mirror of
https://github.com/kernelkit/infix.git
synced 2026-07-31 13:03:02 +02:00
Verify: - Unauthenticated GET / -> 303 to /login - Bad-password rejection -> no session is created - Session cookie is flagged HttpOnly - Authenticated GET /interfaces -> 200 - with htmx-config meta tag check - State-changing POST without CSRF token -> 403 - POST with X-CSRF-Token header -> succeeds - After logout the session no longer grants access The cookie-preserving WebUI helper class also folds in the IPv6 link-local zone-id workaround (re-encode %25 back to %) that infamy.restconf already uses. Signed-off-by: Mattias Walström <lazzer@gmail.com>
:testgroup: == Services Tests verifying network services configuration and operation: - mDNS (Multicast DNS) service enable/disable functionality - mDNS interface allow/deny access control - LLDP (Link Layer Discovery Protocol) service control - LLDP per-interface administrative status configuration - LLDP IEEE group address forwarding behavior - SSH server configuration and access control - SSH public key authentication mechanisms include::mdns/mdns_enable_disable/Readme.adoc[] <<< include::mdns/mdns_allow_deny/Readme.adoc[] <<< include::lldp/lldp_enable_disable/Readme.adoc[] <<< include::lldp/lldp_admin_status/Readme.adoc[] <<< include::lldp/lldp_ieee_group_forward/Readme.adoc[] <<< include::ssh/ssh_server_config/Readme.adoc[] <<< include::ssh/ssh_key_authentication/Readme.adoc[]