Docker/mealie
Docker/mealie
1
0
Fork 0
mirror of https://github.com/mealie-recipes/mealie.git synced 2025-08-03 04:25:24 +02:00
Code Issues Releases Activity

fix: Prevent login via credentials when Auth Method is Mealie (#4370)

Browse source
This commit is contained in:
Carter 2024-10-16 09:34:51 -05:00 • committed by GitHub
parent 03485ecc73
commit 80caa5ffaf
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
4 changed files with 47 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

23
tests/unit_tests/core/security/providers/test_credentials_provider.py Normal file
View file

@ -0,0 +1,23 @@
from mealie.core.security.providers.credentials_provider import CredentialsProvider
from mealie.db.models.users.users import AuthMethod
from mealie.schema.user.auth import CredentialsRequest
from tests.utils.fixture_schemas import TestUser
def test_login(unique_user: TestUser):
data = {"username": unique_user.username, "password": unique_user.password}
auth_provider = CredentialsProvider(unique_user.repos.session, CredentialsRequest(**data))
assert auth_provider.authenticate() is not None
def test_login_incorrect_auth_method(unique_user: TestUser):
db = unique_user.repos
user = db.users.get_by_username(unique_user.username)
user.auth_method = AuthMethod.OIDC
db.users.update(unique_user.user_id, user)
data = {"username": unique_user.username, "password": unique_user.password}
auth_provider = CredentialsProvider(db.session, CredentialsRequest(**data))
assert auth_provider.authenticate() is None