c60cc7ca75
Some checks failed
CI / Run tests and lints (push) Failing after 29s
CI / Build CLI docs (push) Has been skipped
CI / Run Playwright end-to-end tests (mysql) (push) Failing after 3s
CI / Run Playwright end-to-end tests (postgres) (push) Failing after 2s
CI / Run Playwright end-to-end tests (sqlite) (push) Failing after 3s
CodeQL / Analyze (go) (push) Failing after 4s
CodeQL / Analyze (javascript) (push) Failing after 3s
Docker Image Scanners / scanners (push) Failing after 4s
Synchronize Issue Labels / Synchronize Issue Labels (push) Has been skipped
CI / Run end-to-end tests (postgres) (push) Failing after 19s
CI / Run end-to-end tests (sqlite) (push) Failing after 2s
CI / Run Playwright end-to-end tests (cockroach) (push) Failing after 2s
CI / Draft newsletter (push) Has been skipped
CI / Generate release (push) Has been skipped
CI / Pending approval Slack notification (push) Has been skipped
CI / Send newsletter (push) Has been skipped
94 lines
2.7 KiB
Go
94 lines
2.7 KiB
Go
// Copyright © 2023 Ory Corp
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package session_test
|
|
|
|
import (
|
|
"fmt"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
|
|
"github.com/ory/herodot"
|
|
"github.com/ory/kratos/session"
|
|
)
|
|
|
|
func TestErrAALNotSatisfied_PassReturnToAndLoginChallengeParameters(t *testing.T) {
|
|
cases := []struct {
|
|
name string
|
|
instance *session.ErrAALNotSatisfied
|
|
requestURL string
|
|
wantErr assert.ErrorAssertionFunc
|
|
expected string
|
|
}{
|
|
{
|
|
name: "no parameter",
|
|
instance: &session.ErrAALNotSatisfied{
|
|
DefaultError: &herodot.DefaultError{},
|
|
RedirectTo: "https://localhost/?foo=bar",
|
|
},
|
|
requestURL: "https://localhost:1234/",
|
|
wantErr: assert.NoError,
|
|
expected: "https://localhost/?foo=bar",
|
|
},
|
|
{
|
|
name: "pass return_to parameter",
|
|
instance: &session.ErrAALNotSatisfied{
|
|
DefaultError: &herodot.DefaultError{},
|
|
RedirectTo: "https://localhost/?foo=bar",
|
|
},
|
|
requestURL: "https://localhost:1234/?return_to=https%3A%2F%2Fory.sh",
|
|
wantErr: assert.NoError,
|
|
expected: "https://localhost/?foo=bar&return_to=https%3A%2F%2Fory.sh",
|
|
},
|
|
{
|
|
name: "pass login_challenge parameter",
|
|
instance: &session.ErrAALNotSatisfied{
|
|
DefaultError: &herodot.DefaultError{},
|
|
RedirectTo: "https://localhost/?foo=bar",
|
|
},
|
|
requestURL: "https://localhost:1234/?login_challenge=badee1",
|
|
wantErr: assert.NoError,
|
|
expected: "https://localhost/?foo=bar&login_challenge=badee1",
|
|
},
|
|
{
|
|
name: "pass login_challenge and return_to parameters",
|
|
instance: &session.ErrAALNotSatisfied{
|
|
DefaultError: &herodot.DefaultError{},
|
|
RedirectTo: "https://localhost/?foo=bar",
|
|
},
|
|
requestURL: "https://localhost:1234/?return_to=https%3A%2F%2Fory.sh&login_challenge=badee1",
|
|
wantErr: assert.NoError,
|
|
expected: "https://localhost/?foo=bar&login_challenge=badee1&return_to=https%3A%2F%2Fory.sh",
|
|
},
|
|
{
|
|
name: "invalid RedirectTo URL",
|
|
instance: &session.ErrAALNotSatisfied{
|
|
DefaultError: &herodot.DefaultError{},
|
|
RedirectTo: "https://user:{{{@localhost/?foo=bar",
|
|
},
|
|
requestURL: "https://localhost:1234/?return_to=https%3A%2F%2Fory.sh",
|
|
wantErr: assert.Error,
|
|
},
|
|
{
|
|
name: "invalid request URL URL",
|
|
instance: &session.ErrAALNotSatisfied{
|
|
DefaultError: &herodot.DefaultError{},
|
|
RedirectTo: "https://localhost/?foo=bar",
|
|
},
|
|
requestURL: "https://user:{{{@localhost:1234/?return_to=https%3A%2F%2Fory.sh",
|
|
wantErr: assert.Error,
|
|
},
|
|
}
|
|
for _, tc := range cases {
|
|
t.Run(fmt.Sprintf("case=%s", tc.name), func(t *testing.T) {
|
|
err := tc.instance.PassReturnToAndLoginChallengeParameters(tc.requestURL)
|
|
|
|
tc.wantErr(t, err)
|
|
if err == nil {
|
|
assert.Equal(t, tc.expected, tc.instance.RedirectTo)
|
|
}
|
|
})
|
|
}
|
|
}
|