feat(security): wire DisableLogin flag — auto-login scheme + startup warning

2026-06-16 08:47:19 -04:00
parent 0926ce4dda
commit e89604298d
4 changed files with 78 additions and 6 deletions
@@ -0,0 +1,35 @@
+using Microsoft.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Authentication.Cookies;
+using Microsoft.Extensions.DependencyInjection;
+using ZB.MOM.WW.ScadaBridge.Security;
+using ZB.MOM.WW.ScadaBridge.Security.Auth;
+using Xunit;
+
+namespace ZB.MOM.WW.ScadaBridge.Security.Tests;
+
+public class DisableLoginRegistrationTests
+{
+    private static async Task<AuthenticationScheme?> ResolveCookieSchemeAsync(bool disableLogin)
+    {
+        var services = new ServiceCollection();
+        services.AddLogging();
+        services.AddSecurity(disableLogin);
+        await using var sp = services.BuildServiceProvider();
+        var provider = sp.GetRequiredService<IAuthenticationSchemeProvider>();
+        return await provider.GetSchemeAsync(CookieAuthenticationDefaults.AuthenticationScheme);
+    }
+
+    [Fact]
+    public async Task FlagTrue_RegistersAutoLoginHandlerUnderCookieScheme()
+    {
+        var scheme = await ResolveCookieSchemeAsync(disableLogin: true);
+        Assert.Equal(typeof(AutoLoginAuthenticationHandler), scheme!.HandlerType);
+    }
+
+    [Fact]
+    public async Task FlagFalse_RegistersCookieHandler()
+    {
+        var scheme = await ResolveCookieSchemeAsync(disableLogin: false);
+        Assert.Equal(typeof(CookieAuthenticationHandler), scheme!.HandlerType);
+    }
+}