|
|
assert.True(t, strings.HasSuffix(strings.TrimRight(body, "\n"), "@auth.example.com #012345"),
|
|
"body must end with the origin-bound line, got: %q", body)
|
|
})
|
|
}
|