local-it/mitgliederverwaltung
2
3
Fork 0
Code Issues 54 Pull requests 1 Projects 1 Releases 3 Packages 1 Activity Actions

harden env handling (#481)
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse source 
Reviewed-on: #481
Co-authored-by: Simon <s.thiessen@local-it.org>
Co-committed-by: Simon <s.thiessen@local-it.org>
This commit is contained in:
Simon 2026-04-08 10:40:22 +02:00 • committed by simon
parent bac488b47c
commit c48ac2f432
9 changed files with 207 additions and 55 deletions
Download patch file Download diff file Expand all files Collapse all files

9
test/mv_web/controllers/auth_controller_test.exs
View file

@ -333,9 +333,11 @@ defmodule MvWeb.AuthControllerTest do
# When OIDC-only is enabled, password sign-in must not succeed (no redirect to sign_in_with_token).
case result do
{:error, {:redirect, %{to: to}}} ->
refute to =~ "sign_in_with_token",
"Expected password sign-in to be rejected when OIDC-only, got redirect to: #{to}"
{:error, {:redirect, opts}} when is_map(opts) ->
to_path = Map.get(opts, :to) || Map.get(opts, "to") || ""
refute to_path =~ "sign_in_with_token",
"Expected password sign-in to be rejected when OIDC-only, got redirect to: #{to_path}"
_ ->
# LiveView re-rendered (e.g. with flash error) instead of redirecting to success
@ -426,6 +428,7 @@ defmodule MvWeb.AuthControllerTest do
oidc_client_secret: settings.oidc_client_secret
}
# Set OIDC-only but leave OIDC unconfigured so the plug does not redirect.
{:ok, _} =
Membership.update_settings(settings, %{
oidc_only: true,