amadan

oficina / home Public

Verify OAuth continuation in assertion freshness cases

Paul Campbell pushed by paul@keymail.dev 9a4dcd71ea852a0cc0843d260f22eb3a0d43f1b4 parent 0fd8a85
1 file changed, +4 −2
  • internal/home/assertion_fresh_test.go +4 −2

CI passed — run details

Intent

full ledger: fix-keymail-oauth-continuation

diff --git a/internal/home/assertion_fresh_test.go b/internal/home/assertion_fresh_test.go
index 4be5d9c..3f789c1 100644
--- a/internal/home/assertion_fresh_test.go
+++ b/internal/home/assertion_fresh_test.go
@@ -127,9 +127,11 @@ func TestOrdinaryIntentKeepsKeymailAndInvalidIntentCannotRequestFreshness(t *tes
intent.Value = base64.RawURLEncoding.EncodeToString(sealed)
}
r := exchangeRequest(p.credential.App, "POST", Origin+"/signin", Origin, url.Values{"address": {sealtest.CanaryAddress}}, cookies...)
- if r.Code != 303 || r.Header().Get("Location") == "/signin/sent" {
- t.Fatal("ordinary or invalid intent forced mail", r.Code)
+ _, links := continuationTargets(t, r.Body.String())
+ if len(links) != 1 || !strings.Contains(links[0], "/oauth/authorize?") {
+ t.Fatal("ordinary or invalid intent lost Keymail continuation", r.Code)
}
+ assertContinuationPage(t, r, links[0])
})
}
}