darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-08-04 05:31:44 -04:00
Code Issues Packages Projects Releases Wiki Activity

Test all manage security keys pages against unauthorised access

Browse Source
This commit is contained in:
Pea Tyczynska
2021-05-21 18:02:04 +01:00
parent 724e345089
commit e384d3e0a1
1 changed files with 23 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
tests/app/main/views/test_user_profile.py
View File

@@ -424,12 +424,29 @@ def test_manage_security_key_page_404s_when_key_not_found(
)
def test_non_platform_admin_user_doesnt_see_manage_security_key_page(client_request, webauthn_credential,):
client_request.get(
'.user_profile_manage_security_key',
key_id=webauthn_credential['id'],
_expected_status=403,
)
@pytest.mark.parametrize('endpoint,method', [
(".user_profile_manage_security_key", "get"),
(".user_profile_manage_security_key", "post"),
(".user_profile_confirm_delete_security_key", "get"),
(".user_profile_confirm_delete_security_key", "post"),
(".user_profile_delete_security_key", "post"),
])
def test_non_platform_admin_user_cant_manage_security_keys(
client_request, webauthn_credential, endpoint, method
):
if method == "get":
client_request.get(
endpoint,
key_id=webauthn_credential['id'],
_expected_status=403,
)
else:
client_request.post(
endpoint,
key_id=webauthn_credential['id'],
_expected_status=403,
)
def test_should_redirect_after_change_of_security_key_name(