Files
orbit/internal/config/console_login_test.go

31 lines
1.2 KiB
Go

package config
import (
"testing"
"time"
)
func TestConsoleLoginConfiguration(t *testing.T) {
p, err := loginPolicyFromEnv(func(string) string { return "" })
if err != nil || p.FailureLimit != 5 || p.LockDuration != 15*time.Minute || p.AuditDays != 90 {
t.Fatalf("defaults: %+v %v", p, err)
}
env := map[string]string{"ORBIT_CONSOLE_LOGIN_FAILURE_LIMIT": "3", "ORBIT_CONSOLE_LOGIN_LOCK_DURATION": "20m", "ORBIT_CONSOLE_TRUSTED_PROXIES": "127.0.0.1/32, ::1/128"}
p, err = loginPolicyFromEnv(func(k string) string { return env[k] })
if err != nil || p.FailureLimit != 3 || len(p.TrustedProxies) != 2 {
t.Fatalf("configured: %+v %v", p, err)
}
for k, v := range map[string]string{"ORBIT_CONSOLE_LOGIN_FAILURE_LIMIT": "0", "ORBIT_CONSOLE_LOGIN_ACCOUNT_LIMIT": "-1", "ORBIT_CONSOLE_LOGIN_IP_LIMIT": "10001", "ORBIT_CONSOLE_LOGIN_FAILURE_WINDOW": "0s", "ORBIT_CONSOLE_LOGIN_LOCK_DURATION": "25h", "ORBIT_CONSOLE_LOGIN_RATE_WINDOW": "bad", "ORBIT_CONSOLE_LOGIN_AUDIT_DAYS": "0", "ORBIT_CONSOLE_TRUSTED_PROXIES": "all"} {
t.Run(k, func(t *testing.T) {
if _, err := loginPolicyFromEnv(func(name string) string {
if name == k {
return v
}
return ""
}); err == nil {
t.Fatal("invalid policy accepted")
}
})
}
}