mirror of
https://github.com/octoleo/syncthing.git
synced 2024-11-13 00:36:28 +00:00
b2fb2ef276
This allows a syncthing instance to be locked to exactly 1 user without needing search capability on the LDAP instance.
68 lines
1.5 KiB
Go
68 lines
1.5 KiB
Go
// Copyright (C) 2014 The Syncthing Authors.
|
|
//
|
|
// This Source Code Form is subject to the terms of the Mozilla Public
|
|
// License, v. 2.0. If a copy of the MPL was not distributed with this file,
|
|
// You can obtain one at https://mozilla.org/MPL/2.0/.
|
|
|
|
package api
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/syncthing/syncthing/lib/config"
|
|
)
|
|
|
|
var guiCfg config.GUIConfiguration
|
|
|
|
func init() {
|
|
guiCfg.User = "user"
|
|
guiCfg.HashAndSetPassword("pass")
|
|
}
|
|
|
|
func TestStaticAuthOK(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
ok := authStatic("user", "pass", guiCfg)
|
|
if !ok {
|
|
t.Fatalf("should pass auth")
|
|
}
|
|
}
|
|
|
|
func TestSimpleAuthUsernameFail(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
ok := authStatic("userWRONG", "pass", guiCfg)
|
|
if ok {
|
|
t.Fatalf("should fail auth")
|
|
}
|
|
}
|
|
|
|
func TestStaticAuthPasswordFail(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
ok := authStatic("user", "passWRONG", guiCfg)
|
|
if ok {
|
|
t.Fatalf("should fail auth")
|
|
}
|
|
}
|
|
|
|
func TestAuthLDAPSendsCorrectBindDNWithTemplate(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
templatedDn := ldapTemplateBindDN("cn=%s,dc=some,dc=example,dc=com", "username")
|
|
expectedDn := "cn=username,dc=some,dc=example,dc=com"
|
|
if expectedDn != templatedDn {
|
|
t.Fatalf("ldapTemplateBindDN should be %s != %s", expectedDn, templatedDn)
|
|
}
|
|
}
|
|
|
|
func TestAuthLDAPSendsCorrectBindDNWithNoTemplate(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
templatedDn := ldapTemplateBindDN("cn=fixedusername,dc=some,dc=example,dc=com", "username")
|
|
expectedDn := "cn=fixedusername,dc=some,dc=example,dc=com"
|
|
if expectedDn != templatedDn {
|
|
t.Fatalf("ldapTemplateBindDN should be %s != %s", expectedDn, templatedDn)
|
|
}
|
|
}
|