mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-12 11:04:25 +00:00
bd5defa96a
This fix provides a possibility to pass a domain on the session, which will be used (as rpID) to create a passkey / u2f assertion and attestation. This is useful in cases where the login UI is served under a different domain / origin than the ZITADEL API.
72 lines
1.9 KiB
Go
72 lines
1.9 KiB
Go
package webauthn
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
|
|
"github.com/go-webauthn/webauthn/webauthn"
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/zitadel/zitadel/internal/api/authz"
|
|
caos_errs "github.com/zitadel/zitadel/internal/errors"
|
|
)
|
|
|
|
func TestConfig_serverFromContext(t *testing.T) {
|
|
type args struct {
|
|
ctx context.Context
|
|
id string
|
|
origin string
|
|
}
|
|
tests := []struct {
|
|
name string
|
|
args args
|
|
want *webauthn.WebAuthn
|
|
wantErr error
|
|
}{
|
|
{
|
|
name: "webauthn error",
|
|
args: args{context.Background(), "", ""},
|
|
wantErr: caos_errs.ThrowInternal(nil, "WEBAU-UX9ta", "Errors.User.WebAuthN.ServerConfig"),
|
|
},
|
|
{
|
|
name: "success from ctx",
|
|
args: args{authz.WithRequestedDomain(context.Background(), "example.com"), "", ""},
|
|
want: &webauthn.WebAuthn{
|
|
Config: &webauthn.Config{
|
|
RPDisplayName: "DisplayName",
|
|
RPID: "example.com",
|
|
RPOrigins: []string{"https://example.com"},
|
|
},
|
|
},
|
|
},
|
|
{
|
|
name: "success from id",
|
|
args: args{authz.WithRequestedDomain(context.Background(), "example.com"), "external.com", "https://external.com"},
|
|
want: &webauthn.WebAuthn{
|
|
Config: &webauthn.Config{
|
|
RPDisplayName: "DisplayName",
|
|
RPID: "external.com",
|
|
RPOrigins: []string{"https://external.com"},
|
|
},
|
|
},
|
|
},
|
|
}
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
w := &Config{
|
|
DisplayName: "DisplayName",
|
|
ExternalSecure: true,
|
|
}
|
|
got, err := w.serverFromContext(tt.args.ctx, tt.args.id, tt.args.origin)
|
|
require.ErrorIs(t, err, tt.wantErr)
|
|
if tt.want != nil {
|
|
require.NotNil(t, got)
|
|
assert.Equal(t, tt.want.Config.RPDisplayName, got.Config.RPDisplayName)
|
|
assert.Equal(t, tt.want.Config.RPID, got.Config.RPID)
|
|
assert.Equal(t, tt.want.Config.RPOrigins, got.Config.RPOrigins)
|
|
}
|
|
})
|
|
}
|
|
}
|