openproject

mirror of https://github.com/opf/openproject.git synced 2026-06-14 03:30:14 +00:00

Files

T

Jan Sandbrink 2cba22d34e Fix direct login for unauthenticated requests to OAuth authorize

This triggered a "cross reaction" of sorts.

bbd4cad40 tried to fix a redirect loop by checking for the presence of
content in `flash` (assuming that this meant the presence of a text message
to be shown to the user).

0fa8b4a77 used the flash storage to forward CSP extensions so they are usable
for exactly one follow-up request. While this is an allowed usage of `flash`,
it was sufficiently far away from what it's usually used for that it threw over
expectations of the former change and consequently led to breaking the direct login
workflow.

The specs were not working as intended, because the settings-update of with_config was
effectively undone by also using with_settings in the same spec.

2026-05-04 15:42:17 +02:00

auth_source_sso_login_spec.rb

Fix some more tests && render the revit add-in entry normally via the menu initializer and only toggle the visibility via JS

2025-07-24 11:30:07 +02:00

auth_source_sso_logout_spec.rb

Freeze string literals in specs

2025-05-05 09:29:55 +02:00

auth_stages_spec.rb

Fix tests

2025-11-26 16:29:25 +01:00

consent_auth_stage_spec.rb

Fix tests