mirror of
https://github.com/we-promise/sure.git
synced 2026-04-08 06:44:52 +00:00
14993d871c
Multi-provider SSO support: - Database-backed SSO provider management with admin UI - Support for OpenID Connect, Google OAuth2, GitHub, and SAML 2.0 - Flipper feature flag (db_sso_providers) for dynamic provider loading - ProviderLoader service for YAML or database configuration Admin functionality: - Admin::SsoProvidersController for CRUD operations - Admin::UsersController for super_admin role management - Pundit policies for authorization - Test connection endpoint for validating provider config User provisioning improvements: - JIT (just-in-time) account creation with configurable default role - Changed default JIT role from admin to member (security) - User attribute sync on each SSO login - Group/role mapping from IdP claims SSO identity management: - Settings::SsoIdentitiesController for users to manage connected accounts - Issuer validation for OIDC identities - Unlink protection when no password set Audit logging: - SsoAuditLog model tracking login, logout, link, unlink, JIT creation - Captures IP address, user agent, and metadata Advanced OIDC features: - Custom scopes per provider - Configurable prompt parameter (login, consent, select_account, none) - RP-initiated logout (federated logout to IdP) - id_token storage for logout SAML 2.0 support: - omniauth-saml gem integration - IdP metadata URL or manual configuration - Certificate and fingerprint validation - NameID format configuration
85 lines
2.6 KiB
Ruby
85 lines
2.6 KiB
Ruby
if ENV["COVERAGE"] == "true"
|
|
require "simplecov"
|
|
SimpleCov.start "rails" do
|
|
enable_coverage :branch
|
|
end
|
|
end
|
|
|
|
require_relative "../config/environment"
|
|
|
|
ENV["RAILS_ENV"] ||= "test"
|
|
|
|
# Set Plaid to sandbox mode for tests
|
|
ENV["PLAID_ENV"] = "sandbox"
|
|
ENV["PLAID_CLIENT_ID"] ||= "test_client_id"
|
|
ENV["PLAID_SECRET"] ||= "test_secret"
|
|
|
|
# Fixes Segfaults on M1 Macs when running tests in parallel (temporary workaround)
|
|
ENV["PGGSSENCMODE"] = "disable"
|
|
|
|
require "rails/test_help"
|
|
require "minitest/mock"
|
|
require "minitest/autorun"
|
|
require "mocha/minitest"
|
|
require "aasm/minitest"
|
|
require "webmock/minitest"
|
|
|
|
VCR.configure do |config|
|
|
config.cassette_library_dir = "test/vcr_cassettes"
|
|
config.hook_into :webmock
|
|
config.ignore_localhost = true
|
|
config.default_cassette_options = { erb: true }
|
|
config.filter_sensitive_data("<OPENAI_ACCESS_TOKEN>") { ENV["OPENAI_ACCESS_TOKEN"] }
|
|
config.filter_sensitive_data("<OPENAI_ORGANIZATION_ID>") { ENV["OPENAI_ORGANIZATION_ID"] }
|
|
config.filter_sensitive_data("<STRIPE_SECRET_KEY>") { ENV["STRIPE_SECRET_KEY"] }
|
|
config.filter_sensitive_data("<STRIPE_WEBHOOK_SECRET>") { ENV["STRIPE_WEBHOOK_SECRET"] }
|
|
config.filter_sensitive_data("<PLAID_CLIENT_ID>") { ENV["PLAID_CLIENT_ID"] }
|
|
config.filter_sensitive_data("<PLAID_SECRET>") { ENV["PLAID_SECRET"] }
|
|
end
|
|
|
|
# Configure OmniAuth for testing
|
|
OmniAuth.config.test_mode = true
|
|
# Allow both GET and POST for OIDC callbacks in tests
|
|
OmniAuth.config.allowed_request_methods = [ :get, :post ]
|
|
|
|
module ActiveSupport
|
|
class TestCase
|
|
# Run tests in parallel with specified workers
|
|
parallelize(workers: :number_of_processors) unless ENV["DISABLE_PARALLELIZATION"] == "true"
|
|
|
|
# https://github.com/simplecov-ruby/simplecov/issues/718#issuecomment-538201587
|
|
if ENV["COVERAGE"] == "true"
|
|
parallelize_setup do |worker|
|
|
SimpleCov.command_name "#{SimpleCov.command_name}-#{worker}"
|
|
end
|
|
|
|
parallelize_teardown do |worker|
|
|
SimpleCov.result
|
|
end
|
|
end
|
|
|
|
# Setup all fixtures in test/fixtures/*.yml for all tests in alphabetical order.
|
|
fixtures :all
|
|
|
|
# Add more helper methods to be used by all tests here...
|
|
def sign_in(user)
|
|
post sessions_path, params: { email: user.email, password: user_password_test }
|
|
end
|
|
|
|
def with_env_overrides(overrides = {}, &block)
|
|
ClimateControl.modify(**overrides, &block)
|
|
end
|
|
|
|
def with_self_hosting
|
|
Rails.configuration.stubs(:app_mode).returns("self_hosted".inquiry)
|
|
yield
|
|
end
|
|
|
|
def user_password_test
|
|
"maybetestpassword817983172"
|
|
end
|
|
end
|
|
end
|
|
|
|
Dir[Rails.root.join("test", "interfaces", "**", "*.rb")].each { |f| require f }
|