libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases 1 Packages Activity Actions

Flaky test BruteForceTest.testPermanentLockout()

Browse source 
Closes #32498

Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
This commit is contained in:
Douglas Palmer 2024-08-29 14:32:44 -07:00 committed by Alexander Schwartz
parent ecbd856176
commit 0b7ab47cf2
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
testsuite/integration-arquillian/tests/base/src/test/java/org/keycloak/testsuite/forms/BruteForceTest.java
View file

@ -558,6 +558,7 @@ public class BruteForceTest extends AbstractTestRealmKeycloakTest {
try { try {
// arrange // arrange
realm.setPermanentLockout(true); realm.setPermanentLockout(true);
realm.setQuickLoginCheckMilliSeconds(0L);
testRealm().update(realm); testRealm().update(realm);
// act // act
@ -567,7 +568,7 @@ public class BruteForceTest extends AbstractTestRealmKeycloakTest {
// As of now, there are two events: USER_DISABLED_BY_PERMANENT_LOCKOUT and LOGIN_ERROR but Order is not // As of now, there are two events: USER_DISABLED_BY_PERMANENT_LOCKOUT and LOGIN_ERROR but Order is not
// guarantee though since the brute force detector is running separately "in its own thread" named // guarantee though since the brute force detector is running separately "in its own thread" named
// "Brute Force Protector". // "Brute Force Protector".
List<EventRepresentation> actualEvents = Arrays.asList(events.poll(), events.poll(), events.poll()); List<EventRepresentation> actualEvents = Arrays.asList(events.poll(), events.poll());
assertIsContained(events.expect(EventType.USER_DISABLED_BY_PERMANENT_LOCKOUT).client((String) null).detail(Details.REASON, "brute_force_attack detected"), actualEvents); assertIsContained(events.expect(EventType.USER_DISABLED_BY_PERMANENT_LOCKOUT).client((String) null).detail(Details.REASON, "brute_force_attack detected"), actualEvents);
assertIsContained(events.expect(EventType.LOGIN_ERROR).error(Errors.INVALID_USER_CREDENTIALS), actualEvents); assertIsContained(events.expect(EventType.LOGIN_ERROR).error(Errors.INVALID_USER_CREDENTIALS), actualEvents);