mirror of
https://github.com/go-gitea/gitea.git
synced 2025-12-12 08:29:31 +01:00
23fd5f9e72
When authentication is handled externally by a reverse proxy or SSO provider, users can be redirected to an external logout URL or relative path defined on the reverse proxy to fully logout.
66 lines
1.7 KiB
Go
66 lines
1.7 KiB
Go
// Copyright 2017 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package integration
|
|
|
|
import (
|
|
"net/http"
|
|
"testing"
|
|
|
|
"code.gitea.io/gitea/modules/setting"
|
|
"code.gitea.io/gitea/modules/test"
|
|
"code.gitea.io/gitea/tests"
|
|
)
|
|
|
|
func TestSignOut_Post(t *testing.T) {
|
|
defer tests.PrepareTestEnv(t)()
|
|
|
|
session := loginUser(t, "user2")
|
|
|
|
req := NewRequest(t, "POST", "/user/logout")
|
|
session.MakeRequest(t, req, http.StatusOK)
|
|
|
|
// try to view a private repo, should fail
|
|
req = NewRequest(t, "GET", "/user2/repo2")
|
|
session.MakeRequest(t, req, http.StatusNotFound)
|
|
}
|
|
|
|
func TestSignOut_Get(t *testing.T) {
|
|
defer tests.PrepareTestEnv(t)()
|
|
|
|
session := loginUser(t, "user2")
|
|
|
|
req := NewRequest(t, "GET", "/user/logout")
|
|
resp := session.MakeRequest(t, req, http.StatusSeeOther)
|
|
|
|
location := resp.Header().Get("Location")
|
|
if location != "/" {
|
|
t.Fatalf("expected redirect Location to '/', got %q", location)
|
|
}
|
|
|
|
// try to view a private repo, should fail
|
|
req = NewRequest(t, "GET", "/user2/repo2")
|
|
session.MakeRequest(t, req, http.StatusNotFound)
|
|
}
|
|
|
|
func TestSignOut_ReverseProxyLogoutRedirect(t *testing.T) {
|
|
defer tests.PrepareTestEnv(t)()
|
|
|
|
defer test.MockVariableValue(&setting.ReverseProxyLogoutRedirect, "/mellon/logout?ReturnTo=/")()
|
|
|
|
session := loginUser(t, "user2")
|
|
|
|
req := NewRequest(t, "GET", "/user/logout")
|
|
resp := session.MakeRequest(t, req, http.StatusSeeOther)
|
|
|
|
expected := "/mellon/logout?ReturnTo=/"
|
|
loc := resp.Header().Get("Location")
|
|
if loc != expected {
|
|
t.Fatalf("expected redirect to %q, got %q", expected, loc)
|
|
}
|
|
|
|
// try to view a private repo, should fail
|
|
req = NewRequest(t, "GET", "/user2/repo2")
|
|
session.MakeRequest(t, req, http.StatusNotFound)
|
|
}
|