791cc9138b
- To hold registrations from U2F devices, and to authenticate them.
- Previously, `User#two_factor_enabled` was aliased to the
`otp_required_for_login` column on `users`.
- This commit changes things a bit:
- `User#two_factor_enabled` is not a method anymore
- `User#two_factor_enabled?` checks both the
`otp_required_for_login` column, as well as `U2fRegistration`s
- Change all instances of `User#two_factor_enabled` to
`User#two_factor_enabled?`
- Add the `u2f` gem, and implement registration/authentication at the
model level.
55 lines
1.3 KiB
Ruby
55 lines
1.3 KiB
Ruby
FactoryGirl.define do
|
|
sequence(:name) { FFaker::Name.name }
|
|
|
|
factory :user, aliases: [:author, :assignee, :recipient, :owner, :creator, :resource_owner] do
|
|
email { FFaker::Internet.email }
|
|
name
|
|
sequence(:username) { |n| "#{FFaker::Internet.user_name}#{n}" }
|
|
password "12345678"
|
|
confirmed_at { Time.now }
|
|
confirmation_token { nil }
|
|
can_create_group true
|
|
|
|
trait :admin do
|
|
admin true
|
|
end
|
|
|
|
trait :two_factor do
|
|
two_factor_via_otp
|
|
end
|
|
|
|
trait :two_factor_via_otp do
|
|
before(:create) do |user|
|
|
user.otp_required_for_login = true
|
|
user.otp_secret = User.generate_otp_secret(32)
|
|
user.otp_grace_period_started_at = Time.now
|
|
user.generate_otp_backup_codes!
|
|
end
|
|
end
|
|
|
|
trait :two_factor_via_u2f do
|
|
transient { registrations_count 5 }
|
|
|
|
after(:create) do |user, evaluator|
|
|
create_list(:u2f_registration, evaluator.registrations_count, user: user)
|
|
end
|
|
end
|
|
|
|
factory :omniauth_user do
|
|
transient do
|
|
extern_uid '123456'
|
|
provider 'ldapmain'
|
|
end
|
|
|
|
after(:create) do |user, evaluator|
|
|
user.identities << create(
|
|
:identity,
|
|
provider: evaluator.provider,
|
|
extern_uid: evaluator.extern_uid
|
|
)
|
|
end
|
|
end
|
|
|
|
factory :admin, traits: [:admin]
|
|
end
|
|
end
|