infix/test/case/services/webui/all.yaml at main - infix - Gitea: Git with a cup of tea

peter/infix

mirror of https://github.com/kernelkit/infix.git synced 2026-07-29 20:23:01 +02:00

Files

T

Joachim Wiberg f5c549f669 test: Add test for login flow in WebUI

Verify:

 - Unauthenticated GET /  -> 303 to /login
 - Bad-password rejection -> no session is created
 - Session cookie is flagged HttpOnly
 - Authenticated GET /interfaces -> 200
   - with htmx-config meta tag check
 - State-changing POST without CSRF token -> 403
 - POST with X-CSRF-Token header -> succeeds
 - After logout the session no longer grants access

The cookie-preserving WebUI helper class also folds in the IPv6
link-local zone-id workaround (re-encode %25 back to %) that
infamy.restconf already uses.

Signed-off-by: Mattias Walström <lazzer@gmail.com>

2026-06-15 21:02:16 +02:00

4 lines

72 B

YAML

Raw Permalink Blame History

	`---`
	`- name: Web UI Login and CSRF Protection`
	`case: login_csrf/test.py`