Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use a cookie to prevent FormFlow journey theft #1268

Merged
merged 1 commit into from
Apr 9, 2024

Use a cookie to prevent FormFlow journey theft

cb7891c
Select commit
Loading
Failed to load commit list.
Sign in for the full log view
Merged

Use a cookie to prevent FormFlow journey theft #1268

Use a cookie to prevent FormFlow journey theft
cb7891c
Select commit
Loading
Failed to load commit list.
GitHub Actions / Authorize access test results succeeded Apr 9, 2024 in 0s

72 passed, 0 failed and 0 skipped

Tests passed successfully

✅ TeachingRecordSystem/tests/TeachingRecordSystem.AuthorizeAccess.Tests/TestResults/_fv-az1198-456_2024-04-09_15_38_27.trx

72 tests were completed in 9s with 72 passed, 0 failed and 0 skipped.

Test suite Passed Failed Skipped Time
TeachingRecordSystem.AuthorizeAccess.Tests.PageTests.CheckAnswersTests 12✅ 3s
TeachingRecordSystem.AuthorizeAccess.Tests.PageTests.ConnectTests 8✅ 2s
TeachingRecordSystem.AuthorizeAccess.Tests.PageTests.FoundTests 4✅ 2s
TeachingRecordSystem.AuthorizeAccess.Tests.PageTests.NationalInsuranceNumberTests 14✅ 4s
TeachingRecordSystem.AuthorizeAccess.Tests.PageTests.NotFoundTests 6✅ 2s
TeachingRecordSystem.AuthorizeAccess.Tests.PageTests.NotVerifiedTests 3✅ 697ms
TeachingRecordSystem.AuthorizeAccess.Tests.PageTests.TrnTests 16✅ 5s
TeachingRecordSystem.AuthorizeAccess.Tests.SignInJourneyHelperTests 9✅ 4s

✅ TeachingRecordSystem.AuthorizeAccess.Tests.PageTests.CheckAnswersTests

✅ Get_AlreadyAuthenticated_RedirectsToStateRedirectUri
✅ Get_NationalInsuranceNumberNotSpecified_RedirectsToNationalInsuranceNumberPage
✅ Get_NotAuthenticatedWithOneLogin_ReturnsBadRequest
✅ Get_NotVerifiedWithOneLogin_ReturnsBadRequest
✅ Get_TrnNotSpecified_RedirectsToTrnPage
✅ Get_ValidRequest_RendersExpectedContent
✅ Post_AlreadyAuthenticated_RedirectsToStateRedirectUri
✅ Post_NationalInsuranceNumberNotSpecified_RedirectsToNationalInsuranceNumberPage
✅ Post_NotAuthenticatedWithOneLogin_ReturnsBadRequest
✅ Post_NotVerifiedWithOneLogin_ReturnsBadRequest
✅ Post_TrnNotSpecified_RedirectsToTrnPage
✅ Post_ValidRequests_RedirectsToNotFoundPage

✅ TeachingRecordSystem.AuthorizeAccess.Tests.PageTests.ConnectTests

✅ Get_AlreadyAuthenticated_RedirectsToStateRedirectUri
✅ Get_NotAuthenticatedWithOneLogin_ReturnsBadRequest
✅ Get_NotVerifiedWithOneLogin_ReturnsBadRequest
✅ Get_ValidRequest_RendersExpectedContent
✅ Post_AlreadyAuthenticated_RedirectsToStateRedirectUri
✅ Post_NotAuthenticatedWithOneLogin_ReturnsBadRequest
✅ Post_NotVerifiedWithOneLogin_ReturnsBadRequest
✅ Post_ValidRequest_RedirectsToStartOfMatchingJourney

✅ TeachingRecordSystem.AuthorizeAccess.Tests.PageTests.FoundTests

✅ Get_NotAuthenticated_RedirectsToStartOfMatchingJourney
✅ Get_ValidRequest_RendersExpectedContent
✅ Post_NotAuthenticated_RedirectsToStartOfMatchingJourney
✅ Post_ValidRequest_RedirectsToStateRedirectUri

✅ TeachingRecordSystem.AuthorizeAccess.Tests.PageTests.NationalInsuranceNumberTests

