39 lines
1.1 KiB
Ruby
39 lines
1.1 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
require 'spec_helper'
|
|
|
|
RSpec.describe 'Session TTLs', :clean_gitlab_redis_shared_state, feature_category: :system_access do
|
|
include SessionHelpers
|
|
|
|
it 'creates a session with a short TTL when login fails' do
|
|
visit new_user_session_path
|
|
# The session key only gets created after a post
|
|
fill_in 'user_login', with: 'non-existant@gitlab.org'
|
|
fill_in 'user_password', with: '12345678'
|
|
click_button 'Sign in'
|
|
|
|
expect(page).to have_content('Invalid login or password')
|
|
|
|
expect_single_session_with_short_ttl
|
|
end
|
|
|
|
it 'increases the TTL when the login succeeds' do
|
|
user = create(:user)
|
|
gitlab_sign_in(user)
|
|
|
|
expect(page).to have_content(user.name)
|
|
|
|
expect_single_session_with_authenticated_ttl
|
|
end
|
|
|
|
context 'with an unauthorized project' do
|
|
let_it_be(:project) { create(:project, :repository) }
|
|
|
|
it 'creates a session with a short TTL' do
|
|
visit project_raw_path(project, 'master/README.md')
|
|
|
|
expect_single_session_with_short_ttl
|
|
expect(page).to have_current_path(new_user_session_path)
|
|
end
|
|
end
|
|
end
|