Record usernames for manual provisioning requests
This commit is contained in:
@@ -142,6 +142,14 @@ describe('provisioning outcome and evidence presentation', () => {
|
||||
});
|
||||
|
||||
describe('provisioning response and return-context boundaries', () => {
|
||||
it('accepts persisted usernames and legacy details but rejects malformed requesters', () => {
|
||||
const detail = fixture();
|
||||
for (const requested_by of [undefined, null, 'alice']) {
|
||||
expect(isProvisioningDetail({ ...detail, deployment: { ...detail.deployment, requested_by } }, detail.deployment.id)).toBe(true);
|
||||
}
|
||||
expect(isProvisioningDetail({ ...detail, deployment: { ...detail.deployment, requested_by: 42 } }, detail.deployment.id)).toBe(false);
|
||||
});
|
||||
|
||||
it('retains list filters without accepting an external or unrelated return destination', () => {
|
||||
expect(provisioningReturn('/provisioning?view=history&action=restart&server=Lobby+1&limit=50&redirect=https://evil.test').href)
|
||||
.toBe('/provisioning?view=history&action=restart&server=Lobby+1&limit=50');
|
||||
|
||||
Reference in New Issue
Block a user