✅ Get_AlreadyAuthenticated_RedirectsToStateRedirectUri
✅ Get_NotAuthenticatedWithOneLogin_ReturnsBadRequest
✅ Get_NotVerifiedWithOneLogin_ReturnsBadRequest
✅ Get_ValidRequest_RendersExpectedContent(haveExistingValueInState: False)
✅ Get_ValidRequest_RendersExpectedContent(haveExistingValueInState: True)
✅ Post_AlreadyAuthenticated_RedirectsToStateRedirectUri
✅ Post_EmptyNationalInsuranceNumber_RendersError
✅ Post_HaveNationalInsuranceNumberNotAnswered_RendersError
✅ Post_InvalidNationalInsuranceNumber_RendersError
✅ Post_NoNationalInsuranceNumberSpecified_UpdatesStateAndRedirectsToTrnPage
✅ Post_NotAuthenticatedWithOneLogin_ReturnsBadRequest
✅ Post_NotVerifiedWithOneLogin_ReturnsBadRequest
✅ Post_ValidNationalInsuranceNumberAndLookupSucceeded_UpdatesStateUpdatesOneLoginUserCompletesAuthenticationAndRedirectsToFoundPage
✅ Post_ValidNationalInsuranceNumberButLookupFailed_UpdatesStateAndRedirectsToTrnPage

✅ TeachingRecordSystem.AuthorizeAccess.Tests.PageTests.NotFoundTests

✅ Get_AlreadyAuthenticated_RedirectsToStateRedirectUri
✅ Get_NationalInsuranceNumberNotSpecified_RedirectsToNationalInsuranceNumberPage
✅ Get_NotAuthenticatedWithOneLogin_ReturnsBadRequest
✅ Get_NotVerifiedWithOneLogin_ReturnsBadRequest
✅ Get_TrnNotSpecified_RedirectsToTrnPage
✅ Get_ValidRequest_RendersExpectedContent

✅ TeachingRecordSystem.AuthorizeAccess.Tests.PageTests.NotVerifiedTests

✅ Get_NotAuthenticatedWithOneLogin_ReturnsBadRequest
✅ Get_ValidRequest_ReturnsExpectedContent
✅ Get_VerifiedWithOneLogin_ReturnsBadRequest

✅ TeachingRecordSystem.AuthorizeAccess.Tests.PageTests.TrnTests

✅ Get_AlreadyAuthenticated_RedirectsToStateRedirectUri
✅ Get_NationalInsuranceNumberNotSpecified_RedirectsToNationalInsuranceNumberPage
✅ Get_NotAuthenticatedWithOneLogin_ReturnsBadRequest
✅ Get_NotVerifiedWithOneLogin_ReturnsBadRequest
✅ Get_ValidRequest_RendersExpectedContent(haveExistingValueInState: False)
✅ Get_ValidRequest_RendersExpectedContent(haveExistingValueInState: True)
✅ Post_AlreadyAuthenticated_RedirectsToStateRedirectUri
✅ Post_EmptyTrn_RendersError
✅ Post_HaveTrnNotAnswered_RendersError
✅ Post_InvalidTrn_RendersError
✅ Post_NationalInsuranceNumberNotSpecified_RedirectsToNationalInsuranceNumberPage
✅ Post_NotAuthenticatedWithOneLogin_ReturnsBadRequest
✅ Post_NoTrnSpecified_UpdatesStateAndRedirectsToCheckAnswersPage
✅ Post_NotVerifiedWithOneLogin_ReturnsBadRequest
✅ Post_ValidTrnAndLookupSucceeded_UpdatesStateUpdatesOneLoginUserCompletesAuthenticationAndRedirectsToFoundPage
✅ Post_ValidTrnButLookupFailed_UpdatesStateAndRedirectsToCheckAnswersPage

✅ TeachingRecordSystem.AuthorizeAccess.Tests.SignInJourneyHelperTests

✅ OnSignedInWithOneLogin_AuthenticationAndVerification_VerificationFailed_RedirectsToErrorPage
✅ OnSignedInWithOneLogin_AuthenticationAndVerification_VerificationSucceeded_RedirectsToStartOfMatchingJourney
✅ OnSignedInWithOneLogin_AuthenticationOnly_UserAlreadyExistsAndTeachingRecordKnown_CompletesJourney
✅ OnSignedInWithOneLogin_AuthenticationOnly_UserAlreadyExistsButTeachingNotRecordKnown_RequestsIdentityVerification
✅ OnSignedInWithOneLogin_AuthenticationOnly_UserDoesNotExist_RequestsIdentityVerification
✅ TryMatchToTeachingRecord_MatchesMultipleResults_ReturnsFalseAndDoesNotSetAuthenticationTicket
✅ TryMatchToTeachingRecord_MatchesSingleResult_ReturnsTrueAndUpdatesOneLoginUserAssignsAuthenticationTicket
✅ TryMatchToTeachingRecord_MatchesSingleResultWithoutTrn_ReturnsFalseAndDoesNotSetAuthenticationTicket
✅ TryMatchToTeachingRecord_MatchesZeroResults_ReturnsFalseAndDoesNotSetAuthenticationTicket