mirror of
https://github.com/coollabsio/coolify.git
synced 2026-11-04 10:42:23 +00:00
Aditya Tripathi
7bed78c81e
Enable Fortify passkeys (laravel/passkeys) with the @laravel/passkeys client. Users can sign in with a passkey, confirm sensitive actions with one, and add, rename, and delete passkeys on the Profile page. - Resolve the relying party for each request from the instance URL, then APP_URL, then localhost. Passkey routes return 404 on other hosts. - Add the is_passkey_enabled instance setting (Settings > Advanced). - Use a hex user handle (laravel/passkeys-server#41). - Rate limit the passkey routes by client IP. - Record audit events for registered, verified, and deleted passkeys.
40 lines
1.2 KiB
PHP
40 lines
1.2 KiB
PHP
<?php
|
|
|
|
use App\Livewire\Settings\Advanced;
|
|
use App\Models\InstanceSettings;
|
|
use App\Models\Team;
|
|
use App\Models\User;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Illuminate\Support\Once;
|
|
use Livewire\Livewire;
|
|
|
|
uses(RefreshDatabase::class);
|
|
|
|
beforeEach(function () {
|
|
$this->withoutDefer();
|
|
InstanceSettings::forceCreate(['id' => 0]);
|
|
Once::flush();
|
|
});
|
|
|
|
it('lets an instance admin turn passkeys off and keeps stored passkeys', function () {
|
|
$rootTeam = Team::factory()->create(['id' => 0]);
|
|
$admin = User::factory()->create();
|
|
$rootTeam->members()->attach($admin->id, ['role' => 'owner']);
|
|
$admin->passkeys()->create([
|
|
'name' => 'Laptop',
|
|
'credential_id' => 'credential-1',
|
|
'credential' => ['aaguid' => '00000000-0000-0000-0000-000000000000'],
|
|
]);
|
|
|
|
$this->actingAs($admin);
|
|
session(['currentTeam' => $rootTeam]);
|
|
|
|
Livewire::test(Advanced::class)
|
|
->assertSet('is_passkey_enabled', true)
|
|
->set('is_passkey_enabled', false)
|
|
->call('instantSave');
|
|
|
|
expect(InstanceSettings::findOrFail(0)->is_passkey_enabled)->toBeFalse()
|
|
->and($admin->passkeys()->count())->toBe(1);
|
|
});
|