mirror of
https://github.com/wahyd4/gitlabhq.git
synced 2026-08-15 15:46:08 +10:00
Robert SpeicherandRobert Speicher
4a7ba5114d
Disable the unlink feature for SAML connected accounts (social login). This disables the ability to manually unlink your SAML account, if you have one connected. In certain scenarios, the only allowed login mechanism can be SAML, and if you unlink your account you will be locked out of the system (configuration dependent). Fixes #18613 See merge request !4662
27 lines
712 B
Ruby
27 lines
712 B
Ruby
require 'spec_helper'
|
|
|
|
describe Profiles::AccountsController do
|
|
|
|
let(:user) { create(:omniauth_user, provider: 'saml') }
|
|
|
|
before do
|
|
sign_in(user)
|
|
end
|
|
|
|
it 'does not allow to unlink SAML connected account' do
|
|
identity = user.identities.last
|
|
delete :unlink, provider: 'saml'
|
|
updated_user = User.find(user.id)
|
|
|
|
expect(response.status).to eq(302)
|
|
expect(updated_user.identities.size).to eq(1)
|
|
expect(updated_user.identities).to include(identity)
|
|
end
|
|
|
|
it 'does allow to delete other linked accounts' do
|
|
user.identities.create(provider: 'twitter', extern_uid: 'twitter_123')
|
|
|
|
expect { delete :unlink, provider: 'twitter' }.to change(Identity.all, :size).by(-1)
|
|
end
|
|
end
|