coulomb/key-cape
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Refuse multi-owner factors and lock ownership during recovery
All checks were successful
Authentication acceptance / acceptance (push) Successful in 1m5s
Details
Authentication acceptance / provider-contract (push) Successful in 13s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c
This commit is contained in:
tegwick 2026-09-13 21:21:24 +02:00
parent 30cd99cad1
commit 63b3070853
2 changed files with 17 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
scripts/provider-onboarding-contract.py
View file

@ -126,6 +126,14 @@ def run():
check('service_denies_'+name,status==403 and store.snapshot('alice',serial)['active'])
status,_=operation(dict(preview_body,user='missing-fixture-user'))
check('service_unknown_user_not_realm_wide',status==409 and store.snapshot('alice',serial)['active'])
from privacyidea.models import TokenOwner
from privacyidea.lib.token import get_tokens
factor_id=get_tokens(serial=serial)[0].token.id
other_owner=TokenOwner(token_id=factor_id,user_id='second-fixture-owner',resolver='fixture-users',realmname='fixture')
other_owner.save()
status,shared=operation(preview_body)
check('shared_identity_factor_denied',status==409 and shared['failure']=='shared_factor_not_supported')
db.session.delete(other_owner);db.session.commit()
status,preview=operation(preview_body)
check('service_preview_owned_factor',status==200 and len(preview['factors'])==1)
confirmation=preview['factors'][0]['confirmation']