0038295bbc
- Load IdPs and supported instance-setting groups as runtime overlays from /etc/secrets. - Reject API mutations of deployment-managed resources and serialize authentication safety checks across database drivers. - Preserve upgrade compatibility, demo SSO policy, stable IdP ordering, and driver-specific transaction retries.
35 lines
1.1 KiB
Go
35 lines
1.1 KiB
Go
package test
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
|
|
storepb "github.com/usememos/memos/proto/gen/store"
|
|
"github.com/usememos/memos/store"
|
|
)
|
|
|
|
func TestAuthenticationConfigurationMutation(t *testing.T) {
|
|
t.Parallel()
|
|
ctx := context.Background()
|
|
ts := NewTestingStore(ctx, t)
|
|
t.Cleanup(func() { require.NoError(t, ts.Close()) })
|
|
|
|
general := &storepb.InstanceSetting{
|
|
Key: storepb.InstanceSettingKey_GENERAL,
|
|
Value: &storepb.InstanceSetting_GeneralSetting{GeneralSetting: &storepb.InstanceGeneralSetting{
|
|
DisallowPasswordAuth: true,
|
|
}},
|
|
}
|
|
_, err := ts.UpsertInstanceGeneralSettingSafely(ctx, general)
|
|
require.ErrorIs(t, err, store.ErrUnsafeAuthenticationConfiguration)
|
|
|
|
provider, err := ts.CreateIdentityProvider(ctx, createTestOAuth2IDP("Primary", "primary-sso"))
|
|
require.NoError(t, err)
|
|
_, err = ts.UpsertInstanceGeneralSettingSafely(ctx, general)
|
|
require.NoError(t, err)
|
|
|
|
err = ts.DeleteIdentityProviderSafely(ctx, &store.DeleteIdentityProvider{ID: provider.Id})
|
|
require.ErrorIs(t, err, store.ErrUnsafeAuthenticationConfiguration)
|
|
}
|