fda4343019
Add tests for the OAuth/OIDC login endpoint covering: - IdP-initiated flow (no CGISESSID cookie on initial request) - Callback without CGISESSID cookie (session lost) - Normal SP-initiated flow (cookie present) Tests create a real identity provider in the database and assert: - Initial request without cookie redirects to the IdP authorize URL - A CGISESSID cookie is set for the new session - Callback without cookie returns wrong_csrf_token error (not 500) - Normal flow with cookie redirects to IdP as expected Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io> Signed-off-by: David Nind <david@davidnind.com> Signed-off-by: David Cook <dcook@prosentient.com.au> Signed-off-by: Pedro Amorim <pedro.amorim@openfifth.co.uk> |
||
|---|---|---|
| .. | ||
| v1 | ||