feat/Update_Controllers_to_Allow_for_Premium_Membership
This commit is contained in:
@@ -190,7 +190,7 @@ public sealed class SessionsControllerTests
|
||||
// Can't revoke someone else's session.
|
||||
var forbidden = await controller.Revoke("sid-not-mine", CancellationToken.None);
|
||||
Assert.IsType<NotFoundResult>(forbidden);
|
||||
Assert.True(await LocalSessionValidator.IsValidAsync(db, PrincipalWithSid("sid-not-mine"), DateTimeOffset.UtcNow));
|
||||
Assert.True(await LocalSessionValidator.IsValidAsync(db, PrincipalWithSid("sid-not-mine", "user-2"), DateTimeOffset.UtcNow));
|
||||
|
||||
// Revoking your own session actually blocks it going forward.
|
||||
Assert.True(await LocalSessionValidator.IsValidAsync(db, PrincipalWithSid("sid-mine"), DateTimeOffset.UtcNow));
|
||||
@@ -215,7 +215,7 @@ public sealed class SessionsControllerTests
|
||||
Assert.True(await LocalSessionValidator.IsValidAsync(db, PrincipalWithSid("sid-current"), DateTimeOffset.UtcNow));
|
||||
Assert.False(await LocalSessionValidator.IsValidAsync(db, PrincipalWithSid("sid-other-device"), DateTimeOffset.UtcNow));
|
||||
// Untouched: revoke-others must never reach across users.
|
||||
Assert.True(await LocalSessionValidator.IsValidAsync(db, PrincipalWithSid("sid-not-mine"), DateTimeOffset.UtcNow));
|
||||
Assert.True(await LocalSessionValidator.IsValidAsync(db, PrincipalWithSid("sid-not-mine", "user-2"), DateTimeOffset.UtcNow));
|
||||
}
|
||||
|
||||
[Fact]
|
||||
@@ -237,6 +237,6 @@ public sealed class SessionsControllerTests
|
||||
Assert.False(await LocalSessionValidator.IsValidAsync(db, principal, DateTimeOffset.UtcNow));
|
||||
}
|
||||
|
||||
private static ClaimsPrincipal PrincipalWithSid(string sid) =>
|
||||
new(new ClaimsIdentity(new[] { new Claim("sid", sid) }, "local"));
|
||||
private static ClaimsPrincipal PrincipalWithSid(string sid, string userId = "user-1") =>
|
||||
new(new ClaimsIdentity(new[] { new Claim("sid", sid), new Claim(ClaimTypes.NameIdentifier, userId) }, "local"));
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user