diff options
author | GitLab Bot <gitlab-bot@gitlab.com> | 2020-07-20 12:26:25 +0000 |
---|---|---|
committer | GitLab Bot <gitlab-bot@gitlab.com> | 2020-07-20 12:26:25 +0000 |
commit | a09983ae35713f5a2bbb100981116d31ce99826e (patch) | |
tree | 2ee2af7bd104d57086db360a7e6d8c9d5d43667a /spec/requests/openid_connect_spec.rb | |
parent | 18c5ab32b738c0b6ecb4d0df3994000482f34bd8 (diff) | |
download | gitlab-ce-a09983ae35713f5a2bbb100981116d31ce99826e.tar.gz |
Add latest changes from gitlab-org/gitlab@13-2-stable-ee
Diffstat (limited to 'spec/requests/openid_connect_spec.rb')
-rw-r--r-- | spec/requests/openid_connect_spec.rb | 27 |
1 files changed, 25 insertions, 2 deletions
diff --git a/spec/requests/openid_connect_spec.rb b/spec/requests/openid_connect_spec.rb index 785ab98a3d0..7b682d76150 100644 --- a/spec/requests/openid_connect_spec.rb +++ b/spec/requests/openid_connect_spec.rb @@ -2,7 +2,7 @@ require 'spec_helper' -describe 'OpenID Connect requests' do +RSpec.describe 'OpenID Connect requests' do let(:user) do create( :user, @@ -146,8 +146,16 @@ describe 'OpenID Connect requests' do expect(@payload['auth_time']).to eq user.current_sign_in_at.to_i end + it 'has public email in email claim' do + expect(@payload['email']).to eq(user.public_email) + end + + it 'has true in email_verified claim' do + expect(@payload['email_verified']).to eq(true) + end + it 'does not include any unknown properties' do - expect(@payload.keys).to eq %w[iss sub aud exp iat auth_time sub_legacy] + expect(@payload.keys).to eq %w[iss sub aud exp iat auth_time sub_legacy email email_verified] end end @@ -211,5 +219,20 @@ describe 'OpenID Connect requests' do expect(json_response['email_verified']).to eq(true) end end + + context 'ID token payload' do + before do + request_access_token! + @payload = JSON::JWT.decode(json_response['id_token'], :skip_verification) + end + + it 'has private email in email claim' do + expect(@payload['email']).to eq(user.email) + end + + it 'has true in email_verified claim' do + expect(@payload['email_verified']).to eq(true) + end + end end end |