130 lines
4.0 KiB
Ruby
130 lines
4.0 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
describe 'Api::V2::Resource::Otp' do
|
|
include_context 'bearer authentication'
|
|
let!(:create_member_permission) do
|
|
create :permission,
|
|
role: 'member'
|
|
end
|
|
let(:do_request) { post '/api/v2/resource/otp/enable', headers: auth_header }
|
|
let(:otp_code) { '111111' }
|
|
|
|
context 'valid request' do
|
|
before do
|
|
allow(TOTPService).to receive(:validate?)
|
|
.with(test_user.uid, otp_code) { true }
|
|
end
|
|
|
|
it 'user enables 2fa successfully' do
|
|
post '/api/v2/resource/otp/enable', headers: auth_header, params: {
|
|
code: otp_code
|
|
}
|
|
|
|
expect(response.status).to eq 201
|
|
expect(test_user.reload.otp).to eq true
|
|
expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).not_to eq nil
|
|
end
|
|
|
|
it 'user disables 2fa successfully' do
|
|
test_user.update(otp: true)
|
|
test_user.labels.create(value: 'verified', key: :otp, scope: :private)
|
|
post '/api/v2/resource/otp/disable', headers: auth_header, params: {
|
|
code: otp_code
|
|
}
|
|
|
|
expect(response.status).to eq 200
|
|
expect(test_user.reload.otp).to eq false
|
|
expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).to eq nil
|
|
end
|
|
|
|
it 'user verify otp Code' do
|
|
|
|
test_user.update(otp: true)
|
|
test_user.labels.create(value: 'verified', key: :otp, scope: :private)
|
|
|
|
post '/api/v2/resource/otp/verify', headers: auth_header, params: {
|
|
code: otp_code
|
|
}
|
|
|
|
expect(response.status).to eq 201
|
|
expect(test_user.reload.otp).to eq true
|
|
expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).not_to eq nil
|
|
end
|
|
end
|
|
|
|
context 'incomplete request' do
|
|
it 'user receives error in enabling' do
|
|
post '/api/v2/resource/otp/enable', headers: auth_header, params: {
|
|
code: otp_code
|
|
}
|
|
|
|
expect(response.status).to eq 422
|
|
expect(test_user.reload.otp).to eq false
|
|
expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).to eq nil
|
|
end
|
|
|
|
it 'user receives error in disabling' do
|
|
test_user.update(otp: true)
|
|
test_user.labels.create(key: :otp, scope: :private)
|
|
post '/api/v2/resource/otp/disable', headers: auth_header, params: {
|
|
code: otp_code
|
|
}
|
|
|
|
expect(response.status).to eq 422
|
|
expect(test_user.reload.otp).to eq true
|
|
expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).to eq nil
|
|
end
|
|
|
|
end
|
|
|
|
|
|
context 'already done' do
|
|
before do
|
|
allow(TOTPService).to receive(:validate?)
|
|
.with(test_user.uid, otp_code) { true }
|
|
end
|
|
|
|
it 'enabling otp' do
|
|
test_user.update(otp: true)
|
|
test_user.labels.create(value: 'verified', key: :otp, scope: :private)
|
|
post '/api/v2/resource/otp/enable', headers: auth_header, params: {
|
|
code: otp_code
|
|
}
|
|
|
|
expect(response.status).to eq 400
|
|
expect(test_user.reload.otp).to eq true
|
|
expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).not_to eq nil
|
|
end
|
|
|
|
it 'disabling otp' do
|
|
post '/api/v2/resource/otp/disable', headers: auth_header, params: {
|
|
code: otp_code
|
|
}
|
|
|
|
expect(response.status).to eq 400
|
|
expect(test_user.reload.otp).to eq false
|
|
expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).to eq nil
|
|
end
|
|
|
|
it 'otp disabled' do
|
|
post '/api/v2/resource/otp/verify', headers: auth_header, params: {
|
|
code: otp_code
|
|
}
|
|
|
|
expect(response.status).to eq 400
|
|
expect(test_user.reload.otp).to eq false
|
|
expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).to eq nil
|
|
end
|
|
|
|
it 'otp enabled' do
|
|
test_user.update(otp: true)
|
|
test_user.labels.create(value: 'verified', key: :otp, scope: :private)
|
|
post '/api/v2/resource/otp/generate_qrcode', headers: auth_header
|
|
|
|
expect(response.status).to eq 400
|
|
expect(test_user.reload.otp).to eq true
|
|
expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).not_to eq nil
|
|
end
|
|
end
|
|
end
|