libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases Packages Activity Actions

Using "Account is disabled" message (and also added new test case)

Browse source
This commit is contained in:
Daniele Martinoli 2023-07-07 15:27:16 +02:00 committed by Pedro Igor
parent f06d7f8eb6
commit 7b8dcb42ea
2 changed files with 20 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
services/src/main/java/org/keycloak/services/resources/LoginActionsServiceChecks.java
View file

@ -153,7 +153,7 @@ public class LoginActionsServiceChecks {
}
if (! user.isEnabled()) {
throw new ExplainedVerificationException(Errors.USER_DISABLED, Messages.INVALID_USER);
throw new ExplainedVerificationException(Errors.USER_DISABLED, Messages.ACCOUNT_DISABLED);
}
if (userSetter != null) {

19
testsuite/integration-arquillian/tests/base/src/test/java/org/keycloak/testsuite/forms/ResetPasswordTest.java
View file

@ -958,6 +958,25 @@ public class ResetPasswordTest extends AbstractTestRealmKeycloakTest {
events.expectLogin().user(userId).detail(Details.USERNAME, "login-test").assertEvent();
}
@Test
public void resetPasswordBeforeUserIsDisabled() throws IOException, MessagingException {
initiateResetPasswordFromResetPasswordPage("login-test");
assertEquals(1, greenMail.getReceivedMessages().length);
MimeMessage message = greenMail.getReceivedMessages()[0];
String changePasswordUrl = MailUtils.getPasswordResetEmailLink(message);
events.expectRequiredAction(EventType.SEND_RESET_PASSWORD).session((String)null).user(userId).detail(Details.USERNAME, "login-test").detail(Details.EMAIL, "login@test.com").assertEvent();
UserRepresentation user = findUser("login-test");
user.setEnabled(false);
updateUser(user);
driver.navigate().to(changePasswordUrl.trim());
errorPage.assertCurrent();
assertEquals("Account is disabled, contact your administrator.", errorPage.getError());
}
@Test
public void resetPasswordWithPasswordHistoryPolicy() throws IOException, MessagingException {
//Block passwords that are equal to previous passwords. Default value is 3.