LP#1710949: add tests for blocking after failed attempts user/gmcharlt/lp1710949_signoff
authorGalen Charlton <gmc@equinoxinitiative.org>
Fri, 1 Sep 2017 16:31:41 +0000 (12:31 -0400)
committerGalen Charlton <gmc@equinoxinitiative.org>
Fri, 1 Sep 2017 16:32:57 +0000 (12:32 -0400)
commit8755f93bfbfc11e13b8e12cefb1512072dd1cc17
treee3105eac52f0abb102859608dc989e652ca48ea9
parent1c48d6bf9a44df574cf72405b37252795c587ec1
LP#1710949: add tests for blocking after failed attempts

Enhance the live tests to verify that attempts to log in
get blocked after too many failed ones; this assumes
a stock value for block_count.

General testing plan:

[1] Use srfsh to test, e.g.,

srfsh# request open-ils.auth open-ils.auth.login {"identifier":"99999389406","password":"12345","type":"opac","org":1}

[2] Try various scenarios:

    - wrong password
    - type = staff but user doesn't have STAFF_LOGIN
    - repeated failed attempts
    - barcode is inactive
    - using "identifier" in conjunction with opac.barcode_regex set
    - using "username" or "barcode"
    - supplying a workstation name that exists
    - ... or does not
    - user is inactive
    - user is marked barrred

Signed-off-by: Galen Charlton <gmc@equinoxinitiative.org>
Open-ILS/src/perlmods/live_t/24-lp1710949-login-api.t