coulomb/coulomb-social
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Complete identity smoke path: id_token claims, registration entry, cutover docs

Browse source 
Prefer verified KeyCape id_token claims when /userinfo returns 401; soft-fail
userinfo. Add CSOC-WP-0003 registration entry (disabled until NetKingdom URL),
AAL step-up hooks, smoke/cutover evidence for tegwick OIDC without MFA.
This commit is contained in:
tegwick 2026-08-09 22:42:51 +02:00
parent 3bc16b581b
commit 29a9ff735e
14 changed files with 513 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

10
tests/test_shell.py
View file

@ -20,6 +20,16 @@ def test_landing_public(client):
assert b"Sign in" in r.content
@pytest.mark.django_db
def test_registration_link_uses_only_configured_destination(client, settings):
settings.NETKINGDOM_REGISTRATION_URL = (
"https://users.coulomb.social/register?client_id=coulomb-social"
)
r = client.get(reverse("identity:register") + "?next=https://evil.example")
assert r.status_code == 302
assert r["Location"] == settings.NETKINGDOM_REGISTRATION_URL
@pytest.mark.django_db
def test_app_home_requires_login(client):
r = client.get(reverse("core:app_home"))