Function TestUserAuthenticateWithDisabledUserAccount

auth/user_test.go:327–346

Must not authenticate if the user account is disabled.

(t *testing.T)

// Must not authenticate if the user account is disabled.
func TestUserAuthenticateWithDisabledUserAccount(t *testing.T) {
	base.SetUpTestLogging(t, base.LevelDebug, base.KeyAuth)
	const (
		username = "alice"
		password = "hunter2"
	)
	ctx := base.TestCtx(t)
	testBucket := base.GetTestBucket(t)
	defer testBucket.Close(ctx)
	dataStore := testBucket.GetSingleDataStore()
	auth := NewTestAuthenticator(t, dataStore, nil, DefaultAuthenticatorOptions(ctx))

	user, err := auth.NewUser(username, password, base.Set{})
	assert.NoError(t, err)
	assert.NotNil(t, user)

	user.SetDisabled(true)
	assert.True(t, user.Disabled())
	assert.False(t, user.Authenticate(password))
}

// Must not authenticate if old hash is present.
// Password must be reset to use new (bcrypt) password hash.