https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42719

--- Comment #27 from Lucas Gass (lukeg) <[email protected]> ---
Created attachment 206824
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=206824&action=edit
Bug 42719: [26.05.x] Add regression tests

Add tests for the OAuth/OIDC login endpoint covering:
- IdP-initiated flow (no CGISESSID cookie on initial request)
- Callback without CGISESSID cookie (session lost)
- Normal SP-initiated flow (cookie present)

Tests create a real identity provider in the database and assert:
- Initial request without cookie redirects to the IdP authorize URL
- A CGISESSID cookie is set for the new session
- Callback without cookie returns wrong_csrf_token error (not 500)
- Normal flow with cookie redirects to IdP as expected

Signed-off-by: Tomas Cohen Arazi <[email protected]>
(cherry picked from commit 4d7869ccb1155cda2be2f0b09933528de2dd9a85)

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list -- [email protected]
To unsubscribe send an email to [email protected]
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